Aaron Parecki

Stefán Jökull Sigurðarson - CCP Ghostrider https://twitter.com/stebets • Aug 31
SMS 2FA is always better than no 2FA though.

If SMS is purely for 2FA then yes. but quite often adding SMS 2FA also lets you use SMS for account recovery, and that is worse than having no 2FA.

Portland, Oregon

1 like 1 reply

Sat, Aug 31, 2019 7:21am -07:00
Heather Downing https://twitter.com/quorralyne • Aug 30
What factor would you prefer though?

Something that can't be taken away from me without my knowledge. So, yubikey, TOTP, or even push notification, etc.

Portland, Oregon

2 likes 2 replies

Fri, Aug 30, 2019 4:47pm -07:00
Scott Hanselman https://twitter.com/shanselman • Aug 30
HOW did the CEO of Twitter's account get hacked? Don't y'all have people for that? An oh shit button? 2FA? Something?

SIM hijacking is a thing, and why SMS should never be used for two factor authentication

Beaverton, Oregon

6 likes 3 replies

Fri, Aug 30, 2019 1:48pm -07:00
Mike Purvis https://twitter.com/mikedotexe • Aug 30
I just tweaked the DOM to illustrate what I'd like to see. I (would) love it, too. 🤞

But for real, there's some new work going on around this right now, the idea is to add structure to the scopes requested so they can do things like this, or asking for permission into a specific bank account or for a specific dollar amount, etc

Portland, Oregon

1 like 1 reply

Fri, Aug 30, 2019 10:49am -07:00
Mike Purvis https://twitter.com/mikedotexe • Aug 30
I just tweaked the DOM to illustrate what I'd like to see. I (would) love it, too. 🤞

👏👏😂

Portland, Oregon

Fri, Aug 30, 2019 10:31am -07:00
Mike Purvis https://twitter.com/mikedotexe • Aug 30
I want to see this in @oauth_2 . Limits per usage with automatic revocation once the max is reached. Is anyone doing this? I've never seen it.
Something similar found here, but not the same if I'm reading it correctly: https://tools.ietf.org/html/rfc6819#section-5.1.5.4

I love this. What service is this? It doesn't look like the normal Facebook OAuth screen I've seen.

Portland, Oregon

2 replies

Fri, Aug 30, 2019 10:27am -07:00
EJ Fox 🌞 https://twitter.com/mrejfox • Aug 29
This looks really awesome, thank you for laying all this groundwork. People like you make me hopeful in a time when hope is rare!

Thanks! There's an indiewebcamp coming up in your neck of the woods soon too! You're more than welcome to join! https://2019.indieweb.org/nyc

Portland, Oregon

Thu, Aug 29, 2019 4:16pm -07:00
EJ Fox 🌞 https://twitter.com/mrejfox • Aug 29
There is no reason that your personal website couldn't ping my personal website when you post an awesome new photo, and yet the entirety of some artists' work is held in an Instagram profile- these are choices we have made as developers, creators, and as a society

There's definitely a growing worldwide community doing exactly this right now! #indieweb

Here are my photos: https://aaronparecki.com/photos

Here is how everything fits together https://aaronparecki.com/2018/04/20/46/indieweb-reader-my-new-home-on-the-internet

Portland, Oregon

1 like 2 replies

Thu, Aug 29, 2019 3:24pm -07:00 #indieweb
Matthew Somerville https://twitter.com/dracos • Aug 29
[I don't know what happened with your reply there? It might be leaking your location?]

I realise that; I was replying to Phil with something that would work for his instructions (of which step 1 was creating your own Foursquare app).

Fixed my site, thanks, here is the actual reply: https://aaronparecki.com/2019/08/29/12/

Portland, Oregon, USA

Thu, Aug 29, 2019 11:36am -07:00
Matthew Somerville https://twitter.com/dracos • Aug 29
[I don't know what happened with your reply there? It might be leaking your location?]

I realise that; I was replying to Phil with something that would work for his instructions (of which step 1 was creating your own Foursquare app).

holy crap well that's a fun bug

Portland, Oregon

1 like

Thu, Aug 29, 2019 11:30am -07:00
Simon Willison https://twitter.com/simonw • Aug 29
My tool is coming together! Sadly I am without either Wifi or tethering for my laptop so I can only share this preview photo...

🎉 fantastic!

Portland, Oregon

Thu, Aug 29, 2019 11:19am -07:00
Matthew Somerville https://twitter.com/dracos • Aug 29

Foursquare requires the client secret, simon doesn't want to ship the secret in the code, so the only way to do it is for simon to host a web service that acts as a relay.

Portland, Oregon

1 reply

Thu, Aug 29, 2019 10:56am -07:00
Phil Gyford https://twitter.com/philgyford • Aug 29
When I wrote a script to get all of a user’s checkins to make an ical feed I couldn’t find anything and ended up with the laborious instructions here https://github.com/philgyford/foursquare-feeds

It definitely exists, I use it for copying my checkins going forward to my website. I just haven't done the full import of past checkins yet. https://developer.foursquare.com/docs/api/users/checkins

Portland, Oregon

1 like 2 replies

Thu, Aug 29, 2019 10:42am -07:00
Nick Doty https://octodon.social/@npd • Aug 29
@aaronpk but the carbon emissions of that air commute are much, much greater, even compared to long car commutes!

That is very true, which is why I'm glad I don't actually commute every day :-)

Portland, Oregon

1 reply

Thu, Aug 29, 2019 7:42am -07:00
Daniel Ehniss https://twitter.com/depone • Aug 29
Is http://ownyourgram.com not working for me or anybody else? // cc @aaronpk #IndieWeb

yes, we've been playing a cat and mouse game trying to keep it working. Not looking good right now.

Portland, Oregon

Thu, Aug 29, 2019 7:02am -07:00
Micah Silverman https://twitter.com/afitnerd • Aug 29
Me (in Australia): It took me a bit to get used to how all your power outlets have individual switches.

My mate (I use the word mate now): You mean in America the power to all the outlets is on all the time?

Me: yup

My mate: Well, that's just fucking dangerous!

also I'm imagining someone saying that in an australian accent and it is great

Portland, Oregon

2 likes

Wed, Aug 28, 2019 11:19pm -07:00
Micah Silverman https://twitter.com/afitnerd • Aug 29
Me (in Australia): It took me a bit to get used to how all your power outlets have individual switches.

My mate (I use the word mate now): You mean in America the power to all the outlets is on all the time?

Me: yup

My mate: Well, that's just fucking dangerous!

Last weekend I was chatting with a friend who does forensic investigation of fires and it turns out electrical outlets are ACTUALLY REALLY DANGEROUS omg. Don't ever leave a device half plugged in it turns out it *will* start a fire.

Portland, Oregon

3 likes

Wed, Aug 28, 2019 11:18pm -07:00
Simon Willison https://twitter.com/simonw • Aug 28
It's for a tool to export the user's entire Swarm checkin history and save it to a local SQLite database file

I need this tool!

Castro Valley, California

1 like 1 reply

Wed, Aug 28, 2019 5:00pm -07:00
Aaron Parecki https://aaronparecki.com/ • Aug 28
Yeah there are a couple tricks, none of which are ideal. Basically you kick off the flow from the CLI app, get the user to visit a URL, but the redirect is to your server, and then you either tell them to paste an auth code into the CLI or

or, you spin up a local web server to catch a redirect back from your backend, or you mimic the OAuth device flow on your backend. Hmm this sounds like a fun blog post 😬

Castro Valley, California, USA

3 likes

Wed, Aug 28, 2019 4:58pm -07:00
Simon Willison https://twitter.com/simonw • Aug 28
@aaronpk do you know if there's a neat way for me to auth with Foursquare from a CLI tool I'm building? I need the user to be able to get their own OAuth token but I don't want to ship my client secret with the CLI tool

Yeah there are a couple tricks, none of which are ideal. Basically you kick off the flow from the CLI app, get the user to visit a URL, but the redirect is to your server, and then you either tell them to paste an auth code into the CLI or

Castro Valley, California

1 like 1 reply

Wed, Aug 28, 2019 4:57pm -07:00

older