Aaron Parecki

So at first Apple shortcutted OIDC protocol steps in SIWA which rendered them insecure, after fixing that they went on to add extras on top of OIDC which now renders them insecure again. It should be clear to everyone now: don't roll your own. #openid #siwa

When writing headlines, use the active voice and clearly identify subjects. https://www.theverge.com/2020/5/31/21276044/police-violence-protest-george-floyd

This is a great illustration of how much space cars waste!

They say that up to 230 cars will be able to fit in the stadium to watch the movie. 230 cars in the whole damn stadium.

If this is the future, I don’t wanna be in it. https://www.miamiherald.com/miami-com/things-to-do/article243003896.html

Being sick of politics AND having an environment where you can stop thinking about current state of the world is called PREVILEGE.

YOU HEARD IT!

there are two americas: one fights for black lives and the other fights for brunch

Another remark: this issue wouldn’t have allowed account takeover at the RP if the RP would use iss+sub claim to identify the user account instead of relying on the email address (potentially even without scoping it within the particular IDP). Poor coding practice too.

Fully agree to that 😀

Just looking also at examples like https://insomniasec.com/blog/auth0-jwt-validation-bypass or https://threatpost.com/microsoft-oauth-flaw-azure-takeover/150737/.
o/c they are different + very individual, but if already the big players have such issues, how much more can go wrong on RS side where devs are usually not Auth experts.

Yesterday was the saddest day in the history of @Twitter

The protocols are not the most complicated typically (not saying they are ‘easy’ either). But business requirements on top make things complicated.

Agreed. I feel deeply sad and infuriated, yet paralyzed by how broken my country’s culture is. I want to help, but I also don’t want to inadvertently help “wrong”.

Tweeting isn’t much, and my votes in NY mostly don’t count. What ELSE should I do? Good organizations to donate to?

why is the active voice used for protestors (“protestors struck a journalist”) but not for police (“a photographer was shot,” “a reporter was hit”)?

Boy you’d think a country that can equip every cop like a soldier could equip every doctor like a doctor

When I was a kid, my mom said she was going to slap me into next year.

I called her and asked if the offer was still available.

HOT TAKE: the tooth fairy myth teaches children that it’s normal to give away pieces of themselves for money.

Yeah, there it is, in print. @ohmydollar @anomalily

oh my god, i looked at these and thought, "that's a weird absurdist joke" before it dawned on me after reading the entire thing that the point is that it is real

My latest: A dispatch from the Failing States of America.

How Western media would cover Minneapolis if it happened in another country https://www.washingtonpost.com/opinions/2020/05/29/how-western-media-would-cover-minneapolis-if-it-happened-another-country/

Hmm, what port did I plug AP-6 into again? 🤯 Extremely awesome.

I used to be pretty anti-starting soon screen, but now I consider:
- Twitch notifications take 3-5 minutes to send in most cases
- Many people like to not miss gameplay or initial hellos
- There is almost always a "let me hit me resub button" rush during the start period