Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋
Portland, Oregon
Joined April 2008
- Tweets 11,388
- Following 1,223
- Followers 6,415
- Likes 9,609
This trip is doing a good job of reminding me why I don't check bags. 40 minutes waiting for bags at PDX, and the Lyft pickup went from 1 minute away to 15 minutes away 😭
3
4
This is about to get a lot worse tomorrow when all the legacy blue checkmarks disappear and Twitter is left with only paid blue checks. The scammers will undoubtedly pay for some verified checks to gain more legitimacy.
1
1
9
Want to find all the bots on Twitter? Watch this:
My IG account was hacked, can someone help me recover it? cc @instagram
31
2
28
26
Ok did everyone at #SonyCameraCamp have to sign a thing that says they have to tweet about the AI features of the new 📸 ZV-E1?
I've counted at least half a dozen tweets in my timeline that mention how good the AI is without describing what it actually does.
2
4
very whining on the yacht problem I know, but it's been a long day and it's going to be another long day before I actually get home
1
3
But also wtf @AmericanAir what's the point in buying a Premium Economy ticket if you don't serve bubbly, and also ran out of the IPA that's on the menu before the plane even took off
1
1
I've always thought I present pretty clearly as cisgender male, but this flight attendant just told me "no ma'am" when I asked if they had any sparkling wine on board 🤷♂️
2
5
Yet another reason why Token Exchange is dangerous 🤯😱
"Bing is allowed to issue Office tokens for any logged-on user"
When inspecting Bing requests, I noticed an endpoint being used for Office 365 communications. As it turns out, Bing is allowed to issue Office tokens for any logged-on user. I quickly crafted an XSS payload utilizing this functionality, tested it on myself, and it worked!
2
1
11
First #ietf116 session of the day is #OAuth complete with custom SD-JWT t-shirts 😂
@kristinayasuda @dfett42
1
4
4
16
Well that's a sentence I never thought could exist.
"A request for comment from Twitter’s press office was met with an automated reply containing a poo emoji, a new policy announced by Musk this month."
4
Feature request for all calendar apps:
Let me temporarily switch my calendar into a different timezone so I can better plan events in my home timezone when I am traveling.
This is why I was using a paper planner in 2019.
4
2
18
Tokyo at night
First edit from last night's photo walk around Shinjuku
Shot on LUMIX GH5II
Edited in Lightroom
2
36
Every time i use my Windows computer I feel like I'm stuck under water and every time i press a button some other button gets pressed instead.
I'm sure it's fine if you're used to it, but wow I just feel incompetent trying to use it.
4
9
omfg, TIMESTAMP type columns are timezone-aware, but DATETIME columns are always UTC. How have I been using MySQL for 25 years and never known this
dev.mysql.com/doc/refman/8.0…
3
14
🤯 TIL MySQL is aware of daylight savings time, and considers any times between 2am-3am when the clocks skip forward an invalid date!
In one session, it might throw an error, and in another session, it might store 3:00am instead of 2:05! 🤯
4
2
1
20
I wrote up some thoughts about how Bluesky can/should support OAuth, both for applications to access users' accounts, as well as allowing users to log in to their bsky.social account using their own website!
aaronparecki.com/2023/03/09/…
1
1
9
It's absolutely wild to me that companies will mail me a postcard a few weeks after an Amazon purchase and offer a $150 gift card to leave a review! Is that really profitable? Are they actually going to make back $150 because of my one review?
3
5
another day, another account takeover caused by an open redirector and the OAuth Implicit flow 🫠
salt.security/blog/traveling…
10