Latest / Logosofia no Dia a Dia
Why OAuth Still Makes You Dance on Your Own Machine
Daniel just wanted to update a printer setting, but first he had to authenticate Claude through a browser that was already logged in. Why does OAuth make you jump through hoops on your own trusted machine? We break down the original threat model behind OAuth 2.0, PKCE's blast radius containment, and whether Linux's secret service APIs or kernel keyrings could short-circuit the redirect dance. Plus: why token lifecycle management makes the problem harder than better storage alone can solve. Episode 4733 — myweirdprompts.com/n/4733 (permanent short link: myweirdprompts.com/280207)
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.