JWT on Myles Nieman — Bloghttps://blog.msnieman.com/tags/jwt/Recent content in JWT on Myles Nieman — BlogHugoen-usSun, 12 Apr 2026 00:00:00 +0000Deputyhttps://blog.msnieman.com/writeups/deputy/Sun, 12 Apr 2026 00:00:00 +0000https://blog.msnieman.com/writeups/deputy/A exposed .git directory leaks Terraform IAM ARNs; a case-sensitivity bug in the event-role API lets those ARNs cross account boundaries, eventually reading a DynamoDB record that contains credentials — which chain through the app to a root password.