Aaron Parecki

If you missed my talk from @APIdaysAU last month, I just posted the video online!

Securing Your APIs with #OAuth 2.0: https://youtu.be/PfvSD6MmEmQ

I'll be giving a talk at @APIDaysAU at 1:30pm today! "Securing your APIs with OAuth".

There will be cats, because I know OAuth can be scary at times.

https://www.apidays.co/melbourne

This @jack situation is making me rethink my phone number strategy. I've been treating my SIM number as disposable and easily replaceable, where the number I use for 2FA is a google voice number. But now I'm thinking treating my SIM number as a password is a better plan.

‪I had a great time at #kcdc2019 and had a blast creating the "perfect" programming language with @coreylweathers @hunteraham @rdegges and @briandemers! 💥💻🎥 https://youtu.be/3cAF4iBbd24

TIL even web developers aren't safe from side-channel attacks. Nice overview of CORB and why it's important. https://developer.okta.com/blog/2019/08/26/combat-side-channel-attacks-with-corb

Something about Apple's decision to do "OAuth-but-not-quite" rubbed me the wrong way, but this is a great example of how it breaks down very concretely.

https://twitter.com/atomicbird/status/1163478833326108673

:sigh: another day, another website that hardcodes their @oauth_2 client secret in JavaScript 🤦‍♂️

There’s nothing like sitting in on the #ietf TLS meeting to make you realize how little you actually know about how the internet works

Cannot believe it, but I made it with 15 minutes to spare, just enough time to drop my bags in my room and grab my nametag from registration!

Thanks @AirCanada for a smooth flight this morning!

#ietf105

The @ietf "105attendees" mailing list is like a slow motion version of a Slack channel with way too many people in it. #ietf105

On my way to Montreal to talk about OAuth #ietf105! Crossing my fingers the connection at Newark goes well despite the impending thunderstorms.

I have some time free while I'm there this week, so if you're in the area and want to grab coffee let me know!

Some thoughts on adding identity to OAuth XYZ, a new draft spec to be discussed at #ietf105 next week.

If we're going to re-think OAuth from the ground up, we should build in support for common use cases.

https://aaronparecki.com/2019/07/18/17/adding-identity-to-xyz