Damian Hickey

Damian Hickey

@damian.social

Architect | SOD/EDA | DDD | SaaS | Chief Architect & Engineering Director @DuendeSoftware | Recovering OSS contributor. Mostly. NET and dable in other ecosystems. Rugby.

680 followers467 following526 posts

Damian Hickey
@damian.social

A wee story, back in the early days when aws was S3 and EC2 and pretty much nothing else. I left a VM running for a month. 400 dollars. My fault totally. I posted on twitter (back in the day) something along the lines of "nothing like a 400 dollar bill to remind you of a running VM."

Damian Hickey
@damian.social

Thirty minutes later I get an email saying I'm getting a refund and to monitor better. Didn't ask or expect that. But still that was brilliant ustomer service.

Damian Hickey
@damian.social

Someone took the time to check my usersername name and cross reference it. In 30 within minutes from posting. Since then I've probably sent millions their way. Which is cool and all. However, seems they've lost that customer centricity.

Damian Hickey reposted

Joe DeCock
@jmdc.dev

Hey, I wrote a thing - check it out! Some good stuff in the latest version of MCP for security

Duende Software@duendesoftware.com

The new Model Context Protocol (MCP) RC is stateless! 🚀 No more tracking sessions or sticky load balancers. Deploying MCP servers just got easier. Plus, 6 new SEPs are hardening OAuth security. Read the full architectural breakdown here: duendesoftware.com/blog/2026073... #MCP #AI

Damian Hickey reposted

Stuart Lang
@stu.dev

Today I'm releasing AotAnywhere, a package which enables cross platform publishing support for dotnet NativeAOT. Before this package you had to use multiple different runners, with AotAnywhere you can publish for all targets from any single host. This is continuing the great work of @migeel.sk

Damian Hickey reposted

Duende Software
@duendesoftware.com

We've published guidance on the high-severity #aspnetcore Data Protection vulnerability, CVE-2026-40372 (Elevation of Privilege) Read our guide to: * Determine if your applications are affected * Get mitigation steps 👉️ duende.link/twe5wp #dotnet

duende.linkUpdate Guidance for CVE-2026-40372 - ASP.NET Data ProtectionGuidance on the high-severity CVE-2026-40372 vulnerability in Microsoft.AspNetCore.DataProtection. Learn how attackers can use it, check if your application is affected, and find the critical steps…
Damian Hickey
@damian.social

Recevied multiple spurious "vulnerability" reports from the crowd at @vuldb.com . Incorrect product ( what is Duende IdentityServer 4 ??) , no mentions of specific nuget package IDs, no mention of versions, no supply of system under test configuration, no mention of which...

Damian Hickey
@damian.social

...OAuth flows used, no proof of concept, using incorrect contact channel vs what is publicly published. The annoying thing is that they can raise a CVEs if not responded to which sets customer GRC sbom systems due to their mis-labelling.

Damian Hickey
@damian.social

Still rocking a 2080ti since 2018. Gonna get at least a decade out of this one.

Tom Warren@tomwarren.co.uk

Nvidia just announced DLSS 5, calling it the “most significant breakthrough in computer graphics” since the introduction of real-time ray tracing in 2018. DLSS 5 uses “real-time neural rendering” and is coming to RTX 50 series GPUs later this year www.nvidia.com/en-us/geforc...

nvidia.comNVIDIA DLSS 5 Delivers AI-Powered Breakthrough In Visual Fidelity For GamesNVIDIA DLSS 5 infuses pixels with photorealistic lighting and materials to bridge the gap between rendering and reality.
Damian Hickey
@damian.social

The thing that stood out for me on that Atlassian slack screen shot was the karma bot replying to every message with a social score. What a dystopian 'mare.

Damian Hickey
@damian.social

Here's how it works at MS. If you are shit at .NET and computers, you get demoted to the azure team. If you are shit at that, you get demoted to the SqlClient team.

Damian Hickey reposted

Duende Software
@duendesoftware.com

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet #aspnetcore

duende.linkDuende Software - Identity and Access Management for .NETWe help companies using .NET to build identity and access control solutions for modern applications.

Damian Hickey reposted

Duende Software
@duendesoftware.com

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

Damian Hickey
@damian.social

If there are only 12 months between STS and LTS what's the point? This means we'll be producing packages supporting four SDKs 8, 9, 10 for a period leading into 11. A brief period yes, but still.

Damian Hickey
@damian.social

Our docs website went down with TLS certificate errors for no discernable reason. Deleting and recreating the custom domain in azure static websites fixed it. Thanks Azure.

Damian Hickey reposted

Anders Abel
@anders.abel.nu

Know someone who would benefit from attending my OAuth 2.0 and OIDC training for free? Nominate them! Do you want the free seat yourself? Ask someone to nominate you!

Sustainsys@sustainsys.com

Do you know someone who's looking for a new position and would have use for getting some expert insights on Asp.Net Core Authentication & Authorization and OpenID Connect & OAuth 2.0? We are giving away a free seat at our workshop next week! www.linkedin.com/posts/sustai...

linkedin.comWe are hosting the Duende Software workshop on Identity & Access Control for modern Applications and APIs using Asp.NET Core online next week, starting Tuesday August 12. | SustainsysWe are hosting the Duende Software workshop on Identity & Access Control for modern Applications and APIs using Asp.NET Core online next week, starting Tuesday August 12. We still have seats open, pl...
Damian Hickey
@damian.social

Just ruined the start of my vacation ffs.

Flightradar24@flightradar24.com

Per Eurocontrol technical issues have closed the London CTA, affecting flights across the southern UK. Flights holding outside the CTA, diversions and delays are expected to mount. Greatest impact will be to Heathrow. www.flightradar24.com/multiview/3b...