Phil Windley's Technometria

September 2, 2010

Twitter and the OAuthalypse: A RESTful Misfire

Yesterday was the OAuthalypse—the day when Twitter stopped accepting HTTP Basic authorizations on theis API. I had a few apps break—like almost everything I’ve done with Twitter. To get them back working I’ll have to spend some time on each moving them over to OAuth. For some that won’t be hard—they’re already using a library that supports OAuth. For others it will be more work. All of them are single user apps (like the UtahPolitics retweeter and so will use the OAuth single token pattern.

The reason for moving to OAuth is so that apps won’t need to ask users for their Twitter password or store it anymore. Twitter had a bad experience with this and that led to the decision to go nuclear on usernames and passwords on their API. This is a clear win for delegated authorization protocols like OAuth and the more capable ones that are surely to follow. What’s more it trains users to use a delegated authorization scheme. I love it.

But what’s curious about the move is that in everycase (except the retweeter) my apps are not updating information. These are read-only apps that simply read a friend timeline for a partcular user. I can’t figure out why any authorization is needed at all. Since who I follow is public information, it would be simple enough to reconstruct my friend timeline from available information. My theory is that Twitter uses authentication on read-only data as a substitute for a poorly designed API. That is, they use the authentication as a substitute for merely allowing me to specify whose timeline I want to see.

This is classic REST stuff and it seems that Twitter got it wrong. Thousands of apps are failing today because Twitter requires them to authorize when they don’t really need to. Am I wrong?

August 30, 2010

Come to Kynetx Developer Day

In the past Kynetx has held two Kynetx Impact conferences, one last fall and one last spring. Kynetx Impact exceeded my expectations both times with lots of people and energy. But holding a conference of that size is, frankly, a lot of work for a small team. Consequently, we’ve decided to move to an annual schedule with Kynetx Impact, holding the conference once a year in the spring. At the same time, we didn’t want to lose the ability to contact and work with developers, so we’ve created Kynetx Developer Days. The first Kynetx Developer Day will be held in our Utah office on September 18, 2010. (Register here…it’s free!)

At Kynetx Dev Day, you’ll find tracks for beginning KRL programmers as well as more advanced topics for experienced KRL developers. The full agenda is available online. We’ll be announcing and teaching people how to use some cool new features, including how to use Kynetx with email and telephony services like Twilleo via webhooks. But there’s more…

Last Friday we gave a demonstration of the power of Kynetx to orchestrate multiple services (Web, email, telephony, and so on) in pursuit of the end-user’s purpose. In this case we showed how an email from a person’s radiologist suggesting they need neck surgery based on their MRI results could kick-off a whole series of interactions and tasks. Our demo showed how a dozen individual, small, simple cooperating KRL applications could automate the interactions to significantly reduce the user’s cognitive load.

Not only will we be showing the latest version of that demo at the Sept 18th Dev Day, but we’ll be teaching about the techniques necessary to build those kind of compelling experiences. You don’t want to miss it.

And for those who can’t be in Utah on Sept 18th, one of the reasons for moving to the simpler format for our fall event was to be able to spread them around more. We plan on conducting similar Kynetx Dev Days in other locations in the coming months. Stay tuned for more information…

In the meantime, register for the Sept 18th event if you’d like to come. It’s free. We’d love to have you.

Come to Internet Identity Workshop East Next Week

The East Coast edition of the Internet Identity Workshop (IIW) will happen next week on Thursday and Friday (Sept 9-10) at the Josaphine Butler Parks Center in Washington DC. The theme for this edition of IIW is Open Identity for Open Government. You can register online. Late registration fees kick in after Friday, so register now.

August 24, 2010

CTO Breakfast this Thursday: The Once and Future Web

The CTO Breakfast will happen this Thursday at 8am in the cafeteria at Novell’s Provo Campus. As usual, we’ll talk tech; so bring interesting topics you’d like to discuss.

Anyone interested in how information technology is used to build products or run companies. Despite it’s name, you don’t have to be a CTO to attend—just interested in technology, where it’s headed, and the problems of starting and building a high-tech business in Utah.

There’s a calendar of upcoming CTO Breakfast events if you’d like to subscribe.

