Aaron Parecki
where else to find them
website:https://aaronparecki.com
github:aaronpk
bluesky:aaronpk.com
mastodon:@aaronpk@aaronparecki.com
x:aaronpk
linkedin:aaronparecki
speakerdeck:aaronpk
instagram:aaronpk_tv
what they talk about
all 7 in the filters
where they keep going back
- Open Source Bridge3 editions2013–2015
- GOTO Chicago2 editions2020–2024
all 7 in the filters
on a stage with
- Eric Johnsononce
who talks about the same things
- Ben Dechrai29 talks
- Philippe De Ryck39 talks
- Dominick Baier31 talks
- Nahid Farrokhi3 talks
- Anders Abel14 talks
- Brock Allen11 talks
| title | conference | date |
|---|---|---|
| A Deep Dive into the Past, Present & Future of OAuth | GOTO Chicago 2024 | 2024-10-21 |
Argument: OAuth is converging on a simpler baseline — OAuth 2.1 endorses authorization code + PKCE as the default and removes legacy shortcuts. Practical fixes… | ||
| The state of OAuth | apidays Paris 2021 | 2021-12-07 |
OAuth now consolidates modern practice: it deprecates the implicit and password flows and snapshots best practices as oauth 2.1, recommending authorization… | ||
| Why Do We Really Need OAuth Anyway? | beyond tellerrand Düsseldorf 2021 | 2021-11-08 |
OAuth exists to give apps limited tokens instead of passwords so third parties get only the data they need and access can expire. It pairs with non‑phishable… | ||
| Fireside Chat About OAuth 2.0 | GOTOpia February 2021 | 2021-02-09 |
Quick, concrete take: OAuth 2.0 is about granting API access, not identity (OpenID Connect adds identity), JWT is a token format not OAuth, and OAuth 1… | ||
| Hacking OAuth | Developer Summit 2020 | 2020-11-21 |
Examines real breaches (Twitter API key leaks, OAuth phishing that mimicked Google Docs) and maps each to OAuth mechanics and fixes: covers authorization code… | ||
| How to Hack OAuth | GOTO Chicago 2020 | 2020-04-27 |
Covers concrete failures and fixes: API keys embedded in mobile apps are decompiled mobile apps and posted on GitHub so attackers impersonate official clients… | ||
| Smarter Home Automation without the Cloud | Øredev 2019 | 2019-11-06 |
Claim: keep the smarts at home and avoid cloud outages. Demonstrates a working stack with Home Assistant as the local controller, Node-RED for visual rules… | ||
| How To Hack OAuth| | Øredev 2019 | 2019-11-06 |
Covers concrete failures: leaked native app keys forcing adoption of PKCE; token forgery by manipulating headers in the JWT alg none bug; a fast‑spreading… | ||
| Micropub: The Emerging API Standard for IndieWeb Apps | Open Source Bridge 2015 | 2015-06-23 |
Micropub is an API standard for creating posts on your own domain from third‑party apps, using the microformats2 vocabulary and IndieAuth (OAuth2 with URLs)… | ||
| OAuth, IndieAuth, and the Future of Authorization APIs | Open Source Bridge 2014 | 2014-06-24 |
OAuth 2.0 plus a web identity layer that treats users and apps as URLs enables third‑party apps to post to personal sites using the standard authorization code… | ||
| Low Friction Personal Data Collection | Open Source Bridge 2013 | 2013-06-18 |
GPS location logs run continuously since 2008, check‑ins on Foursquare are complete since 2009, and sleep records come from a Jawbone device nightly since late… | ||
| Hacking IRC Bots | Open Source Bridge 2013 | 2013-06-18 |
Claims a lightweight IRC workflow replaces daily standups by logging short updates and sending an end‑of‑day daily email digest per timezone. Implements… | ||
| nothing matches | ||