After a lot of discussion on the mailing list over the last few months, and after some excellent discussions at the OAuth Security Workshop, we've been working on revising the draft to provide clearer guidance and clearer discussion of the threats and consequences of the various architectural patterns in the draft.
{
"type": "entry",
"published": "2023-10-23T09:12:55-07:00",
"summary": "After a lot of discussion on the mailing list over the last few months, and after some excellent discussions at the OAuth Security Workshop, we've been working on revising the draft to provide clearer guidance and clearer discussion of the threats and consequences of the various architectural patterns in the draft.",
"url": "https://aaronparecki.com/2023/10/23/5/oauth-browser-based-apps-draft-15",
"category": [
"oauth",
"ietf"
],
"name": "OAuth for Browser-Based Apps Draft 15",
"author": {
"type": "card",
"name": "Aaron Parecki",
"url": "https://aaronparecki.com/",
"photo": "https://aperture-media.p3k.io/aaronparecki.com/41061f9de825966faa22e9c42830e1d4a614a321213b4575b9488aa93f89817a.jpg"
},
"post-type": "article",
"_id": "39252934",
"_source": "16"
}
{
"type": "entry",
"published": "2023-10-22T19:24:12-07:00",
"url": "https://aaronparecki.com/2023/10/22/11/mics",
"category": [
"homeautomation"
],
"content": {
"text": "was it absolutely necessary to run cables for ceiling mics in 5 rooms? definitely not. but now I am all set up to film a reality show \ud83d\ude02",
"html": "was it absolutely necessary to run cables for ceiling mics in 5 rooms? definitely not. but now I am all set up to film a reality show <a href=\"https://aaronparecki.com/emoji/%F0%9F%98%82\">\ud83d\ude02</a>"
},
"author": {
"type": "card",
"name": "Aaron Parecki",
"url": "https://aaronparecki.com/",
"photo": "https://aperture-media.p3k.io/aaronparecki.com/84db372c0f0b26c38c2198e5bdb4c3e61438aad138710b886ba2b72963215ccf.jpg"
},
"post-type": "note",
"_id": "39247507",
"_source": "16"
}
{
"type": "entry",
"published": "2023-10-22T18:59:41-07:00",
"url": "https://beesbuzz.biz/blog/5784-I-did-the-thing",
"photo": [
"https://beesbuzz.biz/_async/.eJyLVkrOzytJzSvRT8rJT9f39HWPNzM2NtXLKkhNV9Ix1KlWyk2siC_PTCnJULIyMjHQAfMzUjPTM0qgAkWpxZlVqUpWSmmZOTlKOkpp-UW5iUBJpfLUpAKl2lgAPjwf3w.rn2M2f66Zj--GPOymxHDyf33qn8",
"https://beesbuzz.biz/_async/.eJyLVkrOzytJzSvRT8rJT9f39HWPNzM2MdTLKkhNV9Ix1KlWyk2siC_PTCnJULIyMjHQAfMzUjPTM0qgAkWpxZlVqUpWSmmZOTlKOkpp-UW5iUBJpfLUpAKl2lgAPVYf3A.m36eVod6AtUtIEkfAxHvx0CXD_Q"
],
"name": "I did the thing",
"content": {
"text": "The plan went pretty much according to keikaku1.\nI had difficulty finding the studs because there\u2019s some particleboard behind the drywall for some reason. Maybe some half-assed attempt at a moisture barrier or something? It was pretty obvious that it was there since it was visible through the light wiring hole. I ended up using some neodymium magnets to locate some drywall screws and then verified it by drilling pilot holes. I\u2019m not absolutely certain that they\u2019re screwed into studs but there\u2019s a lot more support than there was before, and those screws are at least held tight to the wall.On the left anchor I thought I\u2019d messed up and that there actually was a stud behind it, somehow, and I started to patch it up so that I could screw in a construction screw instead (which is why there\u2019s plaster on the left hole in the first picture), until I remembered, oh yeah, there\u2019s weird backing board behind some of the drywall. So I drilled a smaller pilot hole and, yep, it went through easily, so yeah, it needed an anchor after all. (I mean I already knew that based on what had happened previously, but, still.)Also I couldn\u2019t find the nice toggle anchors I\u2019d bought a couple years ago, so I ended up buying some similar ones at Home Depot. Which aren\u2019t nearly as nice. A couple of them ended up breaking off and falling into the wall, and they were just kinda not-great to work with in general. But they did their job, and everything\u2019s tightly screwed down.Leveling the cabinet was a pain in the ass. It\u2019d have been a lot easier if I had someone to help me but I was being stubborn about just getting this done.Also, I didn\u2019t need to do any painting, as all of the paint damage happened to be behind the cabinet. Nice.Hopefully this time it stays up for more than two years!\nAlso I decided to be fancy and whipped up a custom centering jig to draw the centerline for drilling the holes in the hardwood. It was absolutely overkill but it didn\u2019t take me long to do. I\u2019ll probably post it as a customizable object on thingiverse/printables or something.",
