Slashdot Mirror


Passport for Linux On the Way

mrsam writes "PCWorld reports that Microsoft comissioned Ready-to-Run Software, a small software vendor, to port the Passport server software to Solaris, Red Hat Linux, AIX, and HPUX. Oh, joy."

340 comments

  1. not surprising by DrSkwid · · Score: 4, Informative

    what will be surprising is that once the fist iteration is shipped Microsoft keeps the updates flowing - Frontpage extensions for Apache on Unix anyone?

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    1. Re:not surprising by cscx · · Score: 2, Informative

      Frontpage extensions for Apache on Unix anyone?


      They've existed for years.

    2. Re:not surprising by OpCode42 · · Score: 2, Informative

      Already there, and has been for quite some time. See this page for a how-to.

    3. Re:not surprising by cyberlotnet · · Score: 5, Insightful

      You morons, hie is not saying they don't exist, his statement is more directed at there poor support and reliability under any OS other then Microsoft.

      They are rarely updated, and they often break.. From my exp FP ext's are the bane of most linux based hosting companys and cause a majority of the support load..

      I once worked for one of the largest free hosting provides online, they bought out a Windows based company, The original plan was to switch them over to there linux based system, But after seeing the numbers keeping the windows servers ONLY for people that required FP was considered,

      It is pretty much a known fact to anyone in the webhosting industry that FP ext's on linux are flaky to say the least

    4. Re:not surprising by Marc2k · · Score: 0, Flamebait

      It's amazing how you can get all of that detail out of his original 7 words.

      --
      --- What
    5. Re:not surprising by cyberlotnet · · Score: 2, Informative

      His comment was a "joke" That is clear very few people caught on to.

      I just provided the details, for those that do not know how bad FP for linux really is ( which I would assume to be the karma whores that posted hence )

    6. Re:not surprising by Fucky+the+troll · · Score: 0, Insightful

      From my exp FP ext's are the bane of most linux based hosting companys and cause a majority of the support load. From my experience, FP Extensions are the bane of quite a few Microsoft based hosting companies too. "If you can't beat 'em, join 'em" - Microsoft

      --






      Roadkill is yummy.
    7. Re:not surprising by Fastball · · Score: 5, Funny
      fist iteration

      Where do you want it today?

    8. Re:not surprising by GweeDo · · Score: 5, Informative

      These have been around for quite some time. I have had to install both the Frontpage 2000 and the new Frontpage XP (I think that is ext 5.0) on a linux box running apache. The interesting thing to note is that Ready to Run ported these as well. Seems like Microsoft likes them for their porting for crappy software. The FP extentions really suck to install, they required you to give apache greater privledges then it deserves over certain directories...but what do we know...I am sure Microsoft has a good reason for make FP seem like a huge security hole!

    9. Re:not surprising by Skweetis · · Score: 5, Funny
      It is pretty much a known fact to anyone in the webhosting industry that FP ext's on linux are flaky to say the least

      FP ext's are flaky everywhere. On Windows, who would notice?

    10. Re:not surprising by Anonymous Coward · · Score: 0

      At least someone's doing it rather than just bitching about it.

    11. Re:not surprising by optisonic · · Score: 3, Interesting

      I'm an ex Microsoft IIS/SiteServer/FPSE engineer and used to train Microsoft staff on these products. While FPSE on Unix has a fairly unusual implementation, they can easily be configured to work on Apache or IIS in most situations. I personally handled over 7,000 calls on FPSE alone and was unable to resolve four of them. If the product was truly broken, I wouldn't have had such results. RTR does a good job (they port FPSE to all desired platforms). I personally think that *AssPort on unix is good because you can configure systems to report false imformation easily and I don't think Microsoft has the capacity to handle the implementation and security required. IF they put passport on a unix box, it will likely blow up which will be reported to the world. They may be able to handle initial development but if you ever have a serious issue, you will likely be directed to RTR heh. For the same reason SharePoint on Unix was dropped after over a year of development, Microsoft is likely not equipped to handle the support and problem resolution needed to keep this product alive.

    12. Re:not surprising by DrSkwid · · Score: 2

      I'm glad to hear that they are, at last, up to scratch.
      I had the usual disadvantage of early [pre 3.0 ;)] adoption.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    13. Re:not surprising by Anonymous Coward · · Score: 0

      I personally handled over 7,000 calls on FPSE alone and was unable to resolve four of them. If the product was truly broken, I wouldn't have had such results.

      If the product worked as it was supposed to, you wouldn't have recieved most of those 7000 calls.

      And what about the 4 that you couldn't resolve? And of the 6996 that you could, what was the resolution? (I'm guessing it was along the lines of "that's not how it's supposed to work, tell your customers to do X instead of Y" - when Y is what's printed in the manuals.)

      Unix FP extensions are fundamentally broken. Ask anyone who's *used* them.

    14. Re:not surprising by the+way,+what're+you · · Score: 1
      fist iteration

      Where do you want it today?

      oh god, I'm crying from laughing.

      Although I must inform you, marketing prefers the term "upgrade cycle" over "fist iteration".

      --
      example.org - powered by Linux!
    15. Re:not surprising by poot_rootbeer · · Score: 1


      Will "0.9 beta" really count as a first iteration, though?

    16. Re:not surprising by DITroman · · Score: 2, Insightful

      Not agreeing that Unix FP extensions aren't broken (I haven't used them enough to be an authority on the subject, I try to avoid supporting microsoft server technology if I can help it), but its a flawed argument to say because he had some many phone calls, that anything is broken. If you've ever done tech support everything involves a lot of hand holding, I've had thousands of phone calls in tech support about STANDARDS, let alone Microsoft generated standards. We are talking about front page customers here, I've had who knows how many phone calls about people who blew out their motherboard by changing mice while the machine was on repeatedly, does that mean their motherboard design is broken. All technology requires some understanding of what to do. Front page users are not the most sophisticated web designers.

  2. spyware by den_erpel · · Score: 5, Funny

    I guess with the usual EULA that gives the permission to send all kinds of information to Microsoft about your usage habits and possibly automatically removes your linux partition and install Windows X-whatever on it, after automatically getting the money from your credit card.

    No thanks.

    --
    Genius doesn't work on an assembly line basis. You can't simply say, "Today I will be brilliant."
    1. Re:spyware by tjensor · · Score: 4, Funny

      But thats what people want - BillG says so.

