Aaron Parecki

“So, Mark, what attracted you to the Metaverse?”
“Well, I read this book about how the government secretly built a virus that takes over your brain when you look at a QR code, and makes you into a nonsense-babbling slave, and thought it was a logical extension of Facebook.”

1992: the internet will be like Snow Crash
2021: the facebook will be like Snow Crash

OAuth is a standard for protecting an app from being stolen or copied by other people.

Independent servers talking to each other using standard protocols to enable communication? I thought we just called that the web.

But yeah, I get the need for a marketing term to describe how this is something different than what folks are typically used to.

The internet has lots of websites that other people can use. There are password-protected websites, but if you forget your password, you have to contact the site owner to get it. OAuth 2.0 makes it easier for people to use these websites because their passwords won’t get lost.

Signed HTTP messages - before & after.
Presented by @justin__richer at the #OAuth @secworkshop 2021

What’s everybody’s plan for Junior year of the pandemic?

I want someone that's only job is to carry and keep track of my sd cards.

The assumption that people will have consistent access to the same mobile number simply isn’t true for a lot of people. Phones cost money. So do phone plans. Phones break or get stolen. We all know this. Yet people who don’t have phones still need access to their email accounts.

I am thrilled to announce my first Chromium Extension: AuRA 🙂
The “Auth. Request Analyser” aims to support the analysis of OAuth 2.0 and OpenID Connect 1.0 SSO flows.

Chrome Web Store: https://chrome.google.com/webstore/detail/aura-auth-request-analyser/clonpaankbndgnciijbiokgjeofjdpeg
GitHub: https://github.com/lauritzh/auth-request-analyser

Some features of v1.0 (Thread):

HTTPSig seems to be an interessting approach for oAuth! Great talk by @justin__richer at #osw2021

If you want to use someone else’s computer, you sometimes have to prove that you are allowed to use their computer. We use a special way of doing this when computers talk to each other.