iiinova — where your digital self keeps evolving

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

Full paper available here (requires registration): www.scitepress.org/Link.aspx?do...

scitepress.org

SCITEPRESS

Digital Library

000

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

3. OST developers do consider ethical questions, and they tend to view the positive consequences as outweighing the negatives.

scitepress.org

SCITEPRESS

Digital Library

100

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

2. OST developers are motivated by the positive consequences of publishing their tools (see the picture). In essence, they are not primarily interested in money, although publishing OSTs can make them well known in the industry.

scitepress.org

SCITEPRESS

Digital Library

100

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

Summary of findings: 1. There is no single path to becoming an OST developer; educational background does not necessarily matter. However, university studies have helped some in their research.

scitepress.org

SCITEPRESS

Digital Library

100

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

The paper is titled "Inside Hackers' Minds: A Qualitative Study of Offensive Security Tool Developers", and it seeks to understand people behind OSTs used by thousands globally every day.

scitepress.org

SCITEPRESS

Digital Library

100

Dr Nestori Syynimaa @drazuread.com · 27/05/2026

Last week I presented at #ICEIS conference in Benidorm 🇪🇸 the final research paper related to my PhD studies at University of Jyväskylä.

110

Dr Nestori Syynimaa @drazuread.com · 01/04/2026

Finally, I decided to monetize #AADInternals and created an OnlyFans account! If you like to see some really cool content and give support, take a look and subscribe here: onlyfans.aadinternals.com

271

Dr Nestori Syynimaa @drazuread.com · 09/03/2026

Thanks to all the hackers who participated in the interviews; the world will now have a better understanding of the great minds behind the offensive tools used daily by thousands!

010

Dr Nestori Syynimaa @drazuread.com · 09/03/2026

Got some great news last week! My research paper titled "Inside Hackers' Mind: A Qualitative Study of Offensive Security Tool Developers" was accepted to be presented at the iceis.scitevents.org conference at the end of May 🎉

170

Dr Nestori Syynimaa @drazuread.com · 23/02/2026

Getting ready for #ELDK2026! I've got some #AADInternals stickers, just come and say hi to get one. The first one will also get a rare challenge 🪙!

000

Dr Nestori Syynimaa @drazuread.com · 19/02/2026

Folks, there's an interesting security community call next week on Mon Feb 23rd at 8am PST (I'll be speaking too): "Identity Control Plane Under Attack: Consent Abuse and Hybrid Sync Risks" Register now 👉 aka.ms/securitycomm...

041

Dr Nestori Syynimaa @drazuread.com · 10/12/2025

If you see this guy in #BöavkHayEurope, come say hi to get your #AADInternals sticker or the official "The non-US tour 2025" shirt!

000

Dr Nestori Syynimaa @drazuread.com · 20/10/2025

Heading to Buenos Aires, wish me luck 😬

140

Dr Nestori Syynimaa @drazuread.com · 13/10/2025

There's some room for sure!

000

Dr Nestori Syynimaa @drazuread.com · 03/09/2025

One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!

091

Reposted by Dr Nestori Syynimaa

Disobey_Fi @disobeyfi.bsky.social · 05/08/2025

You know you want to speak at Disobey 2026. And now is your chance to do that! Our CfP is open at: cfp.disobey.fi/disobey-2026/ Check the guidelines from the link and send your proposal by Sep 30th!

0117

Dr Nestori Syynimaa @drazuread.com · 01/08/2025

Checking pre-vacation research notes..

030

Dr Nestori Syynimaa @drazuread.com · 11/07/2025

Congratulations to all who renewed their Microsoft MVP status for the next year 🎉🔥

061

Dr Nestori Syynimaa @drazuread.com · 04/07/2025

Updated to include RomHack: www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org romhack.io www.blackhat.com/sector/2025/

010

Dr Nestori Syynimaa @drazuread.com · 04/07/2025

My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September! www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org www.blackhat.com/sector/2025/

120

Dr Nestori Syynimaa @drazuread.com · 27/06/2025

Slides from my @wearetroopers.bsky.social talk are available at aadinternals.com/talks

060

Dr Nestori Syynimaa @drazuread.com · 25/06/2025

And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it

051

Dr Nestori Syynimaa @drazuread.com · 23/06/2025

✅️ slide deck ✅️ demos ✅️ stickers ✅️ challenge coins ✅️ running shoes All ready for the TROOPERS 2025 @wearetroopers.bsky.social

070

Reposted by Dr Nestori Syynimaa

Ru Campbell @campbell.scot · 20/06/2025

New video: Had a cool run through with @lukasberancz into the kind of gaps DART identify commonly in incident response, then a deeper dive on hardware based credential providers like macOS Platform SSO. WATCH: youtu.be/qZV3IeWsRd0

071

Dr Nestori Syynimaa @drazuread.com · 03/06/2025

Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎

010

Dr Nestori Syynimaa @drazuread.com · 20/05/2025

The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘

0160

Dr Nestori Syynimaa @drazuread.com · 16/05/2025

After some testing, there is a clear bug to be fixed, but also something else I still need to figure out.

110

Dr Nestori Syynimaa @drazuread.com · 13/05/2025

Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️

070

Dr Nestori Syynimaa @drazuread.com · 11/05/2025

Ran this route in Oxford last time 10 years ago.

040

Dr Nestori Syynimaa @drazuread.com · 11/05/2025

It seems that it can get the password for the MSA account, but starting the service as MSA fails. Need to do some debugging.

100

Dr Nestori Syynimaa @drazuread.com · 10/05/2025

One clear sign of getting old is when your Inspector Morse pub crawl ends after the second stop 🥱

140

Dr Nestori Syynimaa @drazuread.com · 10/05/2025

Getting ready for #TROOPERS 10k: Morning 🏃‍♂️‍➡️ around the Hyde Park!

050

Dr Nestori Syynimaa @drazuread.com · 18/04/2025

To get CAE tokens, use -CAE switch when getting access tokens. The resulting token has longer validity period (if supported by the service) and xml_cc claim.

000

Dr Nestori Syynimaa @drazuread.com · 18/04/2025

Token Protection allows getting tokens with PRT and session key. As tokens are encrypted, they can't be stolen with AitM (sorry @mrgretzky.breakdev.org)

100