      --
      <fnord>OBEY</fnord>
    2. Re:spyware by Fastball · · Score: 2

      It wouldn't work. There's no registry to scan.

    3. Re:spyware by mmol_6453 · · Score: 2

      /etc/users has basic info (like account name, real name, and room number)...

      Having the account name alone gives you target email addresses on many(most?) systems.

      --
      What's this Submit thingy do?
  3. back to the old practises by __aahlyu4518 · · Score: 1, Insightful

    embrace.... extend

    1. Re:back to the old practises by technix4beos · · Score: 5, Insightful
      Funny you mention that.

      In a recent article at OSNews, I commented about Microsoft's business practices (to a degree), and the "Microsoft problem".

      What we need to do is continue the big push with our own software, and develop it from medicore software to Great Software.

      Does anyone remember the Insanely Great comment from years ago by Steve Jobs? It's much the same attitude and spirit that we need now, in not only the Linux Communities, BeOS Community, and more, but everywhere that is offering a choice for the end user.

      We have to continously keep in mind that all of our hard work is for one target: The end user.

      I cite the recent Red Hat reviews at OSNews and other places as prime examples of how we still are not quite getting it.

      Please feel free to read my original comment at OSNews here:

      http://www.osnews.com/comment.php?news_id=1951&off set=34

      The problem won't go away if we play by Microsoft's rules. We need to create our own, and survive.

      --
      user@host$ diff /dev/urandom /dev/uspto
    2. Re:back to the old practises by SgtChaireBourne · · Score: 5, Interesting
      This underscores just how dangerous MS-passport is in extending the monopoly into new markets. However, notice that, as usual, this port is not being provided by Microsoft. Others are doing the work, which I would guess is, because of the nature of the NDA for using Shared Source (TM), an all or nothing gamble.

      However, amidst the dust and noise of the current storm of PR, spin, ads, and FUD, they are also dropping support for several key products like NT 4, Exchange 5.5 and Win2000 pro now and in the near future. At least when Cisco is hurting, their sales team treats for lunch. Or when McDonalds jacks up the price of a coke, they run a sale on the burgers.

      Microsoft appears to have been circling the ol' financial drain for some time, with shaky bookkeeping, shrinking markets, and admissions that their products cannot compete on technical merits. Perhaps this last week's media blitz is a sign that the execs have offloaded enough of their stock options for us to hear that last *glunk* and see MSFT along side EOG.

      --
      Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
    3. Re:back to the old practises by Anonymous Coward · · Score: 0

      Is that the same embrace that a vampire^W MS rep get customers into forever darkness ?

    4. Re:back to the old practises by Anonymous Coward · · Score: 0

      You're wrong. Our primary target is ourselves. And whoever wants to pay us for free software. We write software for ourselves and share it with others in the hope that it will be useful for them as well.

      This is why free software accomodates real needs and not those imposed by the marketing drones. There are cases when certain companies or governments need some free software and they pay free sw developers to do it.

      Since we rely on a huge readily available codebase, this is far more efficient and fast than any other development model. In this case, we should primarily care about the customer who hired us.

      As for the mythical computer-illiterate, eye-candy-thirsty, studpid end user, I don't care about him/her. Let them burn in hell!

    5. Re:back to the old practises by Anonymous Coward · · Score: 0

      If you really believe that the company with the highest valuation in the world is "Circling the ol' financial drain", you are really an idiot.

    6. Re:back to the old practises by ffatTony · · Score: 2

      We have to continously keep in mind that all of our hard work is for one target: The end user

      Wrong. The end user is not the primary target and in all actuality hardly a concern at all I would imagine. I, as I assume others do, make software for myself. Should you find it interesting and wish to help, by all means do so. Don't agree with my vision, it's gpl'd so make your own fork. I am really not concerned with catering to the babbling, drooling masses who "don't get it". I think another poster put it best:

      As for the mythical computer-illiterate, eye-candy-thirsty, studpid end user, I don't care about him/her. Let them burn in hell!

      And I second that, may we all burn in hell

  4. Biggest part is by eellis · · Score: 3, Funny

    Microsoft are going to share some of their source code with the developers. Could this be the start of a new style of policy from microsoft?

    1. Re:Biggest part is by Anonymous Coward · · Score: 2, Funny
      Microsoft are going to share some of their source code with the developers.

      Remember folks..
      Developers! Developers! Developers!

    2. Re:Biggest part is by Anonymous Coward · · Score: 5, Insightful

      Actually, seeing Microsoft source code, but under a dodgy "pseudo-open" license is actually worse than not seeing it at all. You become "tainted" and MS may well sue you if you work on a conceptually related project. They have taken legal action in the past. NTFS driver development in the Linux kernel was effectively halted, for example, over such an issue.

      That's why most MS releases are WORSE THAN USELESS.

    3. Re:Biggest part is by Aj · · Score: 5, Insightful

      Yes, think about it, *why* are they sharing the code?

      They are fighting fire with fire, all we, as coders have to do, is to see the code, and we are now tainted, and can not legally implement a competing code base.

      The same as if they use GPL code, it taints their talent pool, if we *see* their code, it taints ours.

      be very careful when offered a bite of this apple.

    4. Re:Biggest part is by suman28 · · Score: 1

      This is not news though. The universities have been looking at Microsoft sourcecode for a long time now and so do some companies that have to develop software the way rtr.com is doing. It is just the licensing agreement that matters here which will not let you disclose a single line of code. Too bad. I would like to see the line that says: if (strcmp(browser, "IE") != 0) { //need code to remove/screw partitions here crash the computer }

    5. Re:Biggest part is by rnturn · · Score: 2
      ``The universities have been looking at Microsoft sourcecode for a long time now...''

      Oh, yah. Wouldn't it be nice to be forced to study Microsoft code as part of a college class and then finding that a side effect of your expensive college education was that you are at legal risk if you decide to pursue a career that involves writing code for a competing operating system. Heck, what about the academic who sees their code and later decides to leave the hallowed halls and enter the Real World (tm)?

      Viewing Microsoft code as a career-limiting move. I sort of like that.

      --
      CUR ALLOC 20195.....5804M
    6. Re:Biggest part is by FooBarWidget · · Score: 2

      The GPL is in no way as "viral" as Microsoft's method. Even if you *read* Microsoft's code, they can already sue you once you start writing another program. If I read GPL'ed code, I can still write a similar program and license it under BSD, as long as I don't use any code from the GPL'ed code.

  5. A subtle hint? by E_elven · · Score: 5, Funny

    It truly seems that MS has 'alienated' a lot of the computer-folks, as it becomes apparent that said computer-folks should now aquire a Passport.

    E

    --
    Marxist evolution is just N generations away!
  6. Proof that Passport Can Be Secure? by SanLouBlues · · Score: 5, Funny

    Or is microsoft trying to prove that *nix really can be cracked as easily as windows?

    1. Re:Proof that Passport Can Be Secure? by den_erpel · · Score: 5, Funny

      Actually, it should be
      *n*x

      or, but I guess that harder to remember
      .?.n.x
      or (when you include more specifics)
      L?[ui]n[iu]x

      Fault tolerant people would definately prefer
      \b(L)?((?(1)i|u))n(?(2)u|i)x\b/

      But then you do not match Free/Open BSD

      Oh heck, I knew that buying "Mastering Regular Expressions" would not lead to a skills at expressing myself in general.

      --
      Genius doesn't work on an assembly line basis. You can't simply say, "Today I will be brilliant."
    2. Re:Proof that Passport Can Be Secure? by Reziac · · Score: 5, Funny

      I accidentally dropped "Mastering Regular Expressions" on my foot, and immediately understood how to express "!@#$%^?&!"

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    3. Re:Proof that Passport Can Be Secure? by epukinsk · · Score: 2

      Perhaps something like:

      (hp|ir|pos|a|solar|min|lin|un)(i|u)(x|s)

      Erik

    4. Re:Proof that Passport Can Be Secure? by Anonymous Coward · · Score: 0

      You should consider "Mastering General Expressions" then, as an advanced topic to continue from thereon.

    5. Re:Proof that Passport Can Be Secure? by mirko · · Score: 1

      Don't forget the eventual inclusion of the "GNU/" prefix before GNU/Linux :)

      --
      Trolling using another account since 2005.
    6. Re:Proof that Passport Can Be Secure? by Jester99 · · Score: 2

      And don't forget QNX!

      I've always just used "*n?x" myself :P

    7. Re:Proof that Passport Can Be Secure? by zBoD · · Score: 1

      Some more:

      (hp|ir|pos|a|solar|q|min|lin|un|free|open|net|su n) (bs|i|u|n|o) (x|s|d)

      --
      BoD
    8. Re:Proof that Passport Can Be Secure? by Anonymous Coward · · Score: 0

      According to Gnu... [GNU]L?[ui]n[iu]x

    9. Re:Proof that Passport Can Be Secure? by Anonymous Coward · · Score: 0

      Dude, I think your modem's broke...

    10. Re:Proof that Passport Can Be Secure? by zBoD · · Score: 1

      Oh I forgot the Hurd...
      here it is :

      [gnu/](hp|hu|ir|pos|a|solar|q|min|lin|un|free|open |net|sun)(bs|r|i|u|n|o)(x|s|d)

      --
      BoD
  7. Passport for Linux? by fruey · · Score: 2
    Hmmm... as if there weren't enough authentication schemes for Linux/Solaris already!

    Now will I see "how do I set up Passport" in all my favorite mailing lists? Hardly. People get flamed enough for Active Directory postings :)

    --
    Conversion Rate Optimisation French / English consultant
    1. Re:Passport for Linux? by PhilHibbs · · Score: 2, Interesting
      Hmmm... as if there weren't enough authentication schemes for Linux/Solaris already!
      But can any of those schemes authenticate an online Windows user? Serious criticism only, please.
    2. Re:Passport for Linux? by frp001 · · Score: 1

      Passeport is not THE only way for a Windows user to anthenticate online. The point is that you are just adding an extra one(And probably not one easy to get extra information about)!!

      --
      May I use your sig please?
    3. Re:Passport for Linux? by PhilHibbs · · Score: 1

      Okay, but users shouldn't have to know what server OS a web site is running - they shouldn't have to have one online ID for all sites running IIS, and a different one for *nix/Apache sites. Choice is not inherently evil.

    4. Re:Passport for Linux? by gorilla · · Score: 2

      Assuming a system which supports PAM, eg Linux, Solaris or others, then pam_smb may be what you want. Pam really is rather nice for allowing the administer to setup the authentication she wants.

    5. Re:Passport for Linux? by chrisos · · Score: 2, Funny
      Assuming a system which supports PAM, eg Linux, Solaris or others, then pam_smb may be what you want. Pam really is rather nice for allowing the administer to setup the authentication she wants.

      I'm off to the Urban Myths web site, this is so obviously a tall story...
      You can tell by the fact that you imply that there are women working in this industry :)
      --
      If nature abhors a vacuum, why isn't there more dust in the world?
    6. Re:Passport for Linux? by gorilla · · Score: 2

      There are. Out of the 3 admins I've hired in the last 2 years, 2 of them are women.

    7. Re:Passport for Linux? by mmol_6453 · · Score: 2

      Pam really is rather nice for allowing the administer to setup the authentication she wants.

      Aren't most women pleased when you set up the authentication system they want? And for what part of the body?

      Could someone who's actually met one please respond?

      --
      What's this Submit thingy do?
  8. things are moving by the_other_one · · Score: 3, Funny

    When they are done we will be able to see the prices for the communication protocols. Probably only a soul or two.

    --
    134340: I am not a number. I am a free planet!
    1. Re:things are moving by poot_rootbeer · · Score: 1

      "This will open a Pandora's box," (MS exec Jeff Ramos) said, promoting the idea of "elaborate rights."

      Aren't MS boxes already open enough???

  9. Presumably because... by guidemaker · · Score: 5, Funny

    ...it keeps crashing on Windows.

    <rimshot>

    Thanks, I'm here all week.

    Seriously, though - why passport? Why not something people might want to use - like Office. Oh yeah - because then there'd be *no* excuse to stick with Windows.

    1. Re:Presumably because... by ari_j · · Score: 1

      This is only the Passport server. If you don't read the article, at least read the entire story as posted on the front page of Slashdot, like I do. ;)

    2. Re:Presumably because... by guidemaker · · Score: 1

      This is only the Passport server. If you don't read the article, at least read the entire story as posted on the front page of Slashdot, like I do.

      Well, Duh! I was (obscurely, obviously) alluding to hotmail which MS ran for ages on *nix because they had trouble porting it to Windows.

    3. Re:Presumably because... by ari_j · · Score: 1

      No I'm not the Son of Man. And yes, I do. You forgot an apostrophe.