"html": "<p><a href=\"https://beesbuzz.biz/blog/6868-Bathroom-remodel-day-wait-what\">The plan</a> went pretty much according to keikaku<a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing#d_e5784_fn1\">1</a>.</p>\n<a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><p>I had difficulty finding the studs because there\u2019s some particleboard behind the drywall for some reason. Maybe some half-assed attempt at a moisture barrier or something? It was pretty obvious that it was there since it was visible through the light wiring hole. I ended up using some neodymium magnets to locate some drywall screws and then verified it by drilling pilot holes. I\u2019m not absolutely certain that they\u2019re screwed into studs but there\u2019s a lot more support than there was before, and those screws are at least held tight to the wall.</p><p>On the left anchor I thought I\u2019d messed up and that there actually <em>was</em> a stud behind it, somehow, and I started to patch it up so that I could screw in a construction screw instead (which is why there\u2019s plaster on the left hole in the first picture), until I remembered, oh yeah, there\u2019s weird backing board behind some of the drywall. So I drilled a smaller pilot hole and, yep, it went through easily, so yeah, it needed an anchor after all. (I mean I already <em>knew</em> that based on what had happened previously, but, still.)</p><p>Also I couldn\u2019t find the nice toggle anchors I\u2019d bought a couple years ago, so I ended up buying some similar ones at Home Depot. Which aren\u2019t <em>nearly</em> as nice. A couple of them ended up breaking off and falling into the wall, and they were just kinda not-great to work with in general. But they did their job, and everything\u2019s tightly screwed down.</p><p>Leveling the cabinet was a pain in the ass. It\u2019d have been a lot easier if I had someone to help me but I was being stubborn about just getting this done.</p><p>Also, I didn\u2019t need to do any painting, as all of the paint damage happened to be behind the cabinet. Nice.</p><p>Hopefully this time it stays up for more than two years!</p>\n<a href=\"https://beesbuzz.biz/blog/5784-I-did-the-thing\"></a><p>Also I decided to be fancy and whipped up a custom centering jig to draw the centerline for drilling the holes in the hardwood. It was absolutely overkill but it didn\u2019t take me long to do. I\u2019ll probably post it as a customizable object on thingiverse/printables or something.</p>"
},
"author": {
"type": "card",
"name": "fluffy",
"url": "https://beesbuzz.biz/",
"photo": "https://beesbuzz.biz/static/headshot.jpg"
},
"post-type": "photo",
"_id": "39247424",
"_source": "2778"
}
{
"type": "entry",
"published": "2023-10-22T04:22:44-07:00",
"url": "https://aaronparecki.com/2023/10/22/1/",
"content": {
"text": "I woke up before taking a pizza out of the oven in a dream and now that's going to be bugging me all day"
},
"author": {
"type": "card",
"name": "Aaron Parecki",
"url": "https://aaronparecki.com/",
"photo": "https://aperture-media.p3k.io/aaronparecki.com/41061f9de825966faa22e9c42830e1d4a614a321213b4575b9488aa93f89817a.jpg"
},
"post-type": "note",
"_id": "39242984",
"_source": "16"
}
{
"type": "entry",
"published": "2023-10-20T00:31:28-07:00",
"url": "https://beesbuzz.biz/blog/12349-Bandcrash-early-alpha-beta-whatever-released",
"name": "Bandcrash early alpha/beta/whatever released",
"content": {
