Sahil Malik (@sahilmalik) 's Twitter Profile
Sahil Malik

@sahilmalik

Ex-MVP, Ex-MSFT, Ex-Meta, into Security and AI. My tweets are for pure entertainment purposes, nobody should read them.

ID: 14738380

calendar_today12-05-2008 00:18:00

17,17K Tweet

3,3K Takipçi

28 Takip Edilen

Shyam Sankar (@ssankar) 's Twitter Profile Photo

1/ We are in an undeclared state of emergency. America's adversaries are circling, and the American industrial base that dominated the 20th century is dormant. For the CCP, it is not enough for China to prosper... America must fall. It's time to Mobilize. Coming March 2026.

1/ We are in an undeclared state of emergency.

America's adversaries are circling, and the American industrial base that dominated the 20th century is dormant.

For the CCP, it is not enough for China to prosper...
America must fall.

It's time to Mobilize. Coming March 2026.
Sahil Malik (@sahilmalik) 's Twitter Profile Photo

Here is the situation around #AI 1. USA has the chips and intelligence. 2. China has the energy and rare earths. 3. Europe has all the regulations.

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

A big + of FIDO2 is phish resistance. Unfortunately Microsoft #EntraID devalues this cuz https://../t1/oauth2/v2.0/authorize and https://../t2/oauth2/v2.0/authorize are considered the same origin, so you are still phishable between tenants. Another negative is UX like this -

A big + of FIDO2 is phish resistance. Unfortunately Microsoft #EntraID devalues this cuz

https://../t1/oauth2/v2.0/authorize
and
https://../t2/oauth2/v2.0/authorize

are considered the same origin, so you are still phishable between tenants.

Another negative is UX like this -
Sahil Malik (@sahilmalik) 's Twitter Profile Photo

An easy fix would be to allow custom domains instead of "login.microsoftonline.*" The UX below gets really ugly once you manage 10-20 tenants. The phishing is mitigated by [email protected] where you control the domain, but that does not feel "secure by default".

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

I don't read articles anymore. I use AI to summarize key points. I'm sure part of this is me being lazy, but articles are also written with so much fluff lately to increase word count. They use AI to increase word count, I use AI to reduce word count. WTF

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

If ur thinking of getting a Doberman because a Doberman won a show. It’s the best breed. But it’s not for everyone, it takes a lot of work, attention, care and expense. A dog is not a toy. Definitely don’t get one if you don’t have a yard or are a first time dog owner.

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

I wrote a jwtdecoder for fun that runs 100% locally and needs no setup. github.com/maliksahil/jwt… Download the dist/index.html file locally and double click it to run.

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

What are the chances that we will see an MCP Server for #EntraID so we can ask questions instead of tinkering with MSGraph and whatever excuse for documentation there is?

Sahil Malik (@sahilmalik) 's Twitter Profile Photo

Do you have any tips when it comes to reviewing long complex git prs that have gone through a lot of back and forth and lots of comments? I get lost in versions, files, comments and takes me forever to understand what is going on.