    4. Re:Presumably because... by Anonymous Coward · · Score: 0

      Well, Duh! I was (obscurely, obviously) alluding to hotmail which MS ran for ages on *nix because they had trouble porting it to Windows.

      You'll be here all week? What hours?

  10. Okay, but... by elodan · · Score: 4, Insightful

    Does it really matter?
    The fact that Passport server software will now run on (some of) the unices isn't really a cause for dismay; although it may speed uptake of Passport, it also removes another reason for a web service provider to use IIS.
    Any company that really *wants* to run Passport WILL. It's just a matter of what platform they run it on.

    1. Re:Okay, but... by Anonymous Coward · · Score: 0

      I disagree. History shows that M$ want there to be only one platform, owned by them. I predict that M$ have got involved with RTR in order to destroy them.

    2. Re:Okay, but... by Anonymous Coward · · Score: 0

      'Unices'? Moohaha.

  11. Hey by Spackler · · Score: 5, Funny

    As it was originally designed, Passport Manager could only be installed on Microsoft server software. However, prompted by requests from large Passport customers that manage user authentication on Unix or Linux servers, Microsoft has worked with a company called Ready-to-Run Software, in order to port the software to non-Windows systems.

    Ok, who is the idiot, stock photo posing, Microsoft "freelance" idiot that asked for this thing? Come on, own up to it. You can't hide forever. We know you _THOUGHT_ it was a good idea.

    1. Re:Hey by Anonymous Coward · · Score: 0

      come on, no one ever asked for this. microsoft is just using their assimilation strategy. it's like the commies were a few decades ago, "The Czechs," (or insert your favorite oppressed eastern european country), "they ASKED for our help," as the tanks rolled in.

      Now they are helping us FIX linux security/authentication, cause we obviously couldn't do it ourselves, and we ASKED them to help!

    2. Re:Hey by grub · · Score: 2


      Ok, who is the idiot, stock photo posing, Microsoft "freelance...

      Her name is Valerie Mallinson and she certainly has me convinced that XP, and presumably Passport, is the way of the future!

      --
      Trolling is a art,
  12. They finally figured it out by jmertic · · Score: 0

    They finally figured out that their platform couldn't support something like this, so want to run it on something more reliable ( remember Hotmail? ).

    After all, they need the utmost uptime and reliablity to steal, I mean store our personal information.

  13. Centralising security by LarsBT · · Score: 5, Insightful

    Is it just me or is the idea of centralising security bad?

    It seems to me that a spread of security/password systems is better, since a comprise of one does not comprise the others?

    Somehow the buzz to make everything easier overrules normal safety practises. Do we not get told not to have the same PIN for different credit cards?

    1. Re:Centralising security by LarsBT · · Score: 1
      compromise - compromise...

      I don't know how that got past me.

    2. Re:Centralising security by blueroo · · Score: 5, Insightful

      How many PINs do you have? (2)

      How many computer authentication usernames and passwords do you have? (28)

      Do we see the problem here yet?

    3. Re:Centralising security by bastion_xx · · Score: 5, Insightful

      Is it just me or is the idea of centralising security bad?

      There is a trade-off between better system security and user security. Single sign-on is very helpful to users. Security personnel can focus on reviewing a smaller set of audit logs, account policy can be applied once, effective everywhere, etc., etc.

      On the other hand, yeah, there is a higher risk that compromising a user's account can allow access to numerous systems or services. But with good administrative practices in place and security reviews, the risks can be identified and managed accordingly.

      After building a server and applying vendor patches, configuring for AD access is a snap and allows the users access without having to tell them anything more than server name.

      Somehow the buzz to make everything easier overrules normal safety practises. Do we not get told not to have the same PIN for different credit cards?

      Sometimes I wish I had as many credit cards as user accounts (even within the company). :>

    4. Re:Centralising security by Anonymous Coward · · Score: 0

      Yes, I see a problem : If you centralise all of your security, then you have a single point of failure and I only have to attack that single point. If I break in, I get your two pin numbers and all 28 of your passwords. That is considerably less effort than having to attack 30 different points to get the same result.

      You wouldn't have a single network segment on your backbone, why would you have a single password for your life?

    5. Re:Centralising security by mr_z_beeblebrox · · Score: 2, Funny

      Is it just me or is the idea of centralising security bad?

      I think you got your word order slightly askew. We are talking about Microsoft so 'is it me or is the idea of centralizing BAD security bad?' I think that is what you meant ;-)

    6. Re:Centralising security by grub · · Score: 2


      How many PINs do you have? (2)
      How many computer authentication usernames and passwords do you have? (28)


      I keep all my passwords and other info in a PGP'd file so if I ever forget one I can retrieve it in a moment.

      "but what if you forget your PGP passphrase?"

      Then I'm fux0red, but at least I am to blame, not another MS screwup.

      --
      Trolling is a art,
    7. Re:Centralising security by miffo.swe · · Score: 4, Interesting

      I totally agree with you there. If i have a centralised account on one company and they mess up all my accounts is screwed. Dont put all your eggs in one basket. I would much rather have an application that held all my accounts in it encryptet on the HD like in Mozilla. Then they have to break into my computer to get them. If they do that no Passport or liberty in the world will save me anyway since they can look at what i type and then logon by themselves with my account.

      To centralise all passwords is just plain stupid and as i pointed out above it can be solved in better ways. A smartcard with all your accounts that you use with a single password or something.

      --
      HTTP/1.1 400
    8. Re:Centralising security by yuri · · Score: 1

      I personally would trust one single well maintained security service, rather than hundreds of them all around the world. Each with different laws and security, and human admins etc.

      It only takes one of them to get cracked and you are toast, depending on the information contained. I can only see spreading out this information as increasing the chance of my information getting cracked.

      I'd just rather it wasn't microsoft run on microsoft software.

    9. Re:Centralising security by Bigbutt · · Score: 1

      I once mistyped my passphrase while encrypting and was not able to depgp my file.

      I just typed faster and faster until I fumbled it in the right combination and got the file open. I quickly reencrypted it with a good passphrase but it was odd that I used the same bad phrase twice for encryption and cool that I was able to fumble it correctly to get it back.

      Now that's great security.

