Aaron Parecki

This is and remains an antitrust problem, a monopolies problem, a problem with turning the public space into a privately owned monoculture. That’s the problem to fix.

The situation we find ourselves in is one where the policy and algorithmic decisions of one company determine what three billion people across the world see. That’s FAR too much power for any company to have.

"Imagine being mad about a game using NFTs for in-game assets that are just records on a server when existing games already have items that work that way."

Yes, we know! You can do the useful part of the thing without NFTs! Thank you for admitting that!

This IS one of the most hilarious things about NFTs, because when the bubble began, the point that got hyped up the most was "guaranteed unique", leading to widespread confusion among the public when, for instance, everybody at a ceremony got "the same NFT" of Chadwick Boseman.

And hilariously this is what every NFT seller ACTUALLY DOES - they ALL mint multiple NFTs for the same file for as much as what the market will bear and then try to price them according to the order they were minted in ("Congratulations, you're Owner #77!") like this is real

Or just having a *normal* URL that lets anyone else in the world view my YouTube video the normal way, for free (or for the negligible cost of doing a normal data transfer on the Web shared between their ISP and my hosting service)

"But NFTs let you do it in a decentralized way."

Every single unnecessary step of the pointlessly convoluted and wasteful blockchain process depends 100% on the existence of internet architecture that is controlled by those central authorities you're supposedly circumventing.

Authorization codes eXXXposed! Check out these naughty native apps going PKCE-free in public! https://tinyurl.com/4ht58kst

Tonight I saw on StackOverflow a mention of the OAuth “explicit flow”, and that gave me pause 😝
I’m afraid to look it up, should I turn the safe search on?

OAuth isn't just a way to log into your favorite sites. It's a way to log into the internet itself.

If you're not using OAuth, you're not on the web.

security engineer: we're going to start moving towards zero trust

developer: oh cool. how does that work

security engineer: [narrows eyes] why do you ask

Today I introduced Microsoft's Principles for Decentralized Identity - our guide posts for building a #decentralizedidentity service that enables user choice, portability, and control https://www.microsoft.com/security/blog/2021/10/06/microsofts-5-guiding-principles-for-decentralized-identities/

are we pronouncing them “nifty”s yet and if we did would that piss anybody off in a funny way

Will read more carefully tomorrow.

Not perfect, but a good bang for the buck on design I have to say :)

OAuth is a natural extension of a single table database

I got something about avoiding pricing overheads from Netflix and YouTube, without mentioning pricing, Netflix or YouTube. There’s definitely a hit list

And now your experiencing the pain of your bad decisions.

Write the full talk, then train a neural net to summarize the transcript.