WeChat ID
aaronpk_tv
-
My view today for the OAuth Security Workshop! #osw2020
-
Hey @Linode why do you have so many ad trackers on your *login* domain? Of all places that's where you want to use as little 3rd party JS as possible!
Visiting login.linode.com loads trackers from Facebook, Doubleclick, Impact Radius, Oktopost, Linkedin, Google Ads, Bing -
I'm going live with @afitnerd in 5 minutes to talk about OAuth, online security, and also chat about yesterday's massive #TwitterHack! Join us, and bring your OAuth questions! https://youtu.be/dJl5wNAPm-w
-
I'm going live in 10 minutes talking about the State of OAuth at @APIDaysGlobal!
Register for free → https://www.apidays.co/interface -
sneak peek of an image I made for a talk tomorrow
can you guess what it's about?
-
If you run a community Twitter account, this is a good time to:
1) Make sure you 100% know everyone who has access to it
2) Enable two-factor authentication
You do *not* want to be in the position of having to explain that your account has been taken over by racists -
The Real Cause of the Sign In with Apple Zero-Day
The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer look to see what actually happened.continue reading... -
Going live with @afitnerd in 10 minutes to talk about all things #OAuth and OpenID Connect! I think we might even have a demo of a pretty sneaky attack to show off!
https://youtu.be/moQidjdV5cw -
About to go live at another #OAuth Happy Hour! We'll be talking about security, sharing the latest updates from the last IETF meeting, and answering your OAuth questions!
https://youtu.be/E4msDjZMRZc -
My #OktaneLive talk is up! "What's New with OAuth?"
In just 30 minutes I cover the latest developments in the OAuth working group! So much new stuff happening in the OAuth world right now!
https://youtu.be/g_aVPdwBTfw -
This morning I gave a talk to 600 people while sitting on my couch drinking coffee. ☕️ I could get used to this virtual conference thing. #Oktane20 #JustQuarantineThings -
Digital Spring Cleaning
Well, it's Spring, and we're all stuck inside! 😃 So why not use this time to do a little Spring cleaning and declutter your digital life. We all have things we know we should do that we keep putting off. Here are a few things you can do to tidy things up and improve your online security in a time when most of us are interacting only online.continue reading... -
Just published a talk I gave at a virtual conference: How to Hack OAuth
It's been fun to be able to "speak" at conferences in a highly edited format instead of winging it on stage! I hope it's more fun to watch as a viewer too!
https://www.youtube.com/watch?v=aU9RsE4fcRM -
Going live in about an hour at Spring Live, doing a talk on how to hack OAuth!
Join here ➡️ https://connect.tanzu.vmware.com/Spring_Live.html
Welcome to the new world of virtual conferences!
-
The first draft of OAuth 2.1 is out! Thanks so much to @tlodderstedt and @DickHardt for their work on this!
https://aaronparecki.com/2020/03/11/14/oauth-2-1 -
First Draft of OAuth 2.1
I'm happy to share that Dick and Torsten and I have published a first draft of OAuth 2.1. We've taken the feedback from the discussions on the list and incorporated that into the draft.continue reading... -
The second video in my "OAuth in Five Minutes" series is up!
🎥 "What's the difference between confidential and public clients?"
https://www.youtube.com/watch?v=5cQNwifDq1U -
San Francisco, California • Tue, February 11, 2020 8:35am