      --
      Shit better not happen!
    10. Re:Centralising security by Anonymous Coward · · Score: 0

      While some people are posting that centralized security is a Good Thing when done right, I have to make the case here that Microsoft has a very, very long track record of not doing things right. So we shouldn't be discussing centralized security that's designed, implemented and maintained by people we trust. Instead, we should be discussing centralized security that's by people who often make big mistakes and have anything but our trust (well, I can't speak for everyone, but pretty nobody I know trusts Microsoft).

      Honestly, it scares the shit out of me to think how many things could go wrong with a single consolidated data store. Someone might easily find another buffer overrun exploit on the Passport server itself and extract a goldmine of people's personal data.

    11. Re:Centralising security by Theatetus · · Score: 3, Insightful

      How many PINs do you have? (2)

      How many computer authentication usernames and passwords do you have? (28)

      How many keys do you have for your house? (4: front door, deadbolt, back door, side door)

      How many keys do you have for your office? (12: front door, deadbolt, back door, back deadbolt, personal office, server room, HR file cabinet, front corridor, upstairs offices, conference room, supply closet, second supply closet)

      Is it annoying to have to dig through my keys for the right one? Yes. Would I get rid of some of that annoyance by having a single key for all those doors? Not on your life

      --
      All's true that is mistrusted
    12. Re:Centralising security by Soothh · · Score: 1

      Single Sign-on is helpful to users in a localized environtment, not the world wide network that is the internet. I think this whole single signon
      for the internet is just a compromise waiting to happen, When i sign up to forums and such i dont even always use the same logon name. Any centralized ID system is bad, its compromised once, and every other facet is also compromised.
      I work in an environment that users SSO with their thumbprint, and what happens? they dont bother to log off, or do it incorrectly, so anyone else that walks up has access to everything on that PC.

      --
      We have seen that living things are too improbable and too beautifully "designed" to have come into existence by chance.
    13. Re:Centralising security by clasher · · Score: 2, Interesting
      Centralized security can be very bad.

      There is an article by Charles C. Mann in the September issue of The Atlantic Montly about Bruce Schneier which argues against security systems which fail poorly. Security systems that bring down the entire system when the break are a bad idea. In the case of centralized security, if the system breaking means that an intruder can compromise the data of every user than it is a bad design. Security should be modularized so that one intruder may be able to limit your access but not read your files for example. Authentication should be separate from encryption, etc.

      True management can be simplified by haveing centralized servers, and this may improve security slightly, but what use is centralized monitoring if a single intruder can take down the entire system with one compromise.

    14. Re:Centralising security by sql*kitten · · Score: 1, Redundant

      Do we see the problem here yet?

      Not really. A PIN only works if you have the hardware token that goes with it, it's easy to see if your hardware token is missing and you can have it invalidated without needing access to it, and it's very difficult too automate cracking PINs - you can't attach a machine to an ATM and even if you could, the ATM will enforce delays so that guessing a PIN will take a long time.

      A password, on the other hand, doesn't need a hardware token (not many people use SecurID), you might not know if its been stolen until it's too late, often it cannot be invalidated without you (or someone else) accessing the same system that it formerly protected, and many systems (unlike /bin/login) don't enforce a delay between guesses.

      What was your point again?

    15. Re:Centralising security by pmz · · Score: 2

      How many PINs do you have? (2)

      How many computer authentication usernames and passwords do you have? (28)

      Do we see the problem here yet?


      Yes, but the problem is still Passport. Your example of 28 passwords is rediculous; instead, it is very reasonable to keep several different passwords for various systems or domains (home use vs. work use vs. general online use vs. bank). It is very easy to partition things so if my work computer is hacked it won't spell doom for my home computers or my bank account. This is a good thing.

      Passport, however, is very simply a bad security policy. All or nothing. Gee, that is great.

    16. Re:Centralising security by stretch_jc · · Score: 1

      How many keys do you have for your office?
      Exactly one.... and a professional locksmith who's properly key'd all the locks so that each person has only one key but can only open the doors they need.

    17. Re:Centralising security by msobkow · · Score: 2
      If i have a centralised account on one company and they mess up all my accounts is screwed.
      Which is why redundancy is so important for the security servers. Facilities like DCE use a distributed cluster of authentication/authorization based on Kerberos for just this reason.
      I would much rather have an application that held all my accounts in it encryptet on the HD like in Mozilla. Then they have to break into my computer to get them.
      Client-based security implies that your clients are trusted systems, which is very, very bad as a security model. In the case of Mozilla, what it actually keeps is a copy of your passwords, which means that if that data file is stolen it can be decrypted. In the case of facilities like Kerberos, the password is only stored on disk after a one-way hash, which is much harder to crack.
      Then they have to break into my computer to get them. If they do that no Passport or liberty in the world will save me anyway since they can look at what i type and then logon by themselves with my account.
      If they break into your client computer and steal your Mozilla password file, they don't have to remain connected to crack your passwords, which minimizes their exposure to tracing. They also don't need to modify any files to do this, which makes it much harder to detect the intrusion in the first place.

      They can only "look at what I type" if they install a trojan or virus that is going to capture and transmit your keystrokes. That is much easier to detect and prevent via anti-virus software and application protection software (e.g. Norton, NetworkICE) than a read-only file transmission.

      --
      I do not fail; I succeed at finding out what does not work.
    18. Re:Centralising security by poot_rootbeer · · Score: 2


      Yes, 2 pins isn't nearly enough. I have one for my bank card, one for my voicemail at work, one for my cellular voicemail, one for my debit card...

      The point is, if one passcode is compromised by hacking or social engineering, the damage is limited because the cracker can only get access to the system for which that code is valid. If a central authorization system is compromised, EVERYTHING is at risk.

    19. Re:Centralising security by FranTaylor · · Score: 1

      I have a whole ring full of physical keys. Nobody is out there telling me to replace them all with one. That's not the problem.

    20. Re:Centralising security by RealAlaskan · · Score: 2

      I can already use the same password for all my computer accounts if I want to. Or not, if I want to. It seems to me that Passport won't improve on that.

    21. Re:Centralising security by miffo.swe · · Score: 2

      "Which is why redundancy is so important for the security servers. Facilities like DCE use a distributed cluster of authentication/authorization based on Kerberos for just this reason."

      In this case i was refering to the fact that if someone hack the central server all my passwords are out wild instead of just one password if they hack one shopping site.

      "Client-based security implies that your clients are trusted systems, which is very, very bad as a security model. In the case of Mozilla, what it actually keeps is a copy of your passwords, which means that if that data file is stolen it can be decrypted. In the case of facilities like Kerberos, the password is only stored on disk after a one-way hash, which is much harder to crack."

