iiinova — where your digital self keeps evolving

Not me, writing a wrapper script for jFrog Boost ui for my raspberry pi to forward the dynamic port so I can view the boost web ui on my iPhone, as I do most of my agentic dev there, then having to also rewrite headers cos they added a host header set to localhost.

000

Reposted by Graham

Holly Brockwell @hollyqueenofspayeds.com · 14h

If I ever win the lottery, I won't tell anyone, but there will be signs

A lovely tuxedo cat wtih perfect teeth. Because I'm rich now and can sort out all the kitty mouths

51268

Graham @cirriustech.co.uk · 30/09/2026

MSRC assessed an indirect prompt injection into Security Copilot as Low severity because consequential action still required downstream automation or human approval. That rationale gets much more absurd once security systems are explicitly designed to perceive, reason, and act autonomously.

cirriustech.co.uk

'A Human Should Check It' is Not an Agentic Security Control

MSRC assessed an indirect prompt injection into Security Copilot as Low severity because consequential action still required downstream automation or human approval. That rationale gets much more …

121

Graham @cirriustech.co.uk · 29/09/2026

“Make no mistakes” Sorted it for you. You’re welcome.

010

Reposted by Graham

Ciaran Martin @ciaranm.bsky.social · 29/09/2026

I was wrong. It’s happening

222040242

Graham @cirriustech.co.uk · 29/09/2026

I’m not bad, I’m just misaligned

100

Graham @cirriustech.co.uk · 29/09/2026

Ugh. Crappy dreams then crappy awake thoughts. No like.

000

Graham @cirriustech.co.uk · 24/09/2026

MSRC: Status - ADDITIONAL_INFORMATION_NEEDED Also MSRC: Not tellin ya what info we want tho lol

static.klipy.com

She-Ra's Psychic Gaze

ALT: She-Ra's Psychic Gaze

000

Graham @cirriustech.co.uk · 20/09/2026

Just casually spending inference to find bugs

000

Graham @cirriustech.co.uk · 19/09/2026

$1B won’t go far - a few slide decks lol

001

Reposted by Graham

Dr. Sarah Parcak @indyfromspace.bsky.social · 19/09/2026

I bet they'll do a gang bang up job

0416

Graham @cirriustech.co.uk · 18/09/2026

I spend too much time thinking about the fact there’s a Workload Identity Premium licence but no Workload Identity Standard licence

010

Graham @cirriustech.co.uk · 17/09/2026

Since iOS 27, the overlay text shortcut action won’t let me pick a font for the text. Tap on System to pick a font other than system does nothing. Existing shortcuts that have a font other than system still honour the selected font. Anyone else seeing this or found a fix/workaround?

000

Graham @cirriustech.co.uk · 16/09/2026

The curious case of a control that’s supposed to cause near real-time evaluation of the access a user has so that risky access or even just disabled accounts lose access quickly, doesn’t trigger for a mobile app & Microsoft says it’s not a priority to fix because… the user already has access…

cirriustech.co.uk

Continuous Access Evaluation: Is it really tho?

An investigation into Outlook Mobile continuing to access Exchange Online mailbox data after Conditional Access and Continuous Access Evaluation say the session should no longer be authorised.

020

Graham @cirriustech.co.uk · 14/09/2026

Good news! Your favourite progressive webapp for MVP Conference Attendance tracking still works with iOS 27! wheremymvps.at now with direct Microsoft MVP Authentication as an alternate to the original GitHub with plus bidirectional verification.

wheremymvps.at

Where My MVPs At? - MVP Conference Tracker

000

Graham @cirriustech.co.uk · 14/09/2026

Good news! Your favourite progressive webapp for GitHub Copilot usage monitoring still works with iOS 27! copelimit.netlify.app

copelimit.netlify.app

CopeLimit

000

Graham @cirriustech.co.uk · 14/09/2026

How a dedicated Azure API Management Workspace Gateway can still use the managed identity of its parent APIM service. To find out more read my latest blog post - cirriustech.co.uk/blog/apim-wo... #Azure #APIM #ManagedIdentity #WorkspaceGateway #MSRC #Microsoft

cirriustech.co.uk

Daddy Issues: When APIM Workspaces Inherit the Parent Identity

How a dedicated Azure API Management Workspace Gateway can still use the managed identity of its parent APIM service.

010

Graham @cirriustech.co.uk · 12/09/2026

In a depressed and self loathing kinda mood and can’t find an off switch

131

Graham @cirriustech.co.uk · 07/09/2026

This year, a highlight is meeting some online peeps for the first time - after many many years! More please!

