WeChat ID
aaronpk_tv
-
I'm a big fan of using more secure two-factor authentication methods like a security key or TouchID, but I will admit I never expected charging people to use SMS would be a viable strategy to get them off it 😅 https://blog.twitter.com/en_us/topics/product/2023/an-update-on-two-factor-authentication-using-sms-on-twitter -
I've given many talks about how mobile apps can't be deployed with a secret, and using Twitter's 2013 "hacks" as an example. I'm just going to leave this completely unrelated string of random characters here for no particular reason
GgDYlkSvaPxGxC4X8liwpUoqKwwr3lCADbz8A7ADU -
PSA: If you use Twitter to sign in to stuff, you should double check you have another way to get in to those accounts asap. With Twitter charging ??? for API access next week, you have no way of knowing whether the apps you use are going to pay that.
-
It's been a while since I've set up an Amazon Echo device. Do I need to come over there and teach some Amazon folks about the OAuth Device Flow? There is a better way than making me type my password on this screen!
-
It's here! My new video course "Advanced OAuth Security" is now available on Udemy!
In this course we break down the jargon in the high-security OAuth specs like PAR, JAR, JARM, DPoP, Mutual TLS, HTTP Signatures and more!
https://oauth2simplified.com/advanced-oauth
-
I've got an ad spot opening up in the new year on https://oauth.net! This is *the* hub for everything about OAuth online. Text-only ads, and usually has a high clickthrough rate!
Get in touch if you'd like to get your business in front of 150,000 people a month! -
OAuth for Browser-Based Apps Draft 12
I just published a revised version of OAuth for Browser-Based Apps based on the feedback and discussion at IETF 115 London!continue reading... -
The Laws of OAuth
The first law of OAuth states that the total number of authorized access tokens must remain constant in an isolated system.continue reading... -
By popular request, I just published a version of "The Little Book of OAuth 2.0 RFCs" as a free downloadable PDF!
https://oauth.net/books/#little-book-of-rfcs
-
Remember folks, "token exchange" does *not* mean "let me exchange a customer ID for a token"!
Good thread on how remotely connected Honda, Nissan, Infiniti, and Acura cars were all able to be remotely controlled knowing only the VIN.
https://twitter.com/samwcyo/status/1597792145691246593 -
This is your scheduled periodic reminder, for no particular reason, that now is a good time to review the third party OAuth apps that have access to your Twitter account, and remove any that you don't recognize or haven't used in a while.
➡ https://twitter.com/settings/connected_apps -
What could possibly go wrong? https://twitter.com/racheltobac/status/1588367452043235328
-
October is cybersecurity awareness month.
Okta is a cybersecurity company.
...coincidence...? -
In just 30 minutes, join me and @vibronet for another OAuth Happy Hour! We'll be catching up on all the latest progress in the world of OAuth and OpenID Connect! Bring your questions or just come to hear about what's new! https://youtu.be/Bg7cr9UTP9Q
-
I'm working on a new video course, (tentatively) called "Advanced OAuth Security"!
If you'd like to be the first to hear when it goes live, you can sign up for my email list here!
https://oauth2simplified.com -
New Draft of OAuth for Browser-Based Apps (Draft -11)
With the help of a few kind folks, we've made some updates to the OAuth 2.0 for Browser-Based Apps draft as discussed during the last IETF meeting in Philadelphia.continue reading... -
Just published a new version of OAuth 2.0 for Browser-Based Apps!
https://www.ietf.org/archive/id/draft-ietf-oauth-browser-based-apps-11.html
If you have feelings about tokens in browsers, please feel free to chime in on the discussion! You can comment on the mailing list or open issues on the GitHub repo linked from the doc! -
Just landed in Seattle and realized even tho I fly thru here all the time I barely actually ever leave the airport!
Super excited to be helping out with this event tomorrow tho! There's still space if you want to join!
https://twitter.com/auth0/status/1560628964254679040 -
Throwback to the OAuth WG dinner at #IETF114 in Philadelphia!
Tag yourself if I missed you!
@vibronet @timcappalli @__b_c @PieterKasselman @hpsin_ @selfissued @rifaat_sy and @kristinayasuda even tho she arrived just after this photo
-
It was so great hanging out with my @OktaDev coworkers at @KC_DC this week! We fight for the users!
@quorralyne @alisaduncan @briandemers @qedunham @melissatherms
