Posts with keyword: iiw2006b

10 entries

IIW2006 Lost and Found

Sun Dec 10 17:05:00 2006

After IIW2006B was over last week, we found a few things. Kaliya has them, so if they're yours contact Kaliya to get them back. Here's pictures (click picture to enlarge): Phone charger Glass case IBM power adapter Macbook (65W) mag power adapter
Continue reading {IIW2006 Lost and Found}

Bohemian Rhapsody in the key of ID

Fri Dec 8 13:12:00 2006

On Tuesday evening, we were treated to the debut performance of Bohemian Rhapsody in the key of ID (lyrics by Eve Maler, Laurie Rae, Peter Tapling, Derek Fluker, Bill Johnson, and Wes Kussmaul). Conor Cahill shot a video:
Continue reading {Bohemian Rhapsody in the key of ID}

i-names...Again

Wed Dec 6 11:59:00 2006

Salim Ismail(click to enlarge) I went to a session on the future of i-names this morning. Drummond Reed started off talking about what they are now. DNS names abstract IP numbers. URLs, based on DNS, typically point to specific locations. XRI provides an abstraction layer on top of the URL. i-names and i-numbers are synonyms. i-names provide a semantic identifier and i-numbers are a persistent identifier. i-numbers are never reassigned, but i-names might be. Having a non-assignable identifier ensures that I can't lose my identity (and the rights that go with it). Any synonym in the XRI namespace resolves to
Continue reading {i-names...Again}

The State of User Centric Identity

Wed Dec 6 00:32:00 2006

Johannes Ernst has a good summary of the current user-centric identity landscape in his updated triangle diagram.
Continue reading {The State of User Centric Identity}

Beyond Passwords

Tue Dec 5 17:10:00 2006

Hacking CardSpace in the Hi-Fi Lounge (click to enlarge) In the session on authentication without passwords (beyond passwords) put, Lisa Dusseault made the assertions (with some help from the room): Existing browsers do not succeed in verifying site identity to users HTML forms for login considered harmful. Browser-based third-party identity systems habituate user to redirect to enter their password (task fixation). When you catch someone in the middle of doing something, they will plow through all kinds of barriers to "get the job done." Current password redirection schemes (most of them) redirect users to authenticate. Any password-based system is vulnerable
Continue reading {Beyond Passwords}

Speed Geeking

Tue Dec 5 17:07:00 2006

Chuck Mortimore demos XMLDAP(click to enlarge) Speed geeking turned out great. I saw some things that really interested me and I got it in a quick hit. The following projects or demos were done: Earthgrid.org - Video worth paying for xmldap - Chuck Mortimore gave a demo that showed using en OpenID as a CardSpace card to log into Kim Cameron's blog. Safari Inforcard Selector - This is a plug-in for Safari that implements an CardSpace card selector from Ian Brown. AOL WebAIM Service nice demo showing how to get AIM data using a Web API. I would like to
Continue reading {Speed Geeking}

Vendor Relationship Matters

Tue Dec 5 14:40:00 2006

I went to Doc's discussion of VRM (vendor relationship management). We had a great discussion around a number of scenarios. There's Doc's (by now) famous rental car discussion. Dave Winer brought up Yahoo! Movies and Netflix and sharing data back and forth between them. This kind of session easily turns into a discussion of how messed up most companies are. Doc summed it up thusly: "Living in a silo is self-destructive." Doc said there were three pieces: transactions, intentions, and preferences. Avery Lyford boiled these down to three points: What you've done What you want What you like Intentions
Continue reading {Vendor Relationship Matters}

Lightbulb: Bringing SAML to PHP

Tue Dec 5 12:29:00 2006

Pat Patterson spoke on using SAML in a "Web 2.0 World." SAML provides a good mechanism for transporting identity attributes. But to use SAML on the wild Web, you've got to support dynamic languages like PHP. Pat has a mechanism for using SAML from PHP. One way to do this is using a PHP/Java bridge that talks to an existing federation manager. This is overkill if you've got one little site you want to use federation on. Pat has a project, called Lightbulb, that puts SAML directly into PHP. No custom PHP modules required. Future parts of Lightbulb may
Continue reading {Lightbulb: Bringing SAML to PHP}

Trusting OpenID

Tue Dec 5 11:01:00 2006

We started off the morning, as is our tradition by building the schedule for the conference. Lots of good sessions proposed and many I will have to choose between. I love seeing these things come together. I started off the morning at David Recordon and Josh Hoyt's talk on OpenID authentication in the new OpenID 2.0 spec. During a discussion of how OpenID 1.1 works, a good discussion of phishing broke out. Someone asked what's to keep a relying party from purposely misdirecting a user to a site that's spoofing the user's IdP and stealing the user's credentials. David
Continue reading {Trusting OpenID}

Introducing User-Centric Identity

Mon Dec 4 18:00:00 2006

Doc Searls(click to enlarge) The Internet Identity Workshop (2006B) has begun. I flew in this morning and spent the time before the conference started shopping for things we need for snacks, etc. Today is not an unconference event--that starts tomorrow. Today we have a more structured program intended to get people new to the space up to speed--but people who've been in the identity space for years come anyway. Kaliya and Mike Ozburn started off the day with some discussion of the identity space map. Dick Hardt spoke on the identity lexicon and the laws of identity. Next up was
Continue reading {Introducing User-Centric Identity}