Listen to a summary of all the sessions at IndieWebCamp Berlin 2018!
Session notes: https://indieweb.org/2018/Berlin/Sessions
Narration by Marty McGuire
Edited by Aaron Parecki
Aaron Parecki
Hi, I'm Aaron, co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and am the editor of several W3C specfications. I record videos for local conferences and help run a podcast studio in Portland.
I wrote 100 songs in 100 days! I've been tracking my location since 2008, and write down everything I eat and drink. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.
-
"I treat Instagram stories like a disposable visual Twitter" - @anomalily
-
Yet another example of why SMS is terrible for 2fa and account recovery.
"the database — running on Amazon’s Elasticsearch — was configured with a Kibana front-end, making the data within easily readable"
https://techcrunch.com/2018/11/15/millions-sms-text-messages-leaked-two-factor-codes/ -
whoa I've never been in a plane that's pulled out of the gate by making a u-turn and driving forwards before #tinyplane #travel
-
Woke up this morning to find a bunch of my @kmikeym shares sold, and while I was trying to figure out where the sudden influx was from, watched my iPhone 6S battery drain from 100% to 70% in a matter of minutes.
Decided to use the @kmikeym bux to buy a new phone. An hour later, I have a new iPhone XS in hand, thanks to the magic of the internet and Postmates couriers. And thus begins my life without a headphone jack. -
Alright, I think we can call it. Between @tlodderstedt's OAuth Security Best Practices and OAuth 2.0 for Browser Apps, the Implicit Flow is dead.
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-09
https://tools.ietf.org/html/draft-parecki-oauth-browser-based-apps-00
https://medium.com/@torsten_lodderstedt/why-you-should-stop-using-the-oauth-implicit-grant-2436ced1c926