"text": "So hey, the Bandcrash GUI is finally, finally in a working state! You can now use it to easily encode a bunch of wav files into mp3/ogg/flac and make a web preview, and optionally upload it all to itch.io automagically!Also, I\u2019ve released prebuilt macOS and Windows binaries over on itch.io. I\u2019ll probably do a Linux version as well at some point, although Linux users are likely much better-equipped to just build-and-install it themselves.To that end, I used it to upload one of my older albums to itch, and I gotta say, having a GUI to set it up is actually a lot nicer than doing it all from the CLI with hand-written JSON files? Weird.There\u2019s still a lot left to do on it but what is there right now is Good Enough for now.That said, I\u2019m hopeful that bandcamp remains viable for the long term, but now it\u2019s a lot less necessary to worry about a single platform like that.",
"html": "<p>So hey, the <a href=\"https://github.com/fluffy-critter/bandcrash\">Bandcrash</a> GUI is finally, finally in a working state! You can now use it to easily encode a bunch of wav files into mp3/ogg/flac and make a web preview, and optionally upload it all to itch.io automagically!</p><p>Also, I\u2019ve released prebuilt macOS and Windows binaries <a href=\"https://fluffy.itch.io/bandcrash\">over on itch.io</a>. I\u2019ll probably do a Linux version as well at some point, although Linux users are likely much better-equipped to just build-and-install it themselves.</p><p>To that end, I used it to upload <a href=\"https://fluffy.itch.io/foodsexsleep\">one of my older albums</a> to itch, and I gotta say, having a GUI to set it up is actually a lot nicer than doing it all from the CLI with hand-written JSON files? Weird.</p><p>There\u2019s still <a href=\"https://github.com/fluffy-critter/bandcrash\">a lot left to do on it</a> but what is there right now is Good Enough for now.</p><p>That said, I\u2019m hopeful that bandcamp remains viable for the long term, but now it\u2019s a lot less necessary to worry about a single platform like that.</p>"
},
"author": {
"type": "card",
"name": "fluffy",
"url": "https://beesbuzz.biz/",
"photo": "https://beesbuzz.biz/static/headshot.jpg"
},
"post-type": "article",
"_id": "39225778",
"_source": "2778"
}
{
"type": "entry",
"published": "2023-10-17T16:56:30-07:00",
"url": "https://nadreck.me/2023/10/october-in-new-england/",
"category": [
"life",
"travel"
],
"name": "October in New England",
"content": {
"text": "Here we are, halfway through October. It\u2019s been a bit over a month since my last post. In that time, we spent more time in Peterborough, New York City, Newport (Vermont), and Holderness. We socialized, we saw friends, saw family, had a good time. It\u2019s starting to get cooler out, and we\u2019re currently far enough north that the leaves have begun dropping in earnest.\n\n\n\nContinue reading \u201cOctober in New England\u201d",
"html": "<p>Here we are, halfway through October. It\u2019s been a bit over a month since my last post. In that time, we spent more time in Peterborough, New York City, Newport (Vermont), and Holderness. We socialized, we saw friends, saw family, had a good time. It\u2019s starting to get cooler out, and we\u2019re currently far enough north that the leaves have begun dropping in earnest.</p>\n\n\n\n<img width=\"1024\" height=\"768\" src=\"https://nadreck.me/backend/wp-content/uploads/2023/10/2023-10-09-22.16.53-1024x768.jpg\" alt=\"\" /><img width=\"1024\" height=\"768\" src=\"https://nadreck.me/backend/wp-content/uploads/2023/10/2023-10-09-22.16.53-1024x768.jpg\" alt=\"\" /><a href=\"https://nadreck.me/2023/10/october-in-new-england/#more-11756\">Continue reading<span> \u201cOctober in New England\u201d</span></a>"
},
"author": {
"type": "card",
"name": "Nadreck",
"url": "http://nadreck.me",
"photo": null
},
"post-type": "note",
"_id": "39203260",
"_source": "2935"
}
Implemented liking/favoriting of #Mastodon posts via Bridgy Fed on my site! (Actually of any post on any site that #BridgyFed can discover an #ActivityPub endpoint to send likes to.)
