Aaron Parecki

twitter.com/davewiner/status/565208821250162688

People often wonder why I am hesitant to bake JSON into specs I write such as IndieAuth and Micropub. Here is the short answer.

While OAuth 2.0 is a good framework for building an API, the spec itself leaves many things un-specified, and it's up to the implementer to make a decision based on their own security requirements. As such, most OAuth 2.0 implementations are not interoperable, which is often cited as a failure of OAuth 2.0. On the other hand, the current state of OAuth 2.0 implementations is that they are often similar enough that developers don't need to learn too many new concepts when dealing with them.

Today, ind.ie announced in a blog post (ind.ie/blog/focus/) that they will no longer be making a phone, and are dropping support for their Android and iOS social network clients, focusing instead only on the OS X version.

The core principle of the IndieWeb is to own your data by creating content on your own domain with permalinks you control, rather than creating content in silos.

Back in the early days of Twitter, I noticed that several tweets I was seeing showed "via _____" next to the date, which linked to the application that was used to post the tweet. I thought "hey that's a clever way to give credit to applications" and thought it would be a good way to get people to discover the Twitter app I was creating at the time.

twitter.com/anomalily/status/528297903618420736

twitter.com/the_Zieger/status/523020728325902336

If I could design Blackmagic's next product, here is what I would make.

When running nginx as the front-end web service for your API, you may need to put up a "maintenance" page and send back "HTTP 503 Service Unavailable" for all incoming HTTP requests. For some reason, all the existing docs I found online were either too complicated or did not handle this properly. Here is a simple configuration block that will set the HTTP header, content type, and return a custom JSON file as the response.

twitter.com/cienvaras/status/505492623277432832

aaronparecki.com/notes/2014/08/10/1/bridgepedal

The humans are away, it's time to party!

This is a summary of this week's IndieWeb events! Two talks at Open Source Bridge, an indieweb breakfast, pre-party happy hour, and the flagship IndieWebCamp event this weekend!

In iOS 8, Wi-Fi scanning will use random MAC addresses, making it impossible to passively track a device using its MAC address. This also ensures the only way to track devices indoors is by using iBeacon technology.

No, Chirpify did not acquire Urban Airship. Goes to show just how important the browser's address bar is.

Since the launch of iOS 7, your iPhone has been collecting a list of "frequent locations" as you move around. If you don't already know about this, you can check out your list in the Settings app.

I have been continuously logging GPS data for 6 years now, and thinking a lot about how I want to archive the data long-term. Currently I have the data in a MySQL database, which is not a good long-term solution.

I've only had Foursquare's new "Swarm" app for a day, but I'm already super impressed. By trimming out all of the search/review features, they're able to focus the app on providing a great checkin experience and providing more ways to connect with your friends.

A quick guide to updating OpenSSL on Ubuntu 12.04 running Nginx and Ruby and verifying that your system is safe from the Heartbleed bug.