Aaron Parecki

To anyone who thought partial redirect URL matching in @OAuth_2 is "good enough," read this thread. Complete Periscope account takeover just by viewing a tweet. https://hackerone.com/reports/110293 #oauth

If you're in Toronto you should come to my #OAuth talk tomorrow! 🔐 https://regionalevents.okta.com/oktaapiworkshoptoronto

We'll have food and drinks, and we're giving copies of my book to everyone who attends! 📚

I realized I was setting arbitrary due dates on my todo list as a way to prioritize tasks so they'd show up in order of importance, but it turns out that's a terrible technique.

I just did a major refactoring of my Todoist and now I'm using priority 1/2/3 tags for that, and due dates only when a task is really due that day.

I'm still figuring out exactly how to use the priorities, here's what I've got so far:

• p1 - this is top priority, I should do things in this list as soon as possible
• p2 - things that I want top of mind, but can wait until things in p1 are done
• p3 - sort of a catch-all when I want something to bubble up a bit quicker than if it has no priority tag

I also switched my main view in Todoist to a custom filter that shows me:

• tasks due today
• priority 1 tasks not due today
• overdue tasks

I'm going to try to stick to this view as my primary view instead of clicking on the "Today" tab.

#productivity

Good morning! Watch this video

https://vimeo.com/336343886

and then go sign up for IndieWeb Summit in Portland!

https://2019.indieweb.org/summit

#TakeBackYourWeb

it's always important to consider the opposite viewpoint

https://twitter.com/nelson/status/1128064202600357893

I decided to set up a URL shortener on my short domain, aaronpk.com, thanks to some recent discussion in the IndieWeb chat.

I found an open source project that is basically exactly what I would have built if I had built my own: https://polrproject.org/

The installation wasn't seamless, but I'm familiar enough with the tech it's built on so I managed to get it set up. I also made one modification to it, which is that if you type in a short URL that doesn't exist, it redirects to the same path on aaronparecki.com, so that all my regular pages now automatically have a short URL.

This is definitely a lot nicer than my previous solution of adding URLs to a text file.

Yesterday there was cilantro in my soup, and suddenly it tasted so much like soap that I couldn't eat it.

Over the last few months, I've noticed that cilantro has started tasting bad, but didn't really think much of it. I looked up the food sensitivity list of people who also think cilantro tastes like soap, and now I am super confused, because most of these are my favorite flavors: https://en.wikipedia.org/wiki/Supertaster#Specific_food_sensitivities

• Gins, tequilas, and hoppy beers are my favorite
• I eat brussels sprouts, cabbage and kale all the time
• I am a huge fan of coffee, always unsweetened
• grapefruit juice is a staple in my fridge
• I make my own tonic with quinine so that I can make it less sweet and more bitter than normal
• I enjoy ridiculously spicy foods, and I eat raw habaneros for breakfast every morning

So why is cilantro the one that tastes bad to me? And why did this change? I used to enjoy cilantro! I didn't think this sensitivity was something that could change in people over time.

Post-IndieWebCamp hacking continues at the hotel bar! Made a few more minor improvements to Monocle:

• Defaults to "https" when you type in a domain, and if that fails, will fall back to http, rather than the other way around
• Added a logout button
• Added mobile screenshots to the wiki
• Updated the indieauth-client-php library to bubble up things like ssl errors so that apps using the library can report errors better

Second #IndieWebCamp hack day project: how to quickly get started using an IndieWeb reader.

• start with a blank HTML file
• add a rel=me link to your GitHub profile, and make sure your GitHub profile links back
• add a couple `<link>` tags for indieauth.com
• sign in to https://aperture.p3k.io
• add the `<link>` tag it generates for you
• sign in to an IndieWeb reader!

More details at: https://indieweb.org/Microsub#Getting_Started

Photos from IndieWebCamp Düsseldorf day 1 are already posted! 📷 https://www.flickr.com/photos/tollwerk/albums/72157691376106913 Thanks to our amazing photographer @iwontsignuphere

Pretty disappointing response from NextCloud on this (really bad) bug in their desktop sync client.

https://github.com/nextcloud/desktop/issues/1000#issuecomment-489677559

If you are a paying enterprise customer, would you please push on their support if you're having this problem?

I got a lot of questions last week at @ML4ALL about how I was able to turn around the conference videos so quickly, so I put together a little behind-the-scenes video showing a walkthrough of my whole setup and workflow, including biking all the gear in and out! 🚲🎥🎉 https://www.youtube.com/watch?v=epKA84wK9ls

Browser APIs have gotten so much better lately! Way easier to do @oauth_2 PKCE in a browser now:

✅ good random number generators
✅ secure hashing functions

Just missing a good base64 encoding function. (Check out the ugly hack in the post.)

https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead#begin-the-pkce-request

current status: wrapped up the web standards meeting for the day, and now watching the recording of yesterday's Planning and Sustainability Commission meeting in Portland, a different kind of standards meeting.

what? I don't have too many projects *you* have too many projects

I commuted to Mountain View from Portland this morning and still got here earlier than some people who were stuck in Bay Area traffic. #iiw

Just in time for #iiw I published a blog post: "Is the OAuth 2.0 Implicit Flow Dead?" https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead