Aaron Parecki

Wednesday, August 8, 2018

• 
• 

  9:54pm

  Asleep

  5:04am

  Awake

  7h 10m

  Slept

  13m

  Awake for

  

  Portland, Oregon, USA

  Wed, Aug 8, 2018 5:04am -07:00
• Khor https://twitter.com/neth_6   •   Aug 8

  Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
  

  Good question! The OAuth Authorization Code flow doesn't require a secret either. For example mobile apps can't use a secret, but still use the Auth Code flow. There are many benefits to the Auth Code flow over Implicit, I wrote some about that here https://developer.okta.com/blog/2018/05/24/what-is-the-oauth2-implicit-grant-type#when-to-use-the-implicit-grant-type

  Portland, Oregon, USA • 64°F

  3 replies

  Wed, Aug 8, 2018 6:25am -07:00
• Khor https://twitter.com/neth_6   •   Aug 8

  Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
  

  Without the secret, there is no authentication of the client. PKCE solves this by using essentially an on-the-fly secret safe for use by mobile apps. IndieAuth *could* adopt the PKCE extension as well, tho afaik noone has done that yet.

  Portland, Oregon, USA • 64°F

  Wed, Aug 8, 2018 6:26am -07:00
• Khor https://twitter.com/neth_6   •   Aug 8

  Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
  

  But, most importantly, the fact that IndieAuth uses a URL for the client ID means that you *do* authenticate the client in the initial Auth Code request, since the redirect URL has to match the domain or be registered. That's an improvement over OAuth with no secret.

  Portland, Oregon, USA • 64°F

  1 like 1 reply

  Wed, Aug 8, 2018 6:28am -07:00
• Khor https://twitter.com/neth_6   •   Aug 8

  The link you shared is for Implicit? Implicit does not use client secret. Does this mean IndieAuth is more similar to Implicit than Auth Code but is more secure as the client id has to be redirect uri?
  

  Regular OAuth 2.0 also supports the Authorization Code flow with no secret. In fact, many companies recommend Auth Code w/no secret instead of Implicit.
  
  IndieAuth is like taking Auth Code w/no secret and adding back some layers of security because of the client ID being a URL.

  Portland, Oregon, USA • 64°F

  1 like 1 reply

  Wed, Aug 8, 2018 7:42am -07:00
• Andy McIlwain https://andymci.com

  Shoutout to @indiewebcamp #indieweb from @jeckman. Smaller communities like this pushing for an open web. They need help bridging the gap w/ non-technical users. #wcpub

  

  Portland, Oregon • 75°F

  Wed, Aug 8, 2018 4:52pm +00:00 (liked on Wed, Aug 8, 2018 9:55am -07:00) #indieweb #wcpub
• Andy Baio https://xoxo.zone/@andybaio

  The indieweb is looking better and better every day.

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 6:07pm +00:00 (liked on Wed, Aug 8, 2018 12:13pm -07:00)
• Andy Baio https://xoxo.zone/@andybaio   •   Aug 8

  Is there any way to post a message SOLELY to your local timeline? That would be pretty cool.
  

  I was actually just thinking the same thing but addressing a specific server. I wanted to say hi to all the xoxo.zone people but my account is on my own website!

  Portland, Oregon, USA • 82°F

  Wed, Aug 8, 2018 12:15pm -07:00
• Pelle Wessman http://voxpelli.com

  The IndieWeb currently also breaks apart the different areas of responsibility in a way that I so far haven’t seen Mastodon do. In the IndieWeb you can have one application for posting content, one for hosting your content and presenting it to the world, a third to read posts etc

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 6:35pm +00:00 (liked on Wed, Aug 8, 2018 12:22pm -07:00)
• Darius Kazemi https://social.tinysubversions.com/@darius

  Here's an article about fun bot makers leaving Twitter. Both @aparrish and I are interested in it. https://slate.com/technology/2018/08/twitters-new-developer-guidelines-might-end-fun-bot-accounts.html

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 7:33pm +00:00 (liked on Wed, Aug 8, 2018 12:35pm -07:00)
• Eugen https://mastodon.social/@Gargron

  The thing to remember is that at some point in recent past nobody knew what e-mail was and people had to learn about. And before that personal computers were new and folks had to learn how to use them.

  Not everything can be reduced to what you already know! Mastodon requires a tiny bit of extra knowledge because it differs from other social media platforms.

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 7:39pm +00:00 (liked on Wed, Aug 8, 2018 12:41pm -07:00)
• Allison Parrish https://mastodon.social/@aparrish

  @Gargron whenever people use the argument that mastodon is somehow "too complicated" I like to encourage them to do a web search for "how to use facebook." there's like a gazillion tutorials, videos, online classes, training seminars, etc. the alternatives aren't inherently less complicated—it's just that tech folks have come to accept the way they work as the "default" and so that complication is invisible to them.

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 7:46pm +00:00 (liked on Wed, Aug 8, 2018 12:49pm -07:00)
• if these LA cats can fly even I will adopt one.

  

  Portland, Oregon • 82°F

  Wed, Aug 8, 2018 12:08pm -07:00 (liked on Wed, Aug 8, 2018 12:55pm -07:00)
• XKCD https://xkcd.com/

  Voting Software

  

  Portland, Oregon • 84°F

  permalink (liked on Wed, Aug 8, 2018 1:27pm -07:00)
• Andy Baio https://xoxo.zone/@andybaio

  The indieweb is looking better and better every day.

  Wed, Aug 8, 2018 6:07pm +00:00 (reposted on Wed, Aug 8, 2018 1:50pm -07:00)
• Weird little piece of trivia I happen to know: in How I Met Your Mother, whenever Marshall (Jason Segel) travels to visit his family, they use a clip of PDX to stand in for MSP. (I studied a freeze frame, and you can totally see the word PORTLAND over the entry.)

  Portland, Oregon • 88°F

  Wed, Aug 8, 2018 2:26pm -07:00 (liked on Wed, Aug 8, 2018 2:31pm -07:00)
• Expecting a lot of new Micro.blog users over the next few weeks. This week: Twitter mismanages how to deal with Alex Jones and Infowars. Next week: Twitter streaming API gets shut down for third-party developers.

  Portland, Oregon • 88°F

  Wed, Aug 8, 2018 4:43pm -05:00 (liked on Wed, Aug 8, 2018 2:48pm -07:00)
• Jonathan LaCour https://cleverdevil.io

  The service itself isn’t, but it’s built entirely on top of open standards like RSS, JSON Feed, Webmention, Microformats 2, Micropub, and other #IndieWeb tech. It’s the open web as it’s meant to be!

  Portland, Oregon • 88°F

  Wed, Aug 8, 2018 10:01pm +00:00 (liked on Wed, Aug 8, 2018 3:01pm -07:00) #IndieWeb
• Jonathan LaCour https://cleverdevil.io

  That said, there has never been a better time to join the #IndieWeb and http://Micro.blog has made it easier than ever before. I can’t recommend it enough.

  Portland, Oregon • 88°F

  Wed, Aug 8, 2018 10:02pm +00:00 (liked on Wed, Aug 8, 2018 3:03pm -07:00) #IndieWeb
• Ben Balter http://Ben.Balter.com   •   Aug 8

  What do people use these days to plan complex, multi-stop personal travel? Are travel agents still a thing? Some fancy new app? Just internet a bunch and book it yourself?
  

  Google flight search + a cocktail + a few hours on the couch

  Portland, Oregon, USA • 90°F

  Wed, Aug 8, 2018 3:48pm -07:00
• Aug 8

  Expecting a lot of new Micro.blog users over the next few weeks. This week: Twitter mismanages how to deal with Alex Jones and Infowars. Next week: Twitter streaming API gets shut down for third-party developers.
  

  Seems like a good opportunity to make a tweet archive import for micro.blog! I'm seeing a lot of people deleting their tweets after downloading their archive.

  Portland, Oregon • 91°F

  Wed, Aug 8, 2018 4:14pm -07:00
• Darius Kazemi http://tinysubversions.com

  100% related to this article that I'm going to try really hard to turn this into a promo-only account from now on. ("promo" meaning "promoting interesting projects or information"). If you want to engage with me as a person, follow me on Mastodon. (1/5)
  https://twitter.com/tinysubversions/status/1027270383181811713

  Portland, Oregon • 91°F

  Wed, Aug 8, 2018 10:46pm +00:00 (liked on Wed, Aug 8, 2018 4:22pm -07:00)
• manton https://micro.blog/manton   •   Aug 8

  @aaronpk There is a tweet import! But I want to rethink it, because often importing thousands of tweets kind of overwhelms the normal blog posts. I may disable it until I can separate tweets out better.
  

  ah yeah, having everything in one list would definitely get overwhelmed with tweets! A simple way to start might be to have a separate page on the site that has a list of only articles.

  Portland, Oregon • 91°F

  Wed, Aug 8, 2018 4:24pm -07:00
• 

  at The Pixie Project

  Portland, Oregon • Wed, August 8, 2018 5:57pm

  45.52674 -122.661552

  Time to film some kittens! — with anomalily

  Portland, OR, United States • 91°F

  anomalily.net

  1 like 36 Coins

  Wed, Aug 8, 2018 5:57pm -07:00
• Fire up your RSS reader. #BackToBlogging

  Portland, Oregon • 83°F

  Thu, Aug 9, 2018 12:28am -04:00 (liked on Wed, Aug 8, 2018 9:38pm -07:00)
• 

  Contributions from: Germany, United Kingdom, United States

  Wed, Aug 8, 2018 10:24pm -07:00