Tested it by liking @evanp.me (@evan@cosocial.ca@evanpro)’s reply¹ confirming that he received a notification from my prior post². I sent a #Webmention from my like post³ to Bridgy Fed, and it #federated the like to Evan’s server, which subsequently showed up in the "favourites" list of Evan’s post:
{
"type": "entry",
"published": "2023-10-16 18:16-0700",
"url": "https://tantek.com/2023/289/t1/bridgyfed-webmention-like-fediverse",
"category": [
"Mastodon",
"BridgyFed",
"ActivityPub",
"Webmention",
"federated",
"socialWeb",
"100DaysOfIndieWeb",
"100Days",
"IndieWeb",
"like",
"likes",
"fediverse",
"favorite",
"favourite",
"favourites"
],
"content": {
"text": "Implemented liking/favoriting of #Mastodon posts via Bridgy Fed on my site! (Actually of any post on any site that #BridgyFed can discover an #ActivityPub endpoint to send likes to.)\n\nTested it by liking @evanp.me (@evan@cosocial.ca @evanpro)\u2019s reply\u00b9 confirming that he received a notification from my prior post\u00b2. I sent a #Webmention from my like post\u00b3 to Bridgy Fed, and it #federated the like to Evan\u2019s server, which subsequently showed up in the \"favourites\" list of Evan\u2019s post:\n\nhttps://cosocial.ca/@evan/111237962392745000/favourites\n\nEvery step that connects heterogenous #socialWeb systems & protocols feels like progress.\n\nThis is day 45 of #100DaysOfIndieWeb. #100Days #IndieWeb #like #likes #fediverse #favorite #favourite #favourites\n\n\u2190 Day 44: https://tantek.com/2023/234/t1/threads-supports-indieweb-rel-me\n\u2192 \ud83d\udd2e\n\n\u00b9 https://cosocial.ca/@evan/111237962392745000\n\u00b2 https://tantek.com/2023/287/t1/federating-mentions\n\u00b3 https://tantek.com/2023/289/f1",
"html": "Implemented liking/favoriting of #<span class=\"p-category\">Mastodon</span> posts via Bridgy Fed on my site! (Actually of any post on any site that #<span class=\"p-category\">BridgyFed</span> can discover an #<span class=\"p-category\">ActivityPub</span> endpoint to send likes to.)<br /><br />Tested it by liking <a href=\"https://evanp.me\">@evanp.me</a> (<a href=\"https://cosocial.ca/@evan\">@evan@cosocial.ca</a> <a class=\"h-cassis-username\" href=\"https://twitter.com/evanpro\">@evanpro</a>)\u2019s reply<a href=\"https://tantek.com/#t5TS1_note-1\">\u00b9</a> confirming that he received a notification from my prior post<a href=\"https://tantek.com/#t5TS1_note-2\">\u00b2</a>. I sent a #<span class=\"p-category\">Webmention</span> from my like post<a href=\"https://tantek.com/#t5TS1_note-3\">\u00b3</a> to Bridgy Fed, and it #<span class=\"p-category\">federated</span> the like to Evan\u2019s server, which subsequently showed up in the \"favourites\" list of Evan\u2019s post:<br /><br /><a href=\"https://cosocial.ca/@evan/111237962392745000/favourites\">https://cosocial.ca/@evan/111237962392745000/favourites</a><br /><br />Every step that connects heterogenous #<span class=\"p-category\">socialWeb</span> systems & protocols feels like progress.