WeChat ID
aaronpk_tv
-
San Jose, California • Wed, January 16, 2019 1:18pm -
at oktaSan Jose, California • Wed, January 16, 2019 11:11am
-
at Philz CoffeeSan Jose, California • Wed, January 16, 2019 6:56am
-
San Jose, California • Wed, January 16, 2019 6:16am
-
San Jose, California • Tue, January 15, 2019 9:50pm
-
San Jose, California • Tue, January 15, 2019 9:32pm
-
San Jose, California • Tue, January 15, 2019 9:24pm
-
Portland, Oregon • Tue, January 15, 2019 6:50pmPicking up a cold brew coffee for the morning
-
Portland, Oregon • Tue, January 15, 2019 6:12pmAnd so it begins again
-
Still boggles the mind the financial industry has not pushed OAuth as a model for delegating access to transaction history data for aggregators w/o exposing customer passwords. Most seem to still be fine with 3rd party aggregators accepting customer credentials... #solvedProblem
-
Portland, Oregon • Mon, January 14, 2019 5:02pmRolled the boxes right into the truck
-
Awesome resource for OAuth2 specs
https://www.oauth.com/oauth2-servers/map-oauth-2-0-specs/ -
Fred Emmott
https://twitter.com/fredemmott
•
Jan 14
ooh, the Google link is at least helpful for "look, I'm not crazy, Google don't trust client secrets on Windows" :)
oh you're definitely not crazy, I just sometimes forget that not everybody already knows this :-) Most of what I've written on this starts with the assumption that the reader already knows mobile apps can't keep secrets. -
Fred Emmott
https://twitter.com/fredemmott
•
Jan 14
Does anyone have an approachable article for "don't trust the client"? Best I've found is the OAuth threat model RFC (RFC 6819), but it's a bit too long to ask others to read for a quick overview :) (not work related)
Good question. If you find anything, let me know and I can add a link to it on https://oauth.net/2/native-apps/
-
Paul Anthony Williams 🎺
https://twitter.com/PaulAntWilliams
•
Jan 12
Guessing from the header image... was, ironically, the article about Google surveillance?
Yes -
How did we let the Web get to this point. All I wanted to do was read this blog post.
