Aaron Parecki

Join myself, @aaronpk, @photojoseph, @djp_video, @petratjev, @DavidJoshuaFord & @rjstudios for a day of talks, streaming and jumping around each of your channels! Full details: https://h2r.li/streamday

It seems to be "if it looks official enough" 😂

In which @aaronpk wins a raffle at #eic2022 but the prize is another drone so he just uses it as a foot rest.

Slovakian sees a video about American suburbs and posts questions to Reddit. The level of bafflement is hilarious and appropriate.

oauth 1.0: all this signing request data is too hard
oauth 2.0: [adding JWT and public key crypto and DPoP and PKCE] yes I agree

Thank you to all who attended my talk on “Securely Identifying Mobile Apps”!! I referenced two additional resources which can be found here: [1] https://speakerdeck.com/aaronpk/app-integrity-attestations-for-oauth-oauth-security-workshop-2022 [2] https://danielfett.de/2020/11/27/improving-app2app/#EIC2022 @aaronpk @josephheenan

A dashing @gffletch presents at @kuppingercole #EIC2022 on a perma-problem in OAuth, determining the identity of a public client.
Note the magistral use of http://identicons.dev 💪

I have been informed that it is not likely intentional but the marketing team isn't in town to ask. #eic2022

My ability to dissociate has become too powerful. Now I’m just watching the fall of America like “hmm yeah that happens to empires” while I look for dog hats on Amazon.

Remember the step-up authn proposal @__b_c and yours truly brought up at #OSW and presented at #IETF103?
Well, today the draft has been officially adopted by the OAuth WG!
Thx to everyone who already provided feedback. Now that true work begins 💪 https://www.ietf.org/archive/id/draft-ietf-oauth-step-up-authn-challenge-00.html

I don’t even know how to adequately react to the realization that I’ve “lost” more money in the past 6 months than I used to make in a year, with a third of that being in the last week. It’s just hilarious because it has to be.

In addition to my ongoing plea for no one to check their 401ks, I would also like to posit that money isn’t real since we all clearly have none of it anymore.

I always thought burnout happened when you work too much.

Now I get it. It's investing emotionally and then not getting a return on that investment.

At the risk of speaking “sacrilege”… is decentralization possible? It seems our industry has tried this multiple times and it has “failed”. Mainframe -> PC -> Cloud. The most recent example, FIDO with credentials decentralized and now with PassKey they are centralized again :)