Expecting a lot of new Micro.blog users over the next few weeks. This week: Twitter mismanages how to deal with Alex Jones and Infowars. Next week: Twitter streaming API gets shut down for third-party developers.
WeChat ID
aaronpk_tv
-
Seems like a good opportunity to make a tweet archive import for micro.blog! I'm seeing a lot of people deleting their tweets after downloading their archive. -
Ben Balter
http://Ben.Balter.com
•
Aug 8
What do people use these days to plan complex, multi-stop personal travel? Are travel agents still a thing? Some fancy new app? Just internet a bunch and book it yourself?
Google flight search + a cocktail + a few hours on the couch -
Andy Baio
https://xoxo.zone/@andybaio
•
Aug 8
Is there any way to post a message SOLELY to your local timeline? That would be pretty cool.
I was actually just thinking the same thing but addressing a specific server. I wanted to say hi to all the xoxo.zone people but my account is on my own website! -
Khor
https://twitter.com/neth_6
•
Aug 8
The link you shared is for Implicit? Implicit does not use client secret. Does this mean IndieAuth is more similar to Implicit than Auth Code but is more secure as the client id has to be redirect uri?
Regular OAuth 2.0 also supports the Authorization Code flow with no secret. In fact, many companies recommend Auth Code w/no secret instead of Implicit.
IndieAuth is like taking Auth Code w/no secret and adding back some layers of security because of the client ID being a URL. -
Khor
https://twitter.com/neth_6
•
Aug 8
Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
But, most importantly, the fact that IndieAuth uses a URL for the client ID means that you *do* authenticate the client in the initial Auth Code request, since the redirect URL has to match the domain or be registered. That's an improvement over OAuth with no secret.
-
Khor
https://twitter.com/neth_6
•
Aug 8
Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
Without the secret, there is no authentication of the client. PKCE solves this by using essentially an on-the-fly secret safe for use by mobile apps. IndieAuth *could* adopt the PKCE extension as well, tho afaik noone has done that yet.
-
Khor
https://twitter.com/neth_6
•
Aug 8
Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps?
Good question! The OAuth Authorization Code flow doesn't require a secret either. For example mobile apps can't use a secret, but still use the Auth Code flow. There are many benefits to the Auth Code flow over Implicit, I wrote some about that here https://developer.okta.com/blog/2018/05/24/what-is-the-oauth2-implicit-grant-type#when-to-use-the-implicit-grant-type
-
Ricky Munroe
https://twitter.com/rimunroe
•
Aug 6
xantham gum is pretty much indispensable for folks with celiac disease. There’s nothing wrong with using it
-
I actually used xanthan gum in a recipe I made today
-
Aug 4
We had a thrilling afternoon at the newly remodeled Space Needle. 🤩
The floor is glass! The walls are glass! The benches are glass too.
oh that is very cool! It's been at least 15 years since I've been there so now I have a good excuse to visit again! -
bradenslen
https://micro.blog/bradenslen
•
Aug 4
@aaronpk They made the Blue Screen of Death much prettier in the last 20 years.
Yeah I almost didn't recognize it! -
ᛚᛖᛁᚠ Warner
http://leifwarner.net
•
Aug 4
There was already RDFa and microformats, but that wasn't enough, so Google put out microdata to go with http://schema.org... I fear open data and the web in general seems to be going downhill, these days. Just corporate silos, some of which have their proprietary APIs.
You'd probably get a kick out of this https://aaronparecki.com/2016/12/17/8/owning-my-reviews -
noooo I just use Windows for QuickBooks, but that is all about to change cause I'm switching to QuickBooks Online because this is nonsense
-
SADTRM~1.WAV
-
Rich Griese
https://twitter.com/RichGriese
•
Aug 4
Get yourself a Mac... they just work. I think it has something to do with magic. :)
I actually run Windows in a VM just so that I can use Quickbooks Desktop. That is literally the only reason I use Windows.
In other news, I'm going to the Apple Store on Tuesday to get both of my Mac's keyboards replaced cause they're doubling up a bunch of keypresses. -
Tantek Çelik
http://tantek.com/
•
Aug 2
Gave my lightning talk at the #DWebSummit:
#IndieWeb. Taking back your content with practical #decentralization steps
Outline & links: https://indieweb.org/dweb2018
Great questions everyone! Thanks @benwerd for posts and photo!
https://twitter.com/benwerd/status/1025134936016076800 -
Thanks for writing this up! I've made some minor changes to how Quill displays error messages now, as well as tweaked some copy to make it address users rather than developers.
Quill started out as a tool to help debug Micropub implementations, so all the copy was phrased to address the developer of a Micropub endpoint. That was before https://micropub.rocks existed. Quill later evolved to be a much more robust client that can create a bunch of kinds of content, and I hadn't yet gone back through and updated the text.
It's clear this has become necessary, so hopefully these changes make a difference now! -
Ensure URLs returned are properly encoded
The change in https://github.com/indieweb/php-mf2/pull/170 means it's possible to return URLs like http://example.com/foo bar with a space instead of the URL-encoded %20.continue reading... -
I think I'm in favor of merging this as is, even if it still returns invalid URLs, because it won't return anything more broken than the current version. I do think it should properly escape URLs in the parsed result though, since that's what would happen if you included a link in an
<a>tag in a browser that included spaces. (The browser converts those to%20. -
HACKER TEEN PUCKIPEDIA 👩💻
http://puckipedia.com
•
Aug 1
I should probably support micropub in kroeg's frontend somewhen when that's working better... Also this is giving me some cool concepts now
that'd be awesome. I just wrote an ActivityStreams-to-Microformats JSON converter which wasn't that hard. It shouldn't be that hard to go the other way around.
