Aaron Parecki

Continuing last weekend's documentation of all the un-specified parts of OAuth 2.0, things were going pretty well until I hit the "Security Considerations" section, which basically recommends but doesn't require a whole bunch of things. Basically this means an API can be fully OAuth 2.0 compliant and also completely insecure.

If you want to know more, keep an eye out for this blog post. Or hire me as an independent OAuth consultant and I'd gladly spend a day with you.

Currently documenting all the ways the OAuth 2.0 framework leaves choices up to the implementor. The list is long. #oauth2

The comments on this "hacking a Gmail account with just a phone number" article make me reconsider using SMS/phone as a security mechanism at all. Original article: https://ello.co/gb/post/knOWk-qeTqfSpJ6f8-arCQ Comments: https://news.ycombinator.com/item?id=8541313

Launched some updates to the documentation at http://oauth.net/documentation/ with the OAuth group tonight! Will hopefully have more improvements to the site soon! #iiw

Just got this email from Dreamhost. https://gist.github.com/aaronpk/7475391 An interesting proactive response to the Adobe user db leak!

The @Jawbone UP, my favorite of the #quantifiedself trackers, finally released their official API! https://jawbone.com/up/developer/

We're hosting an #OAuth2 meetup and happy hour at #sxsw! Register here! http://oauth-sxsw-meetup.eventbrite.com/

Drinks are on us tonight at APIs & IPAs! Sponsored by @geoloqi @singly @puppetlabs @networkredux http://siliconflorist.com/2013/01/22/portland-apis-ipas-happy-hour-january-24/

RT @edanuff: Worth keeping in mind - #OAuth2 as implemented by FB, Google, Foursquare, etc. works and is *much* easier to use than OAuth1

RT @OReillyMedia: Webcast starts in 30mins w/ @aaronpk "The Current State of OAuth 2" #OAuth2 join us http://oreillynet.com/pub/e/2185

If you're at #OSCON, I'm starting my "Introduction to OAuth 2" talk in 10 minutes, room F150!

RT @OReillyMedia: Webcast July 17 @ 10amPT/1pmET w/@aaronpk 'An Introduction to OAuth 2' learn about the #OAuth2 API join us http://t.co ...

Got any suggestions for improving the http://oauth.net website? Fork the repo and send me a pull request! https://github.com/aaronpk/oauth.net