New post on the @oktadev blog! I learned a few things about setting up PHP projects in AWS in this one 🔐
https://developer.okta.com/blog/2020/10/05/validating-okta-access-tokens-php-aws-api-gateway-lambda
WeChat ID
aaronpk_tv
-
-
Super excited to be featured on @Auth0's new podcast "Identity Unlocked" talking with @vibronet all about OAuth 2.1! Give it a listen here! https://auth0.com/blog/identity-unlocked-explained-episode-2/
-
I'm giving a talk about OAuth security at #DisclosureConf tomorrow! It's not too late to register! https://developer.okta.com/blog/2020/09/01/aaron-parecki-disclosure-conf-2020
-
This thread is very good security advice even if you are not a YouTuber. You should listen to her.
https://twitter.com/snubs/status/1291174426537533441 -
OAuth 2.1 has officially been adopted by the IETF OAuth working group! 🎉
https://tools.ietf.org/html/draft-ietf-oauth-v2-1-00
I'll be chatting about this and many other updates from last week's security workshop today during OAuth Happy Hour! Join me and bring your questions!
https://www.youtube.com/watch?v=sUEBatNmsbY -
Remember how I always say make sure you audit your third-party JavaScript you embed in your apps, especially in your login pages? Classic example right here, someone inserted malware into the @Twilio SDK because it was in a publicly writable S3 bucket. 😱 https://www.twilio.com/blog/incident-report-taskrouter-js-sdk-july-2020 -
My view today for the OAuth Security Workshop! #osw2020
-
Hey @Linode why do you have so many ad trackers on your *login* domain? Of all places that's where you want to use as little 3rd party JS as possible!
Visiting login.linode.com loads trackers from Facebook, Doubleclick, Impact Radius, Oktopost, Linkedin, Google Ads, Bing -
I'm going live with @afitnerd in 5 minutes to talk about OAuth, online security, and also chat about yesterday's massive #TwitterHack! Join us, and bring your OAuth questions! https://youtu.be/dJl5wNAPm-w
-
I'm going live in 10 minutes talking about the State of OAuth at @APIDaysGlobal!
Register for free → https://www.apidays.co/interface -
sneak peek of an image I made for a talk tomorrow
can you guess what it's about?
-
If you run a community Twitter account, this is a good time to:
1) Make sure you 100% know everyone who has access to it
2) Enable two-factor authentication
You do *not* want to be in the position of having to explain that your account has been taken over by racists -
The Real Cause of the Sign In with Apple Zero-Day
The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer look to see what actually happened.continue reading... -
Going live with @afitnerd in 10 minutes to talk about all things #OAuth and OpenID Connect! I think we might even have a demo of a pretty sneaky attack to show off!
https://youtu.be/moQidjdV5cw -
About to go live at another #OAuth Happy Hour! We'll be talking about security, sharing the latest updates from the last IETF meeting, and answering your OAuth questions!
https://youtu.be/E4msDjZMRZc -
My #OktaneLive talk is up! "What's New with OAuth?"
In just 30 minutes I cover the latest developments in the OAuth working group! So much new stuff happening in the OAuth world right now!
https://youtu.be/g_aVPdwBTfw
