Aaron Parecki

Over the last year, I've helped thousands of software developers learn about web security and OAuth by hosting live and virtual workshops, and all this knowledge is now available as an on-demand video course!

📺 ➡ http://oauth.wtf/course

Come hang out and watch @reverentgeek draw sketch notes while I chat about #OAuth with @leebrandt! https://www.twitch.tv/oktadev We're live for the next hour!

I'm honored to have been able to give the OAuth 101 session at @idworkshop yesterday! You can find my slides here https://speakerdeck.com/aaronpk/oauth-101-internet-identity-workshop-xxxi #IIW #IIWXXXI

New post on the @oktadev blog! I learned a few things about setting up PHP projects in AWS in this one 🔐
https://developer.okta.com/blog/2020/10/05/validating-okta-access-tokens-php-aws-api-gateway-lambda

Super excited to be featured on @Auth0's new podcast "Identity Unlocked" talking with @vibronet all about OAuth 2.1! Give it a listen here! https://auth0.com/blog/identity-unlocked-explained-episode-2/

I'm giving a talk about OAuth security at #DisclosureConf tomorrow! It's not too late to register! https://developer.okta.com/blog/2020/09/01/aaron-parecki-disclosure-conf-2020

This thread is very good security advice even if you are not a YouTuber. You should listen to her.

https://twitter.com/snubs/status/1291174426537533441

OAuth 2.1 has officially been adopted by the IETF OAuth working group! 🎉

https://tools.ietf.org/html/draft-ietf-oauth-v2-1-00

I'll be chatting about this and many other updates from last week's security workshop today during OAuth Happy Hour! Join me and bring your questions!

https://www.youtube.com/watch?v=sUEBatNmsbY

Remember how I always say make sure you audit your third-party JavaScript you embed in your apps, especially in your login pages? Classic example right here, someone inserted malware into the @Twilio SDK because it was in a publicly writable S3 bucket. 😱 https://www.twilio.com/blog/incident-report-taskrouter-js-sdk-july-2020

Shoutout to the #osw2020 organizers for putting together an extremely successful virtual event! 🎉 Even if it did mean I had to be awake and on camera by 5am the last three days. 😴 Still had a great bunch of #OAuth discussions!

Okta has a whooole bunch of job openings right now!

🌎 Can be from any country Okta has an office
🏠 Remote first
👩‍💻 Engineering, product, tech writers, marketing
🥑 Devrel: JavaScript, Python, Go

Come join me and my awesome coworkers! Feel free to DM for more info!

Hey @Linode why do you have so many ad trackers on your *login* domain? Of all places that's where you want to use as little 3rd party JS as possible!

Visiting login.linode.com loads trackers from Facebook, Doubleclick, Impact Radius, Oktopost, Linkedin, Google Ads, Bing

I'm going live with @afitnerd in 5 minutes to talk about OAuth, online security, and also chat about yesterday's massive #TwitterHack! Join us, and bring your OAuth questions! https://youtu.be/dJl5wNAPm-w

I'm going live in 10 minutes talking about the State of OAuth at @APIDaysGlobal!

Register for free → https://www.apidays.co/interface

If you run a community Twitter account, this is a good time to:

1) Make sure you 100% know everyone who has access to it
2) Enable two-factor authentication

You do *not* want to be in the position of having to explain that your account has been taken over by racists