Top all-time · #6107
dirkjanm.io
Personal blog · dirkjanm.iosecuritysystems
dirkjanm.io is a personal blog at dirkjanm.io about security and systems. Since 2019, 12 different Hacker News readers have linked it 12 times, most often “One Token to rule them all – Obtaining Global Admin in every Entra ID tenant”. It is still writing: the last post was on 2026-08-05, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link this security research blog's post on obtaining global admin in every Entra ID tenant, an Azure vulnerability writeup. Comments cite it as a source in discussions of Microsoft cloud security.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Dirk-jan’s personal blog, mostly containing research on topics I find interesting, such as (Azure) Active Directory internals, protocols and vulnerabilities.
Most-linked posts?
- One Token to rule them all – Obtaining Global Admin in every Entra ID tenant6 people · 6 mentions · first linked 2025-09-17
- The worst of both worlds: Combining NTLM Relaying and Kerberos delegation2 people · 2 mentions · first linked 2019-03-09
- Abusing Exchange: One API call away from Domain Admin2 people · 2 mentions · first linked 2019-01-22
What Hacker News says?
Yeah, wasn't essentially every Azure resource wide open for exploitation until august of this year? https://dirkjanm.io/obtaining-global-admin-in-every-entra-id...
Comment linking /obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
on “Okta's NextJS-0auth troubles”Submitted One Token to rule them all – Obtaining Global Admin in every Entra ID tenant as a story · 331 points
HN discussionafter this whopping great vulnerability in Azure, anything there prior to that being fixed should be considered public anyway: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id...
Comment linking /obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
on “Microsoft Can't Keep EU Data Safe from US Authorities”Submitted Abusing Exchange: One API call away from Domain Admin as a story · 67 points
HN discussionWhy not linking to the original site: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id...
Comment linking /obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
on “The god mode vulnerability that should kill "Trust Microsoft" forever”Submitted Obtaining Global Admin in Every Entra ID Tenant as a story · 23 points
HN discussionThis one from a year ago? https://dirkjanm.io/obtaining-global-admin-in-every-entra-id... "This vulnerability could have allowed me to compromise every Entra ID tenant in the world (except probably those in national cloud deployments)."
Comment linking /obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
on “CosmosEscape: Taking over Every Database in Azure Cosmos DB”Submitted Abusing Exchange: One API Call Away from Domain Admin as a story · 13 points
HN discussionSubmitted Exploiting CVE-2019-1040 – Combining Relay Vulns for RCE and Domain Admin as a story · 3 points
HN discussionSubmitted The worst of both worlds: Combining NTLM Relaying and Kerberos delegation as a story · 2 points
HN discussionSubmitted A different way of abusing Zerologon (CVE-2020-1472) as a story · 1 points
HN discussionSubmitted The Worst of Both Worlds: Combining NTLM Relaying and Kerberos Delegation as a story · 1 points
HN discussion
