Latest / The Identity Blueprint

Why Your Web Firewall Is an Inside Threat
Send us Fan Mail
The attacker never had a password. They just asked a piece of hardware a simple question, and it handed over the keys to 700 storage buckets — because nobody had drawn a hard line between proving who someone is and deciding what they're allowed to touch.
In this episode, Ernie and Josée break down the real architectural divide behind that failure: Microsoft Entra ID as the passport office that verifies who you are, and AWS IAM as the mechanical locksmith that's never once asked. We trace how SCIM keeps the two in sync automatically, like an aggressive HR department for the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.