020

Graham @cirriustech.co.uk · 06/09/2026

Another day another MSRC case

040

Graham @cirriustech.co.uk · 03/09/2026

Is the @virginiamedia.bsky.social VMO2 backbone screwed? VM 1 Gb fibre currently giving 560kbps and o2 4G giving 2Mbps

010

Graham @cirriustech.co.uk · 31/08/2026

So I wrote some poetry to process my grief. I did NOT expect how bleak and angry it would be. And I broke down completely when I reached the end. So I guess that means I needed this

020

Graham @cirriustech.co.uk · 31/08/2026

Station Eleven is weird

100

Graham @cirriustech.co.uk · 31/08/2026

Subscribers welcome - starting from scratch!

121

Graham @cirriustech.co.uk · 30/08/2026

Recreating my YouTube channel - given up on YouTube ever reinstating it or explaining what I did wrong! 3 old videos are back with new thumbnails. My previous disclosure videos I’ll resurrect from my laptop but I’ll also be filming videos for my upcoming disclosures on 14th and 16th September.

youtube.com

Cirriustech

020

Graham @cirriustech.co.uk · 30/08/2026

Heads up: I’ll be dropping a disclosure blog post on 14th September and another on 16th September for 2 different security issues that MSRC have closed their case on.

130

Graham @cirriustech.co.uk · 29/08/2026

Turns out Everything’s Falling wasn’t an album title. It was an incident notification. Severity: Critical Affected systems: Face, heart, structural integrity Root cause: Villarreal sisters Current status: Everything’s Falling Remediation: None available. Increase volume. The title was a warning.

020

Reposted by Graham

Odd This Day @oddthisday.bsky.social · 29/08/2026

The horn is sounded! I declare Caturday open

Someone holds out a circular hunting horn. A tortoiseshell/white cat puts its face close to it to examine it, and appears to be blowing into the mouthpiece

171019167

Reposted by Graham

Ricardo Autobahn @ricardoautobahn.co.uk · 26/08/2026

The best tribute to Dolly Parton is that she regularly and repeatedly refused to have anything to do with Piers Morgan

Piers Morgan

@piersmorgan

Follow

:

RIP Dolly Parton.

Never met her, never interviewed her (despite decades of unrequited requests) but thought she was utterly fabulous in every way.

181204623054

Reposted by Graham

kat cosgrove @kat.lol · 25/08/2026

Can someone who is a PM or otherwise in some flavor of leadership at GitHub who deeply understands the Copilot integrations please DM me? I am losing it over here

2166

Graham @cirriustech.co.uk · 25/08/2026

Today is apparently a wake up pissed off at the entire world day for reasons unknown

020

Reposted by Graham

Radical Mainiac @radicalmainiac.bsky.social · 24/08/2026

Kitty waiting for sunbeams 🤭 💜🌞😸🌞💜

1313

Graham @cirriustech.co.uk · 24/08/2026

One area of AI for good (for me at least) - I have arthritis in my left hand & de quervain syndrome in my right hand so using AI isn’t just an accelerator/force multiplier (in areas where I have domain knowledge & challenge BS), it also means less pain & strain in my hands for >= productivity.

120

Graham @cirriustech.co.uk · 22/08/2026

When vibe coding, my preferred QA methodology is: “Delete reality and see whether the README can resurrect it.” Cos agents love to suggest false reality via the passing of tests they wrote 😂

020

Graham @cirriustech.co.uk · 22/08/2026

Deep in kind, k8s, helm, docker

020

Graham @cirriustech.co.uk · 15/08/2026

@scottmcgready.bsky.social I’m at the venue stupid early so if I can be helpful lemme know

000

Graham @cirriustech.co.uk · 15/08/2026

When you arrive an hour early

000

Graham @cirriustech.co.uk · 12/08/2026

Build an agentic control plane they said, it will be easy they said…

000

Reposted by Graham

Marco Langbroek @marcolangbroek.bsky.social · 12/08/2026

Very happy with this result. Combination of #eclipse images (time lapse) with 35 mm lens, one image per 5 minutes, from #Leiden, the Netherlands. Old Leiden Observatory bottom right.

382581501

Graham @cirriustech.co.uk · 10/08/2026

Next time someone tries to pretend User Agent is a solid security control…

000

Reposted by Graham

Lisa Forte @lisaforte.bsky.social · 10/08/2026

It’s crazy to think this little girl’s dream was to log into Microsoft Authenticator 20 times a day and answer whether she’s “enjoying” outlook and would recommend it to friends Living the dream

931540