@mwpreston

Technical Marking Architect @RubrikInc | Husband, Father, Toronto VMUG Leader, VCP4/5, VCAP5-DCA, ,vExpert, vBlogger @ https://xitter.cf/t.co/xDqZhS1YFJ - and Go Habs Go!

 Belleville, Ontario
blog.mwpreston.net
Joined December 2008
  • Tweets13.4K
  • Following1.2K
  • Followers3.4K
1KMedia
The most granular RBAC ever!
Eric Wright
@discoposseSep 15
The more I do with SharePoint and Google Drive, the more I miss the elegant simplicity and granular controls of Novell filesystems. Selective presentation was, and would still be, the best feature for simple file browsing. As much we work in the web UI, hierarchical folder structures suck on any modern filesystem.
2
7
266
Mike Preston retweeted
spencer
@techspenceSep 10
Entra and Active Directory share the SAME design flaw. It’s designed in a way where it’s assumed that IT Admins know better. Lots do. But many do not.
1
10
1
121
7,524
That image though - seems like he’s getting away with something
SP1D3R@SP1D3R_V3N0MSep 9
Replying to @roywoodjr
@roywoodjr
1
140
3k. Ooooph!
107
I feel like I’m in an endless loop of upgrading espresso machines at home, just to bring the old one to the lake. But then the one at home is so much better, so we upgrade it, so we can bring the one from home to the lake, but then…
2
1
227
1
37
Also, been a while :)
15
Like why can’t we thumbs up a thumbs up? Come on @Apple - channel your inner snark!
Corey Quinn
@QuinnyPigJan 22
Today’s power move: when arguing with someone via text, like your own messages.
2
169
Ah dang. Looks like a new telnetd vulnerability on the loose 🪲 Once your done patching up this servers be sure to head downstairs and unplug all the fax machines! theregister.com/2026/01/22/r…

Ancient telnet bug happily hands out root to attackers

: Critical vuln flew under the radar for a decade

theregister.com
3
102
There are so many “hills to die on” and little camps within IT. Hate to say it, but if you use “rm -rf” instead of “rm -fr”, well, I think you are a psychopath!!!
1
64
It felt off just typing it for this tweet
1
40
Ivan Demidov is unreal!
137
💻 A while back, I had some concerns about AI. Mostly, my lack of knowledge around a tool that I am using daily. I said it would most likely become my next rabbit hole. 🐰 Well, I have started digging and would love for you to join me! I’m sharing what I’m learning as I go in two places: 📖 Learn AI With Me (the written lessons + code) 📺 Mike Knows Nothing About AI (the matching video walkthroughs) Lesson 1 is now live: Foundations It covers LLM basics, like, really basic, like, "why is the answer different every single time" basic. I try to explain exactly how an LLM differs from software that we are traditionally used to! If you are curious and want to learn alongside me: 📌 GitHub lesson: lnkd.in/eg4Sy7Ca 🎥 YouTube video: lnkd.in/eQDtUCAk If you watch or read it, I’d love feedback. What felt confusing, what should I simplify, what am I missing? Lesson 2 which deals with tokens will be along shortly!

LinkedIn

This link will take you to a page that’s not on LinkedIn

lnkd.in
1
107
Here is an easier one
66
Anyone want to take a crack at it?
66
Seen a few posts now complaining that OpenAI copied Google with translate. Seems like a pretty mundane topic to copy. If that’s the case I mean, did they both copy Marriam-Websters?
59
Mike Preston retweeted
Bipul Sinha
@bipulsinhaJan 16
It was a pleasure catching up with you on @MadMoneyOnCNBC, @JimCramer! I loved speaking with you on how @RubrikInc helps our customers achieve cyber resilience and deploy trusted AI agents with confidence.
2
4
11
1,545
Two missing characters, one horrible result 😬 Wiz shared a supply chain risk tied to AWS CodeBuild + GitHub that (in the worst case) could’ve ended with an attacker gaining control of your repos. Here’s what went wrong... 🧵👇 Some CodeBuild projects used a webhook filter based on GitHub ACTOR_ID (GitHub account ID) and compared it using a regex allow-list. But the regex wasn’t anchored (basically missing ^ and $), so it behaved like a substring match instead of an exact match. 🔓 So in essence, an adversary could… 🧨 🔍 Learn which IDs are “trusted” from the exposed/observable pipeline configuration tied to the project. 👥 Create lots of GitHub identities until one ends up with a numeric ID that contains a trusted ID as a substring. Basically, if an approved ID was 1234, a user with an ID of 584912343939 would word as 1234 is in the string. Wiz used automation to speed this up. 🎰 🧾 Open a PR from that identity. ⚙️ In turn, that triggered a CodeBuild run (because the substring match passes the allow-list check). 🕵️ Abuse the build context to grab GitHub credentials/tokens from the build environment/process. 🔑 Use those creds to wreak havoc on the GitHub Org, setting up a classic supply-chain nightmare 💣 AWS patched this up quickly and found no evidence of exploitation ✅ The lesson 🧯 Treat CI like production: 🔐 least-privilege tokens 🧑‍⚖️ approval gates for privileged builds and of course, 💾 Backup + Recovery for your GitHub org (and actually test restores) If you’re thinking about this from a resilience angle, this is why solutions like Rubrik exist. 🧊🛟 Stay safe out there ✌️ wiz.io/blog/wiz-research-cod… rubrik.com/solutions/github

CodeBreach: Supply Chain Vuln & AWS CodeBuild Misconfig | Wiz Blog

Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.

wiz.io
1
52
Em Dash per Answer
vmiss
@vmiss33Jan 14
IOPS are dead. In AI, tokens are the unit of measurement that actually matters. A token is a chunk of text. Sometimes a word, sometimes part of one. Models do not read sentences. They read tokens. They generate tokens. Everything is counted in tokens. That is why performance is tokens per second.
71
No matter what OpenAI and I talk about there is always one thing that is 100% clear - I am the smartest, most creative person the model has ever interacted with. And every idea I have is just so great!
48
Load more