is 0auth pronounced
zeroth or zero auth
zeroth or zero auth
January 22, 2026 at 10:25 PM
is 0auth pronounced
zeroth or zero auth
zeroth or zero auth
Is this another Flock API token for 0Auth?
September 17, 2026 at 3:18 AM
Is this another Flock API token for 0Auth?
March 23, 2025 at 11:21 PM
0auth rhymes with Linux
January 22, 2026 at 10:28 PM
0auth rhymes with Linux
If the Internet wants to go back to websites again, it needs to clean up the spam, ads, popups, 0Auth callbacks, third party widgets, and doubleclick intrusions. Invasive advertising has killed classic Internet. No one surfs anymore because no one CAN surf anymore (without adblockers).
March 30, 2025 at 4:17 AM
If the Internet wants to go back to websites again, it needs to clean up the spam, ads, popups, 0Auth callbacks, third party widgets, and doubleclick intrusions. Invasive advertising has killed classic Internet. No one surfs anymore because no one CAN surf anymore (without adblockers).
✅ Session store in sqlite db
✅ Using a proper db pool instead of a single conn and locking/droping
✅ Using a proper db pool instead of a single conn and locking/droping
April 3, 2025 at 2:06 AM
✅ Session store in sqlite db
✅ Using a proper db pool instead of a single conn and locking/droping
✅ Using a proper db pool instead of a single conn and locking/droping
ANProto on ATProto is live.
I've always wanted to demonstrate that the authenticated non-networked protocol can run over the authenticated transfer protocol so here it is: anonat.anproto.com
thanks to @j4ck.xyz for the 0auth demo server.
Repo: tangled.org/evbogue.com/...
I've always wanted to demonstrate that the authenticated non-networked protocol can run over the authenticated transfer protocol so here it is: anonat.anproto.com
thanks to @j4ck.xyz for the 0auth demo server.
Repo: tangled.org/evbogue.com/...
December 3, 2025 at 6:12 PM
ANProto on ATProto is live.
I've always wanted to demonstrate that the authenticated non-networked protocol can run over the authenticated transfer protocol so here it is: anonat.anproto.com
thanks to @j4ck.xyz for the 0auth demo server.
Repo: tangled.org/evbogue.com/...
I've always wanted to demonstrate that the authenticated non-networked protocol can run over the authenticated transfer protocol so here it is: anonat.anproto.com
thanks to @j4ck.xyz for the 0auth demo server.
Repo: tangled.org/evbogue.com/...
General security best practices are to use a "zero trust" environment - ie. All actions/actors are inherently untrustworthy UNLESS they authenticate in some way (SSL, 0Auth, something, anything); this is, basically, the opposite of that!
March 31, 2026 at 6:15 PM
General security best practices are to use a "zero trust" environment - ie. All actions/actors are inherently untrustworthy UNLESS they authenticate in some way (SSL, 0Auth, something, anything); this is, basically, the opposite of that!
really need @poll.blue to do an update (and use 0auth to vote) so we can do the brackets here!
this is important now @netwatch.dev / @shreyanjain.net
this is important now @netwatch.dev / @shreyanjain.net
November 24, 2024 at 4:59 PM
really need @poll.blue to do an update (and use 0auth to vote) so we can do the brackets here!
this is important now @netwatch.dev / @shreyanjain.net
this is important now @netwatch.dev / @shreyanjain.net
Looking forward on 0auth too!
April 16, 2023 at 5:13 PM
Looking forward on 0auth too!
Exactly! There needs to be a solution for this. Waiting forward on 0auth :)
April 16, 2023 at 5:15 PM
Exactly! There needs to be a solution for this. Waiting forward on 0auth :)
November 20, 2025 at 6:00 PM
Okta's NextJS-0auth troubles
https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability
[comments] [211 points]
https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability
[comments] [211 points]
November 21, 2025 at 1:03 AM
Okta's NextJS-0auth troubles
https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability
[comments] [211 points]
https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability
[comments] [211 points]
yeah - Discord connections makes sense in my head -- i also feel the bio section should pull multiple options to connect to other services, and show the icon there -- and an 0auth would be super cool indeed!
November 11, 2024 at 1:40 PM
yeah - Discord connections makes sense in my head -- i also feel the bio section should pull multiple options to connect to other services, and show the icon there -- and an 0auth would be super cool indeed!
Okta's NextJS-0auth troubles https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability (http://news.ycombinator.com/item?id=45963350)
November 21, 2025 at 12:13 AM
Okta's NextJS-0auth troubles https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability (http://news.ycombinator.com/item?id=45963350)
Okta's NextJS-0auth troubles | Discussion
AI slop security engineering: Okta’s nextjs-0auth troubles
In October, I reported two security issues to Okta’s auth0/nextjs-auth0 project, here and here. The latter bug, an oauth parameter injection, allows for a range of types of abuse, like scoping tokens for unintended services, setting redirect_uri and scope to arbitrary values to leak tokens, and so on.
joshua.hu
November 20, 2025 at 11:00 PM
Okta's NextJS-0auth troubles | Discussion
Okta's NextJS-0auth troubles https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability (http://news.ycombinator.com/item?id=45963350)
November 21, 2025 at 5:33 AM
Okta's NextJS-0auth troubles https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability (http://news.ycombinator.com/item?id=45963350)
0Auth tokens don't expire and no one is watching them
May 5, 2026 at 3:02 PM
0Auth tokens don't expire and no one is watching them
The end-user concerns are - IMO - that the increased convenience/safety of 0Auth has never really been pushed as a concept the way 2FA was, and bears a strong resemblance (in their minds) to fake sites/cross-scripting attacks. It’s weird to them in the same way Verified by Visa caused concerns..
April 3, 2026 at 3:29 PM
The end-user concerns are - IMO - that the increased convenience/safety of 0Auth has never really been pushed as a concept the way 2FA was, and bears a strong resemblance (in their minds) to fake sites/cross-scripting attacks. It’s weird to them in the same way Verified by Visa caused concerns..
We as a collective need to just ditch 0Auth SSOs for passkeys.
May 10, 2025 at 9:44 PM
We as a collective need to just ditch 0Auth SSOs for passkeys.
but in general it would be an interesting way to make mods for these labels, who login through bsky 0auth and have the power to put label on them.
November 18, 2024 at 2:57 PM
but in general it would be an interesting way to make mods for these labels, who login through bsky 0auth and have the power to put label on them.
November 20, 2025 at 8:08 PM