Aaron Parecki

In this study by @____pieter____ 56% of OAuth providers are susceptible to the PKCE Sidestep attack that I described in https://danielfett.de/2020/05/16/pkce-vs-nonce-equivalent-or-not/ #osw2020

Theory: Twitter internal tools were comprised via CSRF due to insider information.

"OAUTH 2.1" by Aaron Parecki (@aaronpk) in OAuth Security Workshop 2020 (#osw2020).

https://barcamptools.eu/oauth-security-workshop-2020/events/0d0423b6-5924-4e6f-8b3b-63edbbe0ae59/oauth_2_1

OAuth 2.1 aims to simplify the maze of the specifications.

Another client type "credentialed", in addition to "public" and "confidential". The concept is being explained by Aaron (@aaronpk) in #osw2020.

The OAuth 2.1 Authorization Framework
https://tools.ietf.org/html/draft-parecki-oauth-v2-1

OAuth 2.1 becomes the simpler & more secure #OAuth. A bunch of existing RFCs and drafts roll into one, so easier to follow too. Presented by @aaronpk at the #osw2020

The auto play drives me nuts, it’s like having music on a website

"PROTECKING SINGLE-PAGE APPS USING OAUTH" by Aaron Parecki (@aaronpk) in #osw2020. Single-Page Application architectures are introduced.

Today @aaronpk will be presenting #OAuth 2.1. The core OAuth grants are getting consolidated, security gets hardened with PKCE #osw2020 https://barcamptools.eu/oauth-security-workshop-2020/events/0d0423b6-5924-4e6f-8b3b-63edbbe0ae59/oauth_2_1

base from 😨 (fear)
eyes from 😡 (angry)
mouth from 🥳 (party-horn)

A phrase heard every weekday in 2020

Being a YouTuber is like being a baseball player, except you feel bad if you don't hit a home run literally every single time

A few steps closer…

can’t stop thinking about the overlap between people who say “all lives matter” and people who refuse to wear a mask to protect even just one life

New Youtubers: How do I get more subs and views?
YouTube Vets:
- Make more content.
- Learn the craft.
- Study trends and video exiting techniques.
- Collab with other Youtubers of the same size.

80% of New Youtubers: I guess I'll never know...

If you want to block SPECIFIC Ads from your YouTube Channel because they are bad for your audience, follow these steps from @NickNimmin

1. Go to this url and log in: https://www.google.com/adsense/start/

2. In the left navigation click on "blocking controls"

3. Click "all sites in the same column.

4. Click "manage advertiser URLs" in the middle of the page

5. Enter URLs you want to block and slide the slider to "block".

Idk when Americans will understand that they only cut jobs so the owners/investors will keep making the same amount of money, not because they CAN’T afford to pay people more. They just don’t want to take a pay cut. It has nothing to do with saving jobs.