      If my client isnt trusted i wouldnt trust anything ever being made on it. Anyone with root/admin access can log and record everything you make on your computer. It would be possible to store records locally with high encryption, thus i said like mozilla not actually mozilla.

      "If they break into your client computer and steal your Mozilla password file, they don't have to remain connected to crack your passwords, which minimizes their exposure to tracing. They also don't need to modify any files to do this, which makes it much harder to detect the intrusion in the first place."

      If they get my password from a central site they dont have to visit my computer at all, not the other 200 000 they get the passwords for either. A target like that is much more likely to be cracked than my own computer. Spread the risks and dont centralise them.

      --
      HTTP/1.1 400
    22. Re:Centralising security by Passacaglia · · Score: 1

      Even if centralized security is stipulated to be a good thing, Passport makes no sense. Passport is a lot like Kerberos, in that you have password servers, and services which ask for tickets which you got from the password servers; and the whole thing runs out in the open, where anyone in the world with packet sniffing software can intercept the whole exchange. The problem with this is that Kerberos only makes sense when those who control the services also control the password servers. Kerberos at MIT makes sense, because the printers and file servers and wiring and power are all provided by MIT, so they definitely should control the password servers. On the Web, however, MS wants to turn this relationship upside-down: by virtue of controlling the password servers, they want to gain control the Web. (Imagine if MS could cut off any Web-based business if they didn't toe the MS line).

      There are other models of centralized or distributed security that make more sense for the Web. See David Wheeler's essay on email security based on secure DNS. It seems to me these ideas could be extended to provide authentication on the Web without extending more power to those who have no standing to wield it (I'm talking about MS)

    23. Re:Centralising security by deblau · · Score: 2
      Is it just me or is the idea of centralising security bad?

      Sigh. Here we go again.

      Security is a process, not a product. It cannot, by definition, be centralized. Every agent in a secure network, including and especially the bozo behind the keyboard, must be involved in the process. Passport claims to be an end-all be-all security product, that you install and that magically keeps your online transactions safe. Does anyone see the problem here?

      Here's a list of things that Passport will not protect:

      • People forgetting their login data
      • Parents writing down their passwords and their kids logging in and ordering pr0n
      • Your computer crashing, denying you access to the Passport network (on Dec 24)
      • Any of a million other things that can go wrong that have nothing to do with encryption or trust
      The phrase "centralized security" irks me to no end. Please use "centralized trust system" to describe Passport, because that's what it is. Whether or not centralizing your trust is a good idea is another issue, about which I'm too tired to lecture.
      --
      This post expresses my opinion, not that of my employer. And yes, IAAL.
    24. Re:Centralising security by blueroo · · Score: 1

      And you have how many keyrings? ;)

    25. Re:Centralising security by blueroo · · Score: 1

      You already centralized your keys. You have a keyring. If you lose your keyring, you're hosed. You should probably keep a key in your shoe, your pocket, your underpants, your buttcrack, your hat...

  14. Beware of romans bearing gifts... by eggstasy · · Score: 4, Insightful

    One wonders what MS's true intentions are in porting this to Linux... embrace and extend?
    Can you even do that to something as complex and loosely-coupled as the open source community of linux developers?
    They probably just realized how large a marketshare Linux is getting on the server side and want to attain total market dominance for their worthless Passport product, lest we develop a better, more secure alternative. Hint, hint: won't work, MS. Much like Gnome, KDE and the other 10 or so windows managers, we are all about freedom and choice and will code alternatives to the alternatives to the alternatives until sourceforge runs out of disk space. Just because we can, just because we love coding and have common ideals for what life should be like: Free, especially of YOUR control.

    1. Re:Beware of romans bearing gifts... by Tribbles · · Score: 2

      Romans?

      What have the Romans ever done for us? ;-)

  15. Incredible! by Anonymous Coward · · Score: 5, Funny

    I didn't realise there were Visual BASIC ports to Solaris, Linux, AIX and HP/UX :-)

  16. RTR did not disclose the details of its plans... by damu · · Score: 1

    Cause it has no idea what the hell they are supposed to do.

    What is the purpose of this? Do they really expect people who do not use IIS to use Passport? To what purpose? Think!

    dam(u)

    --


    Useless sig.
  17. Front Page Extensions by cwernli · · Score: 2, Informative

    It allready exists, also from Ready-to-Run: http://www.rtr.com/fpsupport/ - note that Digital Unix, FreeBSD, BSDI, Linux (RedHat), Solaris, HPUX and IRIX are supported.

  18. Created and managed with... by mgkimsal2 · · Score: 2

    FrontPage - these are about the only guys left still running that stupid logo. Still, if it keeps fat contracts from MS coming in, it's probably worth it. :)

  19. Why... by Mikelikus · · Score: 4, Interesting

    Why did MS comissioned a small company to port Passport server software?

    I'm not an expert in corporate tactics but could it be that they're already forseeing the flop of those ports and rather ask a small company to have the trouble, the (possible) losses, etc... ?

    --
    -- Would it be acceptable to just put my name on my sig?
    1. Re:Why... by Angry+White+Guy · · Score: 2

      Most likely it's because Microsoft has no expertise in the unix programming field. Just the retooling of meat-puppets would have been cost-prohibitive.

      --
      You think that I'm crazy, you should see this guy!
    2. Re:Why... by Anonymous+Conrad · · Score: 1

      Most likely it's because Microsoft has no expertise in the unix programming field. Just the retooling of meat-puppets would have been cost-prohibitive.

      Didn't they port .NET to BSD themselves?

      I'm sure MS have got all the expertise they need, but it's probably tied up on other projects. Microsoft contract when they need short term specialist resource, just like anyone else.

    3. Re:Why... by Anonymous Coward · · Score: 0

      When M$ involves another company that other company is about to be shafted. You would think that RTR would have learnt from what M$ has done to other 'partners'. Remember Bristol Technology's (BT) cross platform development tool? M$'s involvement appeared superficially to be cooperating with a company whose product promoted interoperability. But after BT climbed into bed with M$ BT soon cried 'date rape'. Why will RTR be any different?

    4. Re:Why... by PainKilleR-CE · · Score: 1

      Why did MS comissioned a small company to port Passport server software?

      Who else would they comission for something like this? Almost every big software company is one of Microsoft's competitors, as are most Unix/Linux developers. Small companies are probably the only software houses that will do business with MS any more.

