Aaron Parecki

@aaronpk But OBS is free

@aaronpk ya but ATEM is expensive

@aaronpk I am a proud owner of a beach tent which was sent to us unsolicited and unannounced in order to get a good review I believe.

@netwolfuk not without obs or a virtual camera

@rabble @aaronpk i'm more curious about how you set up cross-posting tbh; the "Applications model" page in their docs has a reasonable example to create a post but i wish there was more detail about each method. i post a lot of pics and it seems like there's support for blob uploads but i can't find documentation on how to hook everything together

@aaronpk where is the docs on the custom domains. I couldn’t find it in the app. Just folks talking about doing it.

@aaronpk gotosocial is that easy too.

True, but it would be tricky.

Wouldn’t the attacker have find a way to extract the code_verifier from local storage and pass it along with the hijacked redirect?

They would have to somehow have the ability to write custom js code on the path they are redirecting to. I guess this is possible on sites that don’t sanitize user inputs.

Could using PKCE fix this issue?

Ever wanted to use your own choice of OIDC IdP with @tailscale? I'm looking for private alpha testers - new and existing users welcome. DM me!

A bit confused as to how it interacts with #fediverse - rival paradigms? Interoperable? Just totally different things? #indieweb