50°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Dave Hayden ๐ŸŠ https://pdx.social/@dave   •   Aug 7

    @aaronpk just checked and Iโ€™m back to Marchโ€™s high ๐Ÿ˜ฑ

    Aaron Parecki
    exactly
    Portland, Oregon • 70°F
    Tue, Aug 6, 2024 8:38pm -07:00
  • Jonne Arjoranta ๐Ÿ“š https://scholar.social/@jaranta   •   Jul 30

    @aaronpk Do you care about having made 100 songs, or having 100 songs? This accomplishes only one of those goals.

    Aaron Parecki
    That's an interesting point, although if you watch this video and the next ones, I'm not sure I agree it's as clear cut as that. That's really getting to the question of what it really means to create music, and that line has been very blurry for a long time already.
    Portland, Oregon • 64°F
    1 reply
    Tue, Jul 30, 2024 6:18am -07:00
  • Optional https://dice.camp/@Optional   •   Jul 30

    @aaronpk I can totally relate to our motivation for that original challenge of 100 songs in 100 days! Last November I wrote 30 short stories in 30 days. Andโ€”like youโ€”I'm thinking about a way to revisit them and do something more.

    And that's a neat video you put together. Though at some point you turned the volume of your Mac down leading to a big difference between the volume of your voice and the music

    Aaron Parecki
    Thanks! Yeah I thought the music was too loud to hear what I was saying but then I turned it down too much. Hopefully the next videos turn out better. I don't know if I'm going to do videos for all the remaining songs but I'm going to try for most of them.
    Portland, Oregon • 64°F
    Tue, Jul 30, 2024 6:17am -07:00
  • noplasticshower https://zirk.us/@noplasticshower   •   Jul 11

    @aaronpk done. Thrice

    Aaron Parecki
    nice nice nice
    Portland, Oregon • 87°F
    1 like
    Wed, Jul 10, 2024 6:37pm -07:00
  • Nils https://coolworld.cc/@n   •   Jun 11

    @carpetbomberz @aaronpk Aaron is clearly not a fan of Yellow No. 5 and 6, either.

    Aaron Parecki
    Turmeric makes a really nice yellow color!
    Portland, Oregon • 65°F
    Tue, Jun 11, 2024 11:11am -07:00
  • fgtech https://micro.blog/fgtech   •   Jun 11

    @aaronpk Itโ€™s not a powder, but this is the best vegan cheese sauce Iโ€™ve found:

    Paleo Mac and Cheese

    I use coconut oil in place of butter and skip the egg yolk to go full vegan. Add 1 tsp of turmeric for deeper flavor (and color). Freezes well.

    Aaron Parecki
    That looks pretty good. I'm going for super lazy tho, preparing the dry powder in bulk in advance so that cooking is just adding non-dairy milk.
    Portland, Oregon • 64°F
    Tue, Jun 11, 2024 9:39am -07:00
  • Philip Zastrow https://mastodon.social/@zastrow   •   Jun 11

    @aaronpk Say more. What is your mixture and does it involve nuts?

    Aaron Parecki
    no nuts in this one! It's mainly nutritional yeast by volume.
    Portland, Oregon • 69°F
    1 like 1 reply
    Mon, Jun 10, 2024 9:07pm -07:00
  • Rosemary Orchard https://snailedit.social/@rosemary   •   Jun 8

    @aaronpk I need to introduce you to @balloob and the other @homeassistant folks! I bet they'd love feedback from you. (Also, naming things is so hard!)

    Aaron Parecki
    oh that'd be great! I have a few OAuth-related things I'd love to talk with them about!
    Portland, Oregon • 61°F
    1 like
    Sat, Jun 8, 2024 7:28am -07:00
  • Sir David Nielsen https://mastodon.social/@DavidNielsen   •   Jun 5

    @aaronpk uh it is made from purest green.

    Aaron Parecki
    I did add a drop of green food coloring because it looked a bit muddy before ๐Ÿ™ƒ
    Portland, Oregon • 62°F
    Wed, Jun 5, 2024 10:54am -07:00
  • Matthias Ott https://mastodon.social/@matthiasott   •   Jun 5

    @aaronpk A bottle a day keeps the doctor away!

