67°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Jorge Nicolau https://twitter.com/jorgenicolau_ar   •   Dec 2
    Thank Goodness! I was so in need of RFC 8252 this very morning!
    Aaron Parecki
    There's nothing like a little light RFC8252 reading over coffee in the morning!
    Portland, Oregon • 35°F
    1 like 1 repost 4 replies
    Thu, Dec 1, 2022 6:46pm -08:00
  • Jorge Nicolau https://twitter.com/jorgenicolau_ar
    Thank Goodness! I was so in need of RFC 8252 this very morning!
    Portland, Oregon • 35°F
    Fri, Dec 2, 2022 2:19am +00:00 (liked on Thu, Dec 1, 2022 6:46pm -08:00)
  • Vittorio https://noc.social/@Vibronet

    Phone, laptop, pods, watch battery levels… so much of my anxiety can be measured in mAh πŸ”‹πŸͺ«

    Portland, Oregon • 35°F
    Thu, Dec 1, 2022 10:58pm +00:00 (liked on Thu, Dec 1, 2022 6:24pm -08:00)
  • IDIMAndrew https://infosec.exchange/@IDIMAndrew

    @aaronpk at the last internet identity workshop I ran a session called "Your greatest standardization regret" and Token Exchange was brought up by a few people πŸ™‚ @Vibronet pointed out the dangers of doing weird things with it

    Portland, Oregon • 35°F
    Fri, Dec 2, 2022 1:50am +00:00 (liked on Thu, Dec 1, 2022 5:51pm -08:00)
  • Sam 0xEACD https://twitter.com/samuelgoto
    Startup idea: this but for standards!!

    Each company publishes their opinion on a technical standard and the machine generates the spec based on the consensus!!!

    Follow me for more startup ideas!
    Portland, Oregon • 39°F
    Thu, Dec 1, 2022 11:37pm +00:00 (liked on Thu, Dec 1, 2022 3:53pm -08:00)
  • Aaron Parecki
    By popular request, I just published a version of "The Little Book of OAuth 2.0 RFCs" as a free downloadable PDF!

    https://oauth.net/books/#little-book-of-rfcs
    Portland, Oregon, USA • 39°F
    122 likes 43 reposts 10 replies 4 mentions
    Thu, Dec 1, 2022 3:23pm -08:00 #oauth
  • Aaron Parecki
    Remember folks, "token exchange" does *not* mean "let me exchange a customer ID for a token"!

    Good thread on how remotely connected Honda, Nissan, Infiniti, and Acura cars were all able to be remotely controlled knowing only the VIN.

    https://twitter.com/samwcyo/status/1597792145691246593
    Portland, Oregon, USA • 38°F
    20 likes 10 reposts 3 replies 1 mention
    Thu, Dec 1, 2022 11:36am -08:00 #security
  • Sam Curry https://twitter.com/samwcyo
    It returned "200 OK" and returned a bearer token! This was exciting, we were generating some token and it was indexing the arbitrary VIN as the identifier.

    To make sure this wasn't related to our session JWT, we completely dropped the Authorization parameter and it still worked!
    Portland, Oregon • 38°F
    Wed, Nov 30, 2022 3:18am +00:00 (liked on Thu, Dec 1, 2022 11:34am -08:00)
  • Coinbase Wallet https://twitter.com/CoinbaseWallet
    You might have noticed you can't send NFTs on Coinbase Wallet iOS anymore. This is because Apple blocked our last app release until we disabled the feature. 🧡
    Portland, Oregon • 38°F
    Thu, Dec 1, 2022 4:34pm +00:00 (liked on Thu, Dec 1, 2022 10:35am -08:00)
  • parker gibbons https://twitter.com/parker_gibbons
    damn
    Portland, Oregon • 37°F
    Thu, Dec 1, 2022 3:19am +00:00 (liked on Thu, Dec 1, 2022 10:11am -08:00)
  • Guy Parsons https://twitter.com/GuyP
    OK so @OpenAI's new #ChatGPT can basically just generate #AIart prompts. I asked a one-line question, and typed the answers verbatim straight into MidJourney and boom. Times are getting weird...🀯
    Portland, Oregon • 37°F
    Wed, Nov 30, 2022 6:26pm +00:00 (liked on Thu, Dec 1, 2022 10:11am -08:00) #ChatGPT #AIart
  • Justin Richer πŸ€ https://twitter.com/justin__richer   •   Dec 1
    Finally decided to do something with this domain: https://jwtf.org/
    Aaron Parecki
    πŸ‘πŸ‘πŸ‘ excellent domain

