WeChat ID
aaronpk_tv
-
The confusing part about online security is knowing *when* it's safe to give your SMS two-factor auth codes to a third party. -
Some more info on OAuth 2.1 from the @oktadev blog:
OAuth 2.1: How many RFCs does it take to change a light bulb?
https://developer.okta.com/blog/2019/12/13/oauth-2-1-how-many-rfcs -
It's Time for OAuth 2.1
Trying to understand OAuth often feels like being trapped inside a maze of specs, trying to find your way out, before you can finally do what you actually set out to do: build your application.continue reading... -
In a couple hours I'll be going live to talk about using #OAuth to protect your APIs! It's not too late to join!
https://twitter.com/oktadev/status/1205173016407097344 -
I'll be live with @oktadev office hours in 30 minutes! Join via Zoom or watch on YouTube! Bring your OAuth and .NET questions!
https://twitter.com/oktadev/status/1204460313216634880 -
Since it's apparently OAuth week (yes I just made that up), this is your periodic reminder to review what third-party apps have access to your accounts!
Here's a link to Twitter security settings: https://twitter.com/settings/applications
and links for other services: https://indieweb.org/appaccess -
Singapore, Singapore • Thu, November 21, 2019 7:35pm#OAuth WG dinner — with anomalily, microformats
-
OH: "at the end of the day, a specification is a programming language designed to run on the worst runtime environment: engineers" @justin__richer #ietf106
-
Singapore, Singapore • Wed, November 20, 2019 12:56pm
-
Just posted a page with the full agenda and links to related specs we'll be discussing at the #IETF106 OAuth meetings this week!
https://oauth.net/events/2019-11-ietf106/
Remote participation is free if you're into that sort of thing. -
wow #oredev is fast with the videos! My "How to Hack OAuth" talk is already posted!
📺 https://vimeo.com/371495209
📜 https://speakerdeck.com/aaronpk/how-to-hack-oauth-oredev-2019 -
Slides from my "How to Hack OAuth" talk at #oredev are up!
https://speakerdeck.com/aaronpk/how-to-hack-oauth-oredev-2019
Thanks everyone for coming to watch and I hope you got something out of it! I'll post again when the video is out! -
Made it to Malmö! Looking forward to Øredev this week where I'll be giving two talks!
⛏🔐 How to Hack OAuth
https://oredev.org/sessions/how-to-hack-oauth
and
🏠🚫☁️ Smarter Home Automation Without the Cloud
https://oredev.org/sessions/smarter-home-automation-without-the-cloud
See you there! 🎉
-
for april 1 next year I think I'm going to change the oauth.net home page to show just a login page that asks you to type in your google username and password and see what happens 😎
-
We are live! and I am dressed as a cat! answering your #OAuth and OpenID Connect questions for @oktadev haunted office hours!
https://www.youtube.com/watch?v=GeSJa4I8Zew
-
Come hang out with me and my @oktadev coworkers at our virtual office hours next week! 💻 You can get all your OAuth questions answered live!
https://twitter.com/oktadev/status/1186368150087950336 -
I'm not gonna say JSON Web Tokens are *bad* (if used properly), but I'm also not gonna say they're *great* either.
Here's an interesting alternative though: PASETO
https://developer.okta.com/blog/2019/10/17/a-thorough-introduction-to-paseto -
A thing I started doing: instead of recording my full workshops, I set a voice memo recorder on the podium, and when someone has a question, I press record, repeat the question, and then answer it. Now my recorder is full of Q&A that I can incorporate back into the presentation!
-
Stay safe out there kids https://twitter.com/digitallawyer/status/1181348689756864513