<br /><br />This is day 45 of #<span class=\"p-category\">100DaysOfIndieWeb</span>. #<span class=\"p-category\">100Days</span> #<span class=\"p-category\">IndieWeb</span> #<span class=\"p-category\">like</span> #<span class=\"p-category\">likes</span> #<span class=\"p-category\">fediverse</span> #<span class=\"p-category\">favorite</span> #<span class=\"p-category\">favourite</span> #<span class=\"p-category\">favourites</span><br /><br />\u2190 Day 44: <a href=\"https://tantek.com/2023/234/t1/threads-supports-indieweb-rel-me\">https://tantek.com/2023/234/t1/threads-supports-indieweb-rel-me</a><br />\u2192 \ud83d\udd2e<br /><br /><a href=\"https://tantek.com/#t5TS1_ref-1\">\u00b9</a> <a href=\"https://cosocial.ca/@evan/111237962392745000\">https://cosocial.ca/@evan/111237962392745000</a><br /><a href=\"https://tantek.com/#t5TS1_ref-2\">\u00b2</a> <a href=\"https://tantek.com/2023/287/t1/federating-mentions\">https://tantek.com/2023/287/t1/federating-mentions</a><br /><a href=\"https://tantek.com/#t5TS1_ref-3\">\u00b3</a> <a href=\"https://tantek.com/2023/289/f1\">https://tantek.com/2023/289/f1</a>"
},
"author": {
"type": "card",
"name": "Tantek \u00c7elik",
"url": "https://tantek.com/",
"photo": "https://tantek.com/photo.jpg"
},
"post-type": "note",
"_id": "39194453",
"_source": "2460"
}
{
"type": "entry",
"published": "2023-10-14 19:37-0700",
"url": "https://tantek.com/2023/287/t1/federating-mentions",
"category": [
"Mastodon:",
"IndieWeb",
"fediverse",
"Webmentions",
"federate"
],
"content": {
"text": "Bridgy Fed (#BridgyFed) recently added support for federating @-@-mentions to #Mastodon: https://fed.brid.gy/docs#mention\n\nSo here\u2019s a test:\n\nHappy birthday @evanp.me (@evan@cosocial.ca @evanpro)!!!\n\n\nLet\u2019s see if Evan receives one or more notifications of these mentions, especially on cosocial, directly from my blog to his Mastodon account.\n\n\nPrevious related posts on how to @-mention across the #IndieWeb, #fediverse, and silos:\n* https://tantek.com/2023/014/t4/domain-first-federated-atmention\n* https://tantek.com/2023/017/t1/socialweb-blogs-reply-comment-post\n* https://tantek.com/2023/018/t1/elevate-indieweb-above-silo\n* https://tantek.com/2023/019/t5/reply-domain-above-address-and-silo\nwhich is enough material on the subject to be worth a broader overall blog post on at-mentions, @-mentions, @-@-mentions, how to write them, how to send #Webmentions or #federate them, and perhaps how to recognize & send notifications for them.",
"html": "Bridgy Fed (#BridgyFed) recently added support for federating @-@-mentions to #<span class=\"p-category\">Mastodon:</span> <a href=\"https://fed.brid.gy/docs#mention\">https://fed.brid.gy/docs#mention</a><br /><br />So here\u2019s a test:<br /><br />Happy birthday <a href=\"https://evanp.me\">@evanp.me</a> (<a href=\"https://cosocial.ca/@evan\">@evan@cosocial.ca</a> <a class=\"h-cassis-username\" href=\"https://twitter.com/evanpro\">@evanpro</a>)!!!<br /><br /><br />Let\u2019s see if Evan receives one or more notifications of these mentions, especially on cosocial, directly from my blog to his Mastodon account.<br /><br /><br />Previous related posts on how to @-mention across the #<span class=\"p-category\">IndieWeb</span>, #<span class=\"p-category\">fediverse</span>, and silos:<br />* <a href=\"https://tantek.com/2023/014/t4/domain-first-federated-atmention\">https://tantek.com/2023/014/t4/domain-first-federated-atmention</a><br />* <a href=\"https://tantek.com/2023/017/t1/socialweb-blogs-reply-comment-post\">https://tantek.com/2023/017/t1/socialweb-blogs-reply-comment-post</a><br />* <a href=\"https://tantek.com/2023/018/t1/elevate-indieweb-above-silo\">https://tantek.com/2023/018/t1/elevate-indieweb-above-silo</a><br />* <a href=\"https://tantek.com/2023/019/t5/reply-domain-above-address-and-silo\">https://tantek.com/2023/019/t5/reply-domain-above-address-and-silo</a><br />which is enough material on the subject to be worth a broader overall blog post on at-mentions, @-mentions, @-@-mentions, how to write them, how to send #<span class=\"p-category\">Webmentions</span> or #<span class=\"p-category\">federate</span> them, and perhaps how to recognize & send notifications for them."
},
"author": {
"type": "card",
"name": "Tantek \u00c7elik",
"url": "https://tantek.com/",
"photo": "https://tantek.com/photo.jpg"
},
"post-type": "note",
"_id": "39179431",
"_source": "2460"
}
Small moment of joy: I was helping We All We Got SD take things from storage to the park this morning. Another person showed up to help unmasked, but after they saw me masked, they put one on and told me how nice it was to see other people masking. They told me all too familiar stories about being one of the few masked at a big event. They’ve had COVID twice and can’t afford to get sick again.
It felt really nice and reminded me that that it’s not futile to mask up. Sometimes it might remind someone else to mask or make them feel less alone in doing so. Let’s keep each other safe! 💛
{
"type": "entry",
"published": "2023-10-14 14:17-0700",
"url": "https://gregorlove.com/2023/10/small-moment-of-joy/",
"category": [
"covid"
],
"content": {
"text": "Small moment of joy: I was helping We All We Got SD take things from storage to the park this morning. Another person showed up to help unmasked, but after they saw me masked, they put one on and told me how nice it was to see other people masking. They told me all too familiar stories about being one of the few masked at a big event. They\u2019ve had COVID twice and can\u2019t afford to get sick again.\n\nIt felt really nice and reminded me that that it\u2019s not futile to mask up. Sometimes it might remind someone else to mask or make them feel less alone in doing so. Let\u2019s keep each other safe! \ud83d\udc9b",
"html": "<p>Small moment of joy: I was helping <a class=\"h-card\" href=\"https://weallwegotsd.com\">We All We Got SD</a> take things from storage to the park this morning. Another person showed up to help unmasked, but after they saw me masked, they put one on and told me how nice it was to see other people masking. They told me all too familiar stories about being one of the few masked at a big event. They\u2019ve had COVID twice and can\u2019t afford to get sick again.</p>\n\n<p>It felt really nice and reminded me that that it\u2019s not futile to mask up. Sometimes it might remind someone else to mask or make them feel less alone in doing so. Let\u2019s keep each other safe! \ud83d\udc9b</p>"
},
"author": {
"type": "card",
"name": "gRegor Morrill",
"url": "https://gregorlove.com/",
"photo": "https://gregorlove.com/site/assets/files/6268/profile-2021-square.300x0.jpg"
},
"post-type": "note",
"_id": "39177827",
"_source": "95"
}