    should I do the same with oauth.wtf?
    Portland, Oregon • 37°F
    1 like 1 reply
    Thu, Dec 1, 2022 9:50am -08:00
  • 11:01pm
    Asleep
    6:33am
    Awake
    7h 32m
    Slept
    17m
    Awake for
    Portland, Oregon, USA • 36°F
    Thu, Dec 1, 2022 6:33am -08:00
  • Aaron Parecki
    Contributions from: France, Germany, Hong Kong, Kuwait, United Kingdom, United States
    Thu, Dec 1, 2022 5:43am -08:00
  • Train
    4.20mi
    Distance
    32:32
    Duration
    10:01pm
    Start
    10:33pm
    End
    Portland, Oregon • 40°F
    Wed, Nov 30, 2022 10:33pm -08:00
  • Walk
    0.74mi
    Distance
    16:39
    Duration
    6:13pm
    Start
    6:30pm
    End
    Portland, Oregon • 41°F
    Wed, Nov 30, 2022 6:30pm -08:00
  • Vegan Curry Ramen
    Kotsu ARamen & Gyoza
    Wed, Nov 30, 2022 5:49pm -08:00
  • Train
    2.96mi
    Distance
    12:55
    Duration
    5:22pm
    Start
    5:35pm
    End
    Portland, Oregon • 41°F
    Wed, Nov 30, 2022 5:35pm -08:00
  • Paul https://infosec.exchange/@planzi   •   Nov 30

    @aaronpk When I worked at the phone company (SBC), we worked on this problem for YEARS. We were even more constrained than Amex -- I believe we had 13 characters to work with on the street address line. This was complicated by the fact that your phone service address and your USPS mailing address are a) not necessarily the same and b) even if they are "the same", the rules for abbreviating them are incompatible. This was resulting in 1000s of hours of manual labor by (very expensive) phone reps each month calling customers to ask them for their [mailing] address, plus risking regulatory fines for non-delivery of phone bills, plus lost revenue. In the end, we ended up standing up a SOAP-based middleware, connected to the mainframe phone billing systems, to validate the mailing addresses against the USPS address database. Under the covers, EBCDIC-encoded address data was being rendered into an XML doc and submitted over a web service to the address validation service. If there was a service address that this... thing couldn't map to a USPS address, I had a hotline to a wizard at USPS who could figure out the right address -- and if they couldn't, they would literally call the mail carrier on that route and find out from THEM what the right mailing address was. It was some strange combination of massive big data (before we used that term) systems talking to other massive big data systems... all backed up by mail carriers with bags of mail and Deep Knowledge about the addresses in their assigned area. Interesting project - wouldn't be even minimally surprised if it's still in use today, 20 years later.

    Aaron Parecki
    that is absolutely terrifying
    Portland, Oregon • 42°F
    1 reply
    Wed, Nov 30, 2022 3:00pm -08:00
  • Nelson Minar https://tech.lgbt/@nelson   •   Nov 30

    @aaronpk does the website still limit you to eight character passwords? When I asked they told me it was for security

    Aaron Parecki
    oh gosh, no thankfully i have a long random password for it
    Portland, Oregon • 42°F
    Wed, Nov 30, 2022 2:56pm -08:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • πŸŽ₯ YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • βš™οΈ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv