Pretty sure F1 would be far more interesting with a Dacia or two ploddin' around the circuits.

We've published guidance on the high-severity #aspnetcore Data Protection vulnerability, CVE-2026-40372 (Elevation of Privilege) Read our guide to: * Determine if your applications are affected * Get mitigation steps 👉️ duende.link/twe5wp #dotnet

playwright on .net is a tire fire github.com/microsoft/pl...

Recevied multiple spurious "vulnerability" reports from the crowd at @vuldb.com . Incorrect product ( what is Duende IdentityServer 4 ??) , no mentions of specific nuget package IDs, no mention of versions, no supply of system under test configuration, no mention of which...

OpenCode 😬

Still rocking a 2080ti since 2018. Gonna get at least a decade out of this one.

The thing that stood out for me on that Atlassian slack screen shot was the karma bot replying to every message with a social score. What a dystopian 'mare.

Best six nations... ever?

Haven't done an OSS project in quite some time; scratched an itch with this one. An HTTP caching handler (for .NET HTTP Client) based on HybridCache. Am kicking the tyres on this so let's see if it works/sticks. github.com/damianh/http...

Here's how it works at MS. If you are shit at .NET and computers, you get demoted to the azure team. If you are shit at that, you get demoted to the SqlClient team.

Using OpenCode? This is a *nice* plugin. tryweave.io . Dev'd by @pgermishuys.bsky.social . 🫡

The agents are hammering GitHub.

Data sovereignty has been a thing forever. Technology sovereignty is the thing, now.

"I'm so forward looking I can't remember what I achieved last year" lmao

CDKTF was garbage anyway.

Seems that none of the stores in Netherlands have had any stock of Guinness for several weeks now. Christmas is RUINED.

Is F# still a thing?

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet #aspnetcore

Completed Halo CE split screen with daughter last week. Guess we'll be doing it again. :)

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

Been fun digging into Passkeys lately. Starting a 4-post series... #dotnet #aspnetcore #identity duende.link/p455k3y

I'm hiring! Looking for an #aspnetcore dev, ideally with identity/oidc experience. Role is support, tech presales, advisory, docs, ... East coast US ideally for timezone overlap in the team Small team and company, big ambition. Reach out if you're interested! duendesoftware.com/careers/cust...

SQL Server on arm64 is a bit of a hot mess for devs eh.

If there are only 12 months between STS and LTS what's the point? This means we'll be producing packages supporting four SDKs 8, 9, 10 for a period leading into 11. A brief period yes, but still.

How is nancyfx.org website still running lol

Are AI agents beholden to RTO policies?

We're hiring! At @duendesoftware.com, we're looking for someone to join our Customer Success team. It's a 100% remote position but we are looking for someone based in the US East Coast region for time zone reasons. If you're interested, visit duendesoftware.com/careers/cust... for details! #hiring

Our docs website went down with TLS certificate errors for no discernable reason. Deleting and recreating the custom domain in azure static websites fixed it. Thanks Azure.

"Microsoft’s CoreAI team is a new engineering group led by former Meta executive Jay Parikh" Fucking Meta lol. GitHub enshitifcation starts now.

The enshitification of GitHub begins.

Know someone who would benefit from attending my OAuth 2.0 and OIDC training for free? Nominate them! Do you want the free seat yourself? Ask someone to nominate you!

Just ruined the start of my vacation ffs.

No s-pen support galaxy fold 7. 😤 Been a user of since the first Note. 13 years of upgrades since. Deal breaker. No buy.

Interesting question by @damian.social - What are you using for user management in #aspnetcore? #dotnet github.com/orgs/DuendeS...

It’s probably not a very popular opinion but teamwork requires a disproportionate amount of effort compared to solo work. Communication overhead, differences of opinions, alignment, etc. suck so much energy out of the individual experience. It’s rare to read up on any of that.

How I got involved in the Backend for Frontend (BFF) spec? @philippederyck.bsky.social built a demo to show how insecure single-page applications can be! Full interview: youtu.be/urS9wstmN2U More on Backend for Frontend: duende.link/bff #dotnet #security #bff #oauth2

Interesting time to have the entirety of NATO leadership in town.

lmao www.reddit.com/r/Experience...

This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications. Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcore

In recent weeks, some of our customers reported performance degradations. You won't believe what happened next 😱 Clickbait aside, #efcore, SqlClient, and transient retries don't always go well together. More on our blog! duende.link/1khti3w #dotnet #identityserver #azure

Microsoft.Data.SqlClient is such a tire fire of a package lol

Just did a big rewrite of a docs page on dynamic identity providers in @duendesoftware.com #identityserver. That was fun to dive in, and makes me appreciate the thought put in to designing both #aspnetcore and IdentityServer itself. docs.duendesoftware.com/identityserv... #dotnet #security #oauth

Been studying AspNet Identity and... I don't like it. Not one bit. That UserManager is an absolute beast. Service location, dubious non-transactional operations, exception based flow of control etc. My inner DDD is screaming.

Kicking off our Open Source Sponsorship program this quarter, where our developers picked a project we'll sponsor for 12 months: 🙌 Shouldly Assertion Framework We're using it ourselves, and here's why you may want to: duende.link/w4whryh #dotnet #testing

Using VSCode Agent mode (Copilot, Sonnet3.7) I attempted to "vibe" code a small library to handle the Cache-Status header (RFC9211) in C#/AspNetCore to see what all the fuss was about. It was a disaster. Used/retained zero of the output.

Fresh Duende.AccessTokenManagement release candidate! 🔑 Named keys for IDistributedCache injection 💸 HybridCache (preview) 📊 Open Telemetry metrics, logs and traces 🏕️ Externalized cache key generation 🎉 and more! github.com/DuendeSoftwa... #dotnet #oidc #security

Secure your #VueJS apps with OpenID Connect & the BFF pattern! 🔒 We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together. duende.link/eshdrq4 #Security #OAuth2 #OpenIDConnect #dotnet

Companies won't do shit mate.

Reviving LibLog as a commercial product BRB.

A common attack web devs need to guard against is Cross-Site Request Forgery (CSRF). 🦸‍♀️ Anti-Forgery tokens to the rescue! Let's see how they work in more detail 👇 duende.link/wk7e6sg #dotnet #aspnetcore