Steve Syfuhs @syfuhs.net · 02/10/2026DPAPI has some key escrow behaviors against AD that let you recover corrupted intermediate keys so you can always get your data. This necessarily requires AD (or Entra too these days) because there's no other escrow entity you trust. This is why local users prompt this horrid warning. 190
Steve Syfuhs @syfuhs.net · 02/10/2026I suppose I should explain. Credential Manager, aka CredMan, aka cmdkey, is this thing. 59519
Steve Syfuhs @syfuhs.net · 17/09/2026Genuinely interested. Our terrier mix isn't bitey but she is mouthy. 110
Steve Syfuhs @syfuhs.net · 05/09/2026Ish. Entra sends down a list of SPN suffixes when the user logs in. Windows then checks that list for matching names and sends the request off to Entra. If you run `dsregcmd /status` you'll get that list in `KerbTopLevelNames`. 010
Steve Syfuhs @syfuhs.net · 22/08/2026@mementomorty.bsky.social this is on you. Best to blame Jerry, obviously. 1100
Steve Syfuhs @syfuhs.net · 16/08/2026Same with this one. Eleven this year. Still a monster going strong. Probably not as gassy as the Boston. 120
Steve Syfuhs @syfuhs.net · 16/08/2026My...what? Why didn't you people tell me I could be an influencer that does nothing and just receives gifts?? 150
Steve Syfuhs @syfuhs.net · 21/07/2026My dog is named Bruce. After Bruce Wayne. Nothing silly about him whatsoever. Not a thing. Nope. 170
Steve Syfuhs @syfuhs.net · 10/07/2026Me: Pfft, stupid sign. I'll do what I want. *attacked by birds* Me: coincidence 2110
Steve Syfuhs @syfuhs.net · 01/07/2026What are you trying to tell me Google What do you know that I don't know 290
Steve Syfuhs @syfuhs.net · 30/06/2026What's wrong with that you ask? A myriad of things, least of which is this. The crypto is easily crackable because it's fast. Usually we like fast crypto, however this is the one place we realllllly need it to be slow. Oops. Moore's Law biting us. 120
Steve Syfuhs @syfuhs.net · 30/06/2026It's a challenge response. Client tells the server "yo, I wanna auth". The server ignores the tone and says "halt, papers please". Client says "fineeeee" and does an MD4 hash of the user password, HMACs the server's challenge with the hashed password as a key and sends it back. Server ACKs. 130
Steve Syfuhs @syfuhs.net · 30/06/2026For those wondering about the specifics and don't want to watch me crack bad jokes... NTLM is bad because the crypto is...well, it's shit. MD4! It uses a fricken MD4 hash of your password as a key to sign a challenge response. 120
Steve Syfuhs @syfuhs.net · 01/06/2026Oh hey by the way. They convinced me to go to Build this year. Things are happening. Might maybe be an interesting keynote. 1140
Steve Syfuhs @syfuhs.net · 23/05/2026...because I was looking for this jerk. (33.783544, -117.999958) And then said screw it. Lets pan around and see what I remember from growing up in this area 25-37 years ago. 030
Steve Syfuhs @syfuhs.net · 23/05/2026I had searched "Forget me not hill" because I was dicking around on satellite maps and came across this curious structure and wanted to know what it was (33.918327, -117.529658) 230