WeChat ID
aaronpk_tv
-
👉😎👉 Jay Phelps
https://twitter.com/_jayphelps
•
Jan 5
Hopefully so! I wouldn’t personally bet that the devs of every TV app correctly expire these codes within a short time frame 😅 I’ve seen far worse security gaffes, I’m sure you have too.
Fair! Thankfully these codes come from the authorization server rather than the app, so unless you're also building our own AS there's less of a chance of messing that one up! Your comment about the QR code is spot on tho! That's an optimization the app dev can do for better UX -
👉😎👉 Jay Phelps
https://twitter.com/_jayphelps
•
Jan 5
I thought the exact same thing but was too lazy to get my laptop out so I could scan the pictures with my phone to check if they indeed contain the unique code too or just the same generic URL 😂 in case it wasn’t obvious they’re not my screenshots. Hopefully the codes expire.
They do! They also don't (can't) contain any identifying information at this stage in the flow. The only risk in sharing these screenshots is if you share them within like 10 minutes of seeing it, and then the "attacker" can log in their account to your TV so 🤷♂️
-
Learning this stuff has involved help and advice from friends including @heretorecord, @aaronpk, and @thomas_cantrell. Thank you! 🙏
-
👉😎👉 Jay Phelps
https://twitter.com/_jayphelps
•
Jan 4
PSA to all TV app developers: when a user first signs-in please add a QR code that contains the “sign-in through your browser” URL along with the unique code as a query parameter.
It will delight your users who have a phone that supports it (most do now)
Examples 👇
I'm very curious why the code but not the QR is obfuscated in the first one, but the QR and not the code is obfuscated in the second one... they contain the same data! But yes this is a good UX improvement on top of the OAuth device flow 👍 -
Fellow creators! The larger you get the more companies will want to send you stuff in exchange for a free review. Remember to always put your audience first, and if it doesn't fit your audience that's fine. Always put your viewers first! #YouTube
-
-
jean
https://micro.blog/jean
•
Jan 3
@aaronpk I haven't seen the movie yet, but now you just reminded me of our karaoke duet in the Before Times. 🥲🎤👀
I was just thinking about that too! Hopefully it's possible again sometime soon