At this CTO Breakfast, Sam will have a special demo of some cool ideas we’ve been working on at Kynetx that foreshadows the future Web and the role personal data can play. This will blow your mind.

August 16, 2010

The Kynetx Rule Language: The First Internet Application Platform

A while ago, someone asked, in a comment, “What’s KRL?” I realized that while I had lots of snippets that explained KRL and what it could do, there’s was no good place to point people who ask that question. Consequently, I put together a white paper that explains, in some technical detail, what KRL is, how it operates, and why we think it’s so damn cool. The paper is The Kynetx Rule Language - The First Internet Application Platform (PDF). If that title doesn’t pique your interest, maybe a few paragraphs from the intro can:

Imagine walking into Borders and having your smartphone alert you to the fact that the book you put on your Amazon wish list this morning is available right now and on sale. As another example, think about an application that gathers relevant articles from your RSS and Twitter feeds based on searches you’ve performed or that are related to an email you received from a friend today.

These examples show the power that can be achieved when applications can work across multiple domains and multiple protocols at the same time. We think of this as “programming the Internet” and the results are much more impressive than those achieved by building a mere Web site. There’s no reason that clients in different domains, like your smartphone and Web browser, shouldn’t be cooperating under your guidance to help you get things done. But to make that happen, we need new architectures and programming paradigms.

One way of viewing the Internet is as a big reactive system. When you browse, tweet, email, and so on the Internet reacts to what you’re doing, or so it seems. Thus, programming the Internet requires reacting to user activities. Existing Web programs do this in a fairly ad hoc manner because most Web frameworks provide little support for managing program data and control flow across individual user interactions.

This document describes a new programming language, the Kynetx Rule Language or KRL, and the system that runs it, the Kynetx Network Service or KNS. KRL is designed for programming the Internet and makes it easy for developers to create applications, or apps, that behave like the scenarios imagined above. KRL is a programming language for building reactive systems that respond to complex scenarios across multiple Internet protocols, domains, clients, and devices.

When we invented KRL our goal was to build notational support for the hard things that Web programmers face everyday—especially on the client-side. Our mantra is “let the machine take care of the details.” Linguistic expression and abstraction give programmers the tools to do amazing things without making heroic efforts.

After going over the benefits of using KRL, the paper contains a description of the primary components of what entails a new programming model for applications that work across the Internet in behalf of the user—as opposed to the typical Web program that works on a single site on behalf of the site owner. The model and services I describe form a platform for creating Internet applications. In the paper I explore in some detail the primary concepts in this new model: events and rules. I also briefly describe the architecture of the system of services that support this model. The document ends with three examples showing applications built to take advantage of this model.

The paper lays out a fairly audacious vision by describing a system for creating applications that are completely unlike your typical Web application. You can be part of that by trying out KRL today using a free account.

August 11, 2010

IIW XI, IIW East, and IIW Europe

In addition to our traditional semi-annual meeting at the Computer History Museum on November 9-11, IIW is also holding events in Washington DC and London this fall. Unlike other identity conferences, IIW’s focus is on the use of identity management approaches based on open standards that are privacy protecting.

The IIW East (more info here) will be September 9-10 at the Josephine Butler Parks Center. I suspect that because of the location and discussion that’s going on around identity in government circles that this event will have a distnctly different flavor and set of sessions than IIW has traditionally had. You can register for IIW East here.

The IIW Europe event (more info here) will be held October 11, 2010 at MacMillam Hall at the University of London. You can register for IIW Europe here. Early bird pricing is in effect until Aug 31.

And, of course, we’ll have the Fall IIW (more info here) at the Computer History Museum in Mountain View, CA on November 9-11. This is the primary event for people interested in such user-centric identity technologies as OpenID, OAuth, Webfinger, and so on. I’m sure there will be considerable discussion of Personal Data Stores at this event. Last spring IIW has almost 250 people in attendence. You don’t want to miss this. You can register for IIW XI here. Super early bird pricing is in effect until Aug 31.

Phil Windley's Technometria

Organizations Get the IT They Deserve

Technometria

About Phil

Essays

Software

Topic Guides

Categories

Archives

Utah Tech Organizations

Friends

Copyright

I'm CTO of Kynetx

Free Newsletter!

Search

What I'm Doing

Find Me Elsewhere

Digital Identity

Upcoming Events

Recent Entries