    Aaron Parecki
    Yeah that's pretty much the rate we go thru hot sauce
    Portland, Oregon • 57°F
    1 like 1 reply
    Tue, Jun 4, 2024 9:47pm -07:00
  • Erlend Sogge Heggen https://writing.exchange/@erlend   •   May 30

    @aaronpk may as well get ahead of it and make OAuth 3.0 now. Sounds like the AI mastermind has already figured out how to make it super duper compliant, like, globally ๐Ÿซ 

    Aaron Parecki
    Might as well get the AI to write it for me then ๐Ÿ˜…
    Las Vegas, Nevada • 99°F
    1 like
    Thu, May 30, 2024 5:33pm -07:00
  • Jason Garber https://mastodon.cc/@jgarber   •   May 18

    @aaronpk I read over your post and a bunch of related links. Really fascinating stuff!

    From your post: โ€œAll it takes to turn your website into a FedCM-supported site is adding a single `<link>` tag to your home page.โ€

    Can you expand on this? IndieAuth (mostly) requires two `<link>` elements for authorization and token endpoints. What would a singular `<link>` look like in this case?

    Aaron Parecki
    A few years ago we changed the IndieAuth spec to use a single link tag so that it's easier and also more flexible in the future. This is a good example of taking advantage of that flexibility too. https://indieauth.spec.indieweb.org/#indieauth-server-metadata
    Portland, Oregon • 49°F
    1 reply
    Sat, May 18, 2024 8:03am -07:00
  • Emelia ๐Ÿ‘ธ๐Ÿป https://hachyderm.io/@thisismissem   •   May 16

    @aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

    Aaron Parecki
    I just saw your comment on FedCM #585. Since you're diving into the depths of Mastodon OAuth already I'd love to talk about how we can better align IndieAuth OAuth and Mastodon OAuth!
    Portland, Oregon • 63°F
    1 reply
    Thu, May 16, 2024 11:22am -07:00 #585
  • Emelia ๐Ÿ‘ธ๐Ÿป https://hachyderm.io/@thisismissem   •   May 16

    @aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

    Aaron Parecki
    It has nothing to do with FedCM actually. In IndieAuth we avoid client registration entirely by using URLs as client identifiers. So the client already knows its client ID, and uses the same client ID at every authorization server it talks to. It's also a natural fit for FedCM since you can use `window.location.origin` for it in the JS call.
    Portland, Oregon • 63°F
    1 reply
    Thu, May 16, 2024 11:15am -07:00
  • KimberlyHirsh https://micro.blog/KimberlyHirsh   •   May 15

    @aaronpk This is great advice but anyone who tried it for me would be sorely disappointed by the extreme lack of refund.

    Aaron Parecki
    I have bad news, they just make up whatever numbers they want so that it comes out to getting a refund on your behalf ๐Ÿ™ƒ
    Portland, Oregon • 52°F
    Wed, May 15, 2024 6:09am -07:00
  • https://berlin.social/@ir/112438489029794850
    Aaron Parecki
    Thanks! There's currently no browser API that guarantees the use of secure-element-stored private keys. The best we get now is non-exportable. There's a mention of that here https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#section-6.3.4.2.2 But as discussed, even hardware-backed keys don't prevent an attacker from starting their own flow in the browser with their own keys.
    Portland, Oregon • 47°F
    Tue, May 14, 2024 5:32am -07:00
  • https://mapstodon.space/@arferrand/112438539249720831
    Aaron Parecki
    Thanks! Mostly I'm doing German so I don't completely forget everything I learned in school.
    Portland, Oregon • 47°F
    Tue, May 14, 2024 5:29am -07:00
  • Royce Williams https://infosec.exchange/@tychotithonus   •   May 14

    @aaronpk Legit impressive.

    Aaron Parecki
    I've been looking forward to this day for a long time
    Portland, Oregon • 60°F
    1 like
    Mon, May 13, 2024 9:05pm -07:00
  • daniel:// stenberg:// https://mastodon.social/@bagder   •   Apr 15

    Support for RFC 9421 - HTTP Message Signatures in #curl ?

    https://github.com/curl/curl/discussions/13376

    Aaron Parecki
    Yes please! Like TLS, HTTP Signatures should be baked into the HTTP client, not something people have to write at the application layer. This will make it much more accessible!
    Portland, Oregon • 42°F
    2 likes
    Sun, Apr 21, 2024 7:35am -07:00
  • Eric Likness https://mastodon.online/@carpetbomberz   •   Apr 21

    @aaronpk Must an IP68 rating. One positive side effect of not being easy to repair (full water sealing).

    Aaron Parecki
    These are second gen which aren't even advertised as "water resistant" unlike the 3rd gen!
    Portland, Oregon • 42°F
    1 like
    Sun, Apr 21, 2024 7:31am -07:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • ๐ŸŽฅ YouTube Tutorials and Reviews
  • ๐Ÿ  We're building a triplex!
  • โญ๏ธ Life Stack
  • โš™๏ธ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv