Aaron Parecki

I was going to build out a hilariously over-complicated & fiendishly expensive Wordpress architecture as a joke, but unfortunately @awscloud beat me to it.

I count static HTML as data :) and way more robust than databases over that time period (my blog has been plain text files for 20 years, rendering/editing code changed a half dozen times)

Ending a Zoom call with “I gotta go”
- boring
- impersonal
- not true

Leaving a Zoom call with “It appears my time has come.”
- mysterious
- can be said with an elegant bow
- is he a wizard?

On July 31st 2019, at 5:11am, we received an email from Insomnia reporting a service vulnerability. By 11:00pm the same day, we had fixed the issue in production. We analyzed the logs and validated that no one exploited the vulnerability. More details ↓
https://auth0.com/blog/insomnia-security-disclosure/?utm_source=twitter&utm_medium=sc&utm_campaign=insomnia_disclosure

How about: it’s the production instance at Auth0, they shouldn’t even HAVE THE ENTRY IN THE TABLE for alg:none.

🚨 Emergency landing of a small plane ✈ this morning around 10:00 AM, on "Highway 40" just outside of #Montreal, #Quebec, #Canada.

2015: setting JWT alg to 'none' bypasses verification

2020: setting JWT alg to 'nonE' bypasses verification

lmaoooo https://insomniasec.com/blog/auth0-jwt-validation-bypass

Seriously every half-way decent #W3C staff member knew the #DID decentralized credential system was basically a scam with terrible privacy properties, a repeat of Drummond Reed's equally moronic XRI effort (remember @blaine?) that killed OpenID. Of course, hustlers never learn.

all of a sudden my mid 2015 machine is brand new again.

What do we call the genre of software that used to be called desktop publishing? And can you recommend something appropriate for a 6yo with an iPad who wants to publish an elaborately documented cupcake recipe as a PDF?

Facebook notifications are the most annoying. Stop trying so hard to win me back. They inches away from an uninstall

Yay! @auth0 released support for refresh token rotation, and updated SDKs (the SPA one in particular) to take advantage of the feature.
Say bye-bye to session cookie issues in your SPAs :D https://auth0.com/blog/securing-single-page-applications-with-refresh-token-rotation/

I'm pretty sure @johnkrasinski is gonna be best 2020 breakout YouTuber this year.

Before Twitter, I was publishing BS on my blog... here’s a gem from 15 years ago: https://www.cloudidentity.com/blog/2005/01/08/348926/

I've seen over the last few days a lot of stories, comments and mixed messages about farmers having to dump milk.

I thought I'd clear a few things up as the perspective from the farm.

A thread:

EXCELLENT ADDITION TO THIS THREAD: “Tips and Tools for Improving your Remote Meetings and Presentations on a Budget” by @aaronpk https://aaronparecki.com/2020/03/24/4/tips-and-tools-for-remote-meetings-and-presentations It includes video and lighting, not just audio. Really good tips.