      --
      -PainKilleR-[CE]
    5. Re:Why... by rkhalloran · · Score: 1
      RTR is responsible for the Frontpage extensions for Unix, so all the appropriate non-disclosures are already in place, no doubt.

      Also means you can expect about the same quality, i.e. 110% whaledreck, and whatever version of *ix you're using is at least two revs ahead of what they'll support.

  20. Ready-to-Run by 1010011010 · · Score: 3, Informative

    "Ready-to-Run" is a misnomer. I had to deal with the unix FrontRage extensions at my previous company (a web hosting provider), and Ready-to-Run's software was total dreck.

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    1. Re:Ready-to-Run by rnturn · · Score: 2
      ``"Ready-to-Run" is a misnomer.''

      Perhaps they thought ``Ready-to-Ruin'' would make Marketing's job too difficult.

      --
      CUR ALLOC 20195.....5804M
  21. One good turn deserves another by Slycee · · Score: 5, Funny

    I believe we in the Linux community should return the favor, and port Wine to Windows.

    1. Re:One good turn deserves another by the_real_tigga · · Score: 0, Redundant

      ...or Samba, for that matter.

      --
      my .sig is better than yours.
    2. Re:One good turn deserves another by Zeebs · · Score: 0

      That would just be doing them a favour. Increasing stability, functionality and such.

      --

      Happy Noodle Boy says "F###ing doughnut! Mock me? You fried cyclops!!"
    3. Re:One good turn deserves another by mr_z_beeblebrox · · Score: 1

      I believe we in the Linux community should return the favor, and port Wine to Windows.

      Would that keep my Windows box from crashing everytime I open a word document. That would be sweet.

    4. Re:One good turn deserves another by Skweetis · · Score: 2

      Samba too, while we're at it!

    5. Re:One good turn deserves another by IamTheRealMike · · Score: 4, Informative
      I believe we in the Linux community should return the favor, and port Wine to Windows.

      [grin] I know it was joke, but just for future reference quite a few parts of Wine are now being developed on Windows, at it makes it easier to locate bugs. In theory, as they are recreating the DLLs, you can in fact drop in parts of the Wine project DLLs into Windows and have a semi-MS free Windows installation. Scary huh? :)

    6. Re:One good turn deserves another by Anonymous Coward · · Score: 0

      If your Windows box crashes every time you open a Word document, you're an idiot. Get Win2k.

    7. Re:One good turn deserves another by MyHair · · Score: 2

      Samba too, while we're at it!

      smbclient and other SMB tools have reportedly been ported to windows. Some people like the CLI interface or ftp-like client for some applications.

    8. Re:One good turn deserves another by poot_rootbeer · · Score: 2


      mmmm... port wine

    9. Re:One good turn deserves another by mr_z_beeblebrox · · Score: 1

      If your Windows box crashes every time you open a Word document, you're an idiot. Get Win2k.

      Great idea get Win2K on every desktop in my organization (200) of course their isthe fact that many critical apps are NOT SUPPORTED on win2k, but you wouldn't understand that because EVERYTHING on daddys computer was supported right away. LOL

    10. Re:One good turn deserves another by Skweetis · · Score: 2

      The whole thing would probably compile with cygwin or MinGW, and the built-in SMB services are easily disabled... And Samba is a better SMB server in many cases... Hmm.

    11. Re:One good turn deserves another by Anonymous Coward · · Score: 0

      Hey butt plug- name 1 application that works on 9x that doesnt work on 2k or XP.

      Times up.

    12. Re:One good turn deserves another by Anonymous Coward · · Score: 0

      You asked for it:

      Mechwarior 2:Mercenaries
      Worms 2 does work, but not as well a in 9x
      Liero
      RoadWarrior

      And if you feel like waiting a bit longer, I can come up with some "productivity" apps that don't work in XP, but do in 9x.

      The only reason you think all software is compatible with XP or 2k is because vendors made compatible apps before the OSes were available. If you have any legacy software to run, good luck.

      Trebek, I would like to take "better OSes" for $500.

    13. Re:One good turn deserves another by Anonymous Coward · · Score: 0

      hey like dude I run Mechwarrior 2 fine on my XP box ... just use the gasp compatiablity function .... or did the overpriced university you went to not teach critical thinking and reading the documentation skills :)

      Mad Props to Jesus

      my college didnt teach my spelling :(

    14. Re:One good turn deserves another by krmt · · Score: 2

      That's a fun thing to think about, especially because that's how BSD started. People just started rewriting UNIX in bits and pieces until there was nothing left but BSD code. ReactOS anyone?

      --

      "I may not have morals, but I have standards."

    15. Re:One good turn deserves another by mr_z_beeblebrox · · Score: 1

      You asked for it: Mechwarior 2:Mercenaries Worms 2 does work, but not as well a in 9x Liero RoadWarrior

      Thank you for illustrating my point.
      1) there are apps that don't run on w2k

      Another app that does not work on W2k is the warehouse management system in use in the $75M a year warehouse I work in. That alone is the reason I use W98 at work (at home I use RH7.2 and AIX)

  22. i'm sorry by dlasley · · Score: 3, Interesting

    that list of *NIX platforms already has an answer to passport - liberty. i may have my negative opinions about IBM and Sun at times, and don't get me started about RH, but i place a lot more faith in their stability and security, and i know they'll answer answer the phone when we have a security issue that has to be fixed 30 minutes ago. i don't feel comfortable ever saying that about Microsoft.

    --
    when it rains, it gets real soggy. when it pours, i'm under the tap just _waiting_ for the joy
    1. Re:i'm sorry by pldms · · Score: 3, Informative

      For the uninformed:

      Liberty Alliance Project. Sun, Novell, RSA, HP, IBM... the list goes on and on.

      It's attempting to do exactly what passport does (which you may or may not like). The specs are available, and Sun have released an opensource Identity Server.

      I dunno. If you need a server to tell you your identity...

      --
      Slashdot looked deep within my soul and assigned
      me a number based on the order in which I joined
    2. Re:i'm sorry by IamTheRealMike · · Score: 3, Interesting
      At the PingID project we're dropping support for Liberty for now. At the DIDW conference I had good long chat with John Beatty, the guy who wrote the Liberty specs. He was an extremely cool guy, but unfortunately Liberty the organization is pretty pathetic when it comes to openness.

