64°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Eleanor Hill https://twitter.com/EJHil
    Is Zorg coming for Rudy Giuliani? #RudyGuliani #rudy #hairline #sweatyrudy #sweat
    Portland, Oregon • 43°F
    Thu, Nov 19, 2020 7:11pm +00:00 (liked on Thu, Nov 19, 2020 10:27pm -08:00) #RudyGuliani #rudy #hairline #sweatyrudy #sweat
  • Wurreka https://twitter.com/wurreka
    #OAuth expert @aaronparecki examines a few recent high-profile #WebSecurity breaches and discusses how they relate to OAuth. You can Watch the full video with sub-titles and transcript by signing up for a FREE #Wurreka account: https://wurreka.com/watch/hacking-oauth
    Portland, Oregon • 44°F
    Fri, Nov 20, 2020 3:07am +00:00 (liked on Thu, Nov 19, 2020 9:42pm -08:00) #OAuth #WebSecurity #Wurreka
  • Icestudio (icestudio.io)
    Thu, Nov 19, 2020 5:02pm -08:00 #fpga
  • Ben Casselman https://twitter.com/bencasselman
    6th grader: “Why do we have to learn about the Great Depression?”
    Me: “Because it was a period of great hardship for millions of people, and it taught us lessons about how to avoid ever letting it happen ag... uh, because your teacher said so.”
    Portland, Oregon • 48°F
    Thu, Nov 19, 2020 4:47pm +00:00 (liked on Thu, Nov 19, 2020 4:51pm -08:00)
  • acb https://mastodon.social/@acb

    The Internet Archive have added a WebAssembly-based Flash emulator to their emulation suite, and are preserving 2000s-vintage Flash games, playable in a modern HTML5-capable browser:

    http://blog.archive.org/2020/11/19/flash-animations-live-forever-at-the-internet-archive/

    Portland, Oregon • 49°F
    Thu, Nov 19, 2020 11:09pm +00:00 (liked on Thu, Nov 19, 2020 4:08pm -08:00)
  • Lillian Karabaic 🥄🏳️‍🌈 BLM https://twitter.com/anomalily
    Got my own retargeting ad on Instagram and I am not mad.
    Portland, Oregon • 49°F
    Thu, Nov 19, 2020 11:07pm +00:00 (liked on Thu, Nov 19, 2020 3:08pm -08:00)
  • ATEM Mini – Secrets and opportunites? | SpiderElectron (wphost.spider-e.com)
    Thu, Nov 19, 2020 1:53pm -08:00 #atem
  • Helen 侯-Sandí https://twitter.com/helenhousandi
    You know, I was thinking that WordPress 5.6 could really use that “one more thing”...
    Portland, Oregon • 51°F
    Thu, Nov 19, 2020 7:39pm +00:00 (liked on Thu, Nov 19, 2020 1:10pm -08:00)
  • Aaron Parecki
    Contributions from: Canada, France, Germany, Netherlands, New Zealand, Russian Federation, Spain, United Kingdom, United States, Zimbabwe
    Thu, Nov 19, 2020 12:55pm -08:00
  • garden center goth https://jorts.horse/@mood

    the rest of the story didn’t load for a bit and i was like ‘wow! i respect how succinct this is’

    Portland, Oregon • 51°F
    Thu, Nov 19, 2020 3:32pm +00:00 (liked on Thu, Nov 19, 2020 11:53am -08:00)
  • Karim Douïeb https://twitter.com/karim_douieb
    Latest update with the typo fixed for those interested.
    Portland, Oregon • 50°F
    Wed, Nov 11, 2020 7:08pm +00:00 (liked on Thu, Nov 19, 2020 11:28am -08:00)
  • sam goto https://twitter.com/samuelgoto
    For example, we will use "this alternative will take O(# of users) to deploy because you have to chance their behavior" or "this one will take O(# of websites) to redeploy" or "this is O(# of IDPs) hard" to compare alternatives in a objective way, like we compare algorithms.
    Portland, Oregon • 49°F
    Thu, Nov 19, 2020 4:58pm +00:00 (liked on Thu, Nov 19, 2020 11:07am -08:00)
  • sam goto https://twitter.com/samuelgoto
    Every now and then I run into discussions that make an assumption that devices and mechanisms are the hard part. Most often, two sided markets are overlooked. E.g. web intents, payment handlers and the nascar flag problem in identity.
    Portland, Oregon • 49°F
    Thu, Nov 19, 2020 4:52pm +00:00 (liked on Thu, Nov 19, 2020 11:07am -08:00)
  • sam goto https://twitter.com/samuelgoto
    There is this device that we are using in WebID to compare alternatives that has been super useful. We don't have a name for it, but it is more or less like "Big-O" for Activation/Deployment Complexity.
    Portland, Oregon • 49°F
    Thu, Nov 19, 2020 4:56pm +00:00 (liked on Thu, Nov 19, 2020 11:07am -08:00)
  • Aaron Parecki
    Contributions from: Canada, France, Germany, Netherlands, New Zealand, Russian Federation, Spain, United Kingdom, United States, Zimbabwe
    Thu, Nov 19, 2020 10:59am -08:00
  • Simon Willison https://twitter.com/simonw   •   Nov 19
    This seems to contradict the spec - https://github.com/simonw/datasette-indieauth/issues/21#issuecomment-730485391
    Aaron Parecki
    That's for the final profile URL. The user can enter something different at the start, and if that contains a username component then the trick works.
    Portland, Oregon • 46°F
    Thu, Nov 19, 2020 8:25am -08:00
  • 10:49pm
    Asleep
    5:59am
    Awake
    7h 10m
    Slept
    30m
    Awake for
    Portland, Oregon, USA • 45°F
    Thu, Nov 19, 2020 5:59am -08:00
  • Blaine Cook https://twitter.com/blaine   •   Nov 19
    I don't agree that it's completely glossed over - there is a registration protocol, it's just not widely implemented. The intent could be better stated, for sure, but I think IA's emphasis is too far the other way. My ideal is something in-between IndieAuth and OIDC, I think! 😊
    Aaron Parecki
    take a look at my activitypub conference talk, starting at 11:50, I address the UX aspect of it here: https://aaronparecki.com/2020/09/22/25/activitypub-oauth-2-1#t=710

    also happy to set up a time to chat about this instead! I think we have a lot of similar goals!
    Portland, Oregon • 47°F
    2 likes
    Wed, Nov 18, 2020 10:26pm -08:00
  • Blaine Cook https://twitter.com/blaine   •   Nov 19
    My goal is to enable secure, simple federated identity. Authentication is a core bit of functionality in that regard. Obviously supporting non-corporate identities is critical, but forcing everyone to be 'indie' is a mistake, I think.
    Aaron Parecki
    nobody said "force". my goal is to *enable* indie identities, something that is pretty much completely glossed over by the current OIDC ecosystem.
    Portland, Oregon • 47°F
    1 like 1 reply
    Wed, Nov 18, 2020 10:17pm -08:00
  • Mugwump https://twitter.com/ozaed   •   Nov 19
    I use DNSSEC since 6+ years, while I have seen many auth protocols come and go. And 'IndieAuth' I first heard today.
    Aaron Parecki
    ah yes, the "this is the first I've heard about it" argument sure is a solid one
    Portland, Oregon • 47°F
    Wed, Nov 18, 2020 10:15pm -08:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv