Aaron Parecki

🌌🌲💚 Almost lost this photo after my sd card decided it hates -25 degree temperatures.

Chanukah is now over. You can stop pretending to include us in your holidays now.

these people heard about the information superhighway and immediately started salivating over how visible their truck stop could be

animal crossing is orders of magnitude more of a decentralized virtual world than decentraland

but more notably... it's like we're excited that FINALLY, for the FIRST TIME*, we have replicated the scarcity and clumsiness of land, on the internet!! thank god!!

if any of this were actually decentralized, there would be infinite land and you could spin up your own!!

* no

For the last time people, dystopian science fiction is dystopian, it's supposed to be a cautionary tale. It's not supposed to be a blueprint for your next startup. 🤦‍♂️ #subtweet

Startups don’t just “run out of money.”

They wait too long to address problems while they had money.

Failure doesn’t usually happen “to” startups.

Problems are rationalized until it’s too late. Too much money multiplies this problem.

there have been *so many* good attempts at decentralized web prior to this cryptocurrency garbage, and there will be many more after it.

Dear world: It is perfectly possible to imagine a radically-decentralized Web and simultaneously disbelieve that basing it on blockchain is necessary or even desirable.

But de facto, the term “Web3” now means “buy my cryptocurrency” and is thus polluted, probably beyond repair.

“So, Mark, what attracted you to the Metaverse?”
“Well, I read this book about how the government secretly built a virus that takes over your brain when you look at a QR code, and makes you into a nonsense-babbling slave, and thought it was a logical extension of Facebook.”

1992: the internet will be like Snow Crash
2021: the facebook will be like Snow Crash

OAuth is a standard for protecting an app from being stolen or copied by other people.

Independent servers talking to each other using standard protocols to enable communication? I thought we just called that the web.

But yeah, I get the need for a marketing term to describe how this is something different than what folks are typically used to.

The internet has lots of websites that other people can use. There are password-protected websites, but if you forget your password, you have to contact the site owner to get it. OAuth 2.0 makes it easier for people to use these websites because their passwords won’t get lost.

Signed HTTP messages - before & after.
Presented by @justin__richer at the #OAuth @secworkshop 2021

What’s everybody’s plan for Junior year of the pandemic?

I want someone that's only job is to carry and keep track of my sd cards.

The assumption that people will have consistent access to the same mobile number simply isn’t true for a lot of people. Phones cost money. So do phone plans. Phones break or get stolen. We all know this. Yet people who don’t have phones still need access to their email accounts.

I am thrilled to announce my first Chromium Extension: AuRA 🙂
The “Auth. Request Analyser” aims to support the analysis of OAuth 2.0 and OpenID Connect 1.0 SSO flows.

Chrome Web Store: https://chrome.google.com/webstore/detail/aura-auth-request-analyser/clonpaankbndgnciijbiokgjeofjdpeg
GitHub: https://github.com/lauritzh/auth-request-analyser

Some features of v1.0 (Thread):

HTTPSig seems to be an interessting approach for oAuth! Great talk by @justin__richer at #osw2021