WeChat ID
aaronpk_tv
-
patrick.
https://twitter.com/imPatrickT
•
Nov 18
yup and loading from Lock Screen is a deal breaker for me.
*deal maker. agreed. -
Deity Microphones 🎙️
https://twitter.com/deitymicrophone
•
Nov 18
Seems like YouTube is changing their service terms AGAIN.... It's that second bullet point that should be interesting...
What are your thoughts on the new changes to the YouTube platform?
I always assumed that was already the case. Is it not? -
Blaine Cook
https://twitter.com/blaine
•
Nov 19
😢 @aaronpk knows my stance on this well - domain-based auth is exclusionary and confusing to users. IndieAuth should just use email addresses, even if it's not doesn't use webfinger and just does s/@([^.*]\..*$/\1/ with the address.
Email addresses *are* domain-based auth. I think you’re conflating two different parts of the system. In IndieAuth, the canonical user identifier doesn’t have to be the thing the user enters in a login prompt. This is also true for almost every other authentication system. -
Simon Willison
https://twitter.com/simonw
•
Nov 19
Thanks, filed an issue https://github.com/simonw/datasette-indieauth/issues/21
To be clear, I’m not sure this is a *good* idea, and it also requires a bit of code running at the web server of the root domain, but it does work. -
Aaron Parecki
https://aaronparecki.com/
•
Nov 18
I’ll admit it’s a bit of a “hack”. The trick is “aaron@parecki.com” is a URL because if you assume the http scheme then you get http://aaron@parecki.com which is a username but no password with HTTP basic auth. The server can switch what it returns based on that username.
As a client developer you have to: 1) follow the spec by assuming “http” if no scheme is entered, and 2) allow the user-entered URL to contain a username component. -
Simon Willison
https://twitter.com/simonw
•
Nov 19
I thought that was valid with RelMeAuth but not IndieAuth - how can I get that working as an IndieAuth client?
I’ll admit it’s a bit of a “hack”. The trick is “aaron@parecki.com” is a URL because if you assume the http scheme then you get http://aaron@parecki.com which is a username but no password with HTTP basic auth. The server can switch what it returns based on that username.
-
Blaine Cook
https://twitter.com/blaine
•
Nov 19
In the meantime, IndieAuth is, imho, a step backwards. OAuth/OIDC sign-in with login_hint works *great*; the lack of auto-/no-registration / a public key version is a real bummer, though.
This one I’m really confused on, and we should probably chat about it to clear things up. IMO OIDC is more of a barrier here because the default is that clients need to register. With IndieAuth there is no expectation of client registration at all.
-
Blaine Cook
https://twitter.com/blaine
•
Nov 19
😢 @aaronpk knows my stance on this well - domain-based auth is exclusionary and confusing to users. IndieAuth should just use email addresses, even if it's not doesn't use webfinger and just does s/@([^.*]\..*$/\1/ with the address.
There is no obligation that you have to register your own domain for IndieAuth to work. I’ve talked about this at ActivityPub Conference showing how they can use IndieAuth to enable a standards-based app ecosystem for ActivityPub/Mastodon apps. That of course uses shared domains.
-
Simon Willison
https://twitter.com/simonw
•
Nov 19
I'm intrigued by the IndieAuth thing where you can input a domain but your final identifier is a page specific to you on that domain - seems like it could help avoid users having to register their own domain or remember their full URL
so it turns out this works. I can type in “aaron@parecki.com” in an indieauth prompt and it works. because that is a URL.
-
I’m glad to see this story come out, it’s been a long time coming. I’m sure there are way more stories than are printed here. I hope Xray FM survives this bullying behavior at the top. https://www.wweek.com/news/2020/11/18/staffers-at-xray-fm-allege-unprofessional-behavior-by-the-stations-executive-director-jefferson-smith/
-
Dennis Crowley 🇺🇸
https://twitter.com/dens
•
Nov 18
"This is an urgent message for the vehicle owner..."
How do we not have the technology to stop this shit?
a side benefit of not owning a car is being able to completely ignore these without even a second thought 😂 -
Implementing IndieAuth for Datasette - inspired by a weekend spent at IndieWebCamp East Coast #indieweb https://simonwillison.net/2020/Nov/18/indieauth/
-
Defrag
https://twitter.com/defrag
•
Nov 17
Alright, I'm taking recs on home-cameras that aren't Nest. Because the quality of Nest just consistently degrades.
I use Unifi cameras cause the whole thing runs locally and records to a pile of hard drives in my closet