      For instance: they charge $120,000 for one level of membership (i forget which). We were told in no uncertain terms that there was no reason for this other than to keep the little guys out, and that virtually all the money would be returned. He joked they'd have to live in Hawaii or something to spend that much.

      Even more worrying was that quite a few of our questions were met with "Sorry, we can't tell you that". A lot of stuff they're doing is "commercially sensitive" apparently. For instance, they demoed a true single sign in/federation demo at the conf, the open sourced reference server doesn't have any web front ends or demos like that. I asked whether I could have copy at the end - no can do, it's based on Novells own authentication engine. Maybe if we can convince the management they said. That's just great.

      Finally it's worth remembering that Liberty is a group of companies each with lots of accounts. They want to "federate" those accounts to streamline their websites and business processes, to make it easier for the customer to have "relationships" with them (a common term at this conference). Hence the fact that they now refer to "Simplified Sign On", not Single Sign on. Only time will tell, but I think our ideas are better.

  23. Re:Beware of the GREEK bearing gifts... by jo-do-cus · · Score: 3, Informative

    quidquid id est, timeo Danaos et dona ferentes...

    Sorry for nagging, but I have to correct you here. It was the greek who built the Trojan horse...

  24. Isn't Making Passport for Linux like... by Vortran · · Score: 5, Funny

    Making mink coats for PETA members?

    Vortran out

    --
    Knowledge is like ignorance.. too much can be just as bad as not enough.
    1. Re:Isn't Making Passport for Linux like... by PhxBlue · · Score: 2

      I'd bet that People Eating Tasty Animals members would love mink coats.

      --
      !#@%*)anks for hanging up the phone, dear.
    2. Re:Isn't Making Passport for Linux like... by Anonymous Coward · · Score: 0

      No...but for the /. mentality it is

    3. Re:Isn't Making Passport for Linux like... by ChristTrekker · · Score: 1

      Wouldn't petabites.cc be a better domain for People Eating Tasty Animals?

    4. Re:Isn't Making Passport for Linux like... by PhxBlue · · Score: 1

      LOL, you'd think so, but I guess they didn't think of that. Which is ironic, since People Eating Tasty Animals actually owned the peta.org domain before PETA did.

      --
      !#@%*)anks for hanging up the phone, dear.
    5. Re:Isn't Making Passport for Linux like... by ChristTrekker · · Score: 1

      Yeah, I'd heard about that. Some judge must have ruled they were squatting and ordered them to give up the domain, eh? So much for first-come, first-serve among those who actually have a legitimate (even if mostly for parody) claim to a name. Money talks.

  25. So what? by Vilim · · Score: 2, Interesting

    The fact that Passpoer is being ported to linux means nothing, really. For a system to exist people have ot use it. The base of linux users who actually register for passport (especially those who use linux because it isn't MS) will be very small. The people who use linux are not idiots. They read thier EULA's, they know what rights MS gives itself with the passport system. Although it is nice that mainstream software is being ported to linux.

    --
    History will be kind to me, for I intend to write it - Sir Winston Churchill
    1. Re:So what? by Epeeist · · Score: 2

      In fact the base numbers of all users who actually registered for Passport was comparatively small.

      Passport is essentially dead technology in the way that MS wanted to use it. It just hasn't laid down yet.

    2. Re:So what? by PainKilleR-CE · · Score: 2, Informative

      The fact that Passpoer is being ported to linux means nothing, really. For a system to exist people have ot use it. The base of linux users who actually register for passport (especially those who use linux because it isn't MS) will be very small.

      I didn't see anything in the article about the Passport client being ported. MS is only porting the Passport server because people have asked them to.

      --
      -PainKilleR-[CE]
    3. Re:So what? by oniony · · Score: 1

      Not true. Microsoft are anticipating the mass adoption of Un*x-like platfroms by educational institutes, public Internet access providers and governments et cetera. With increased exposure, M$ needs to cash in on this userbase early before the populous learns the alternatives.

      Simple, intelligent business move, that's all. They really are exploring all posibilites for several moves ahead. That company has quite remarkable self-preservation techniques.

      --

      Powered by onion juice.

    4. Re:So what? by Anonymous Coward · · Score: 0

      not idiots? how about dumb? is thier a national movement informing people about DRM? no? ok. how about the request from the Linux user to make Linux easier to setup than windows? no? ok. why aren`t the linux users asking the tech sites to join them in boycotting the movies in show of support against RIAA-MPAA? no? ok.
      it really shows how um.. bright you guys are when you have a good article on things like MPAA-RIAA and then the next day you read how someone went to go see the new "money-maker" for the MPAA-RIAA and
      gets everyone like mindless sheep to go see it. How in Hell are you (we) going to fight against MPAA-RIAA when you go to the movies and support them? IDIOTS!

  26. Wait a minute.... by bricriu · · Score: 5, Insightful

    So let me get this straight. Their productivity software, Office, that uses de facto document standards and which can currently be sold for a profit, they have no intention of porting to Linux.

    But a broken, hole-y DRM/anti-privacy schema, accepted by only a few and generally looked on with suspicion, being developed with no profits in the near future to -- that, they're porting to Linux.

    Uh.... HUH.

    --

    AHHHHHHH! I'm burning with goodness again!
    - Reakk, Sluggy Freelance

    1. Re:Wait a minute.... by technix4beos · · Score: 4, Insightful

      Do you not see what Microsoft is trying to do here?

      They want to do two things:

      i.) Establish a foothold in the linux world with their server software, so that when they DO decide to leverage their R&D, IIS is ready to roll, extensions done, .net connectivity done, passport working, etc.

      ii.) Maintain that their win32 platform is superior by toutint rethoric that linux fails and has as much downtime as win32 because look "Even our great software fails due to network overload, and those darn hackers...".

      This is, in my opinion, the start of a series of last ditch maneuvers currently cooked up by the cross-breeding, pollinating executives who work in marketing and network security division, as a way to show the world that they can play nice with that "other" OS, and provide the tools to do so.

      It's not going to work, if for only one simple reason: Apache. This will only push the apache developers harder to do it right, to polish 2.0 so much that it shines, and allow third party developers to create very excellent front end management software when the server market usage by Apache products explodes as a result.

      Mark my words. Microsoft may think they're being cheeky, and clever, but like so many of their previous failings, this one too will come back to bite them in the ass.

      --
      user@host$ diff /dev/urandom /dev/uspto
    2. Re:Wait a minute.... by Alethes · · Score: 2

      I agree with you for the most part, however your second point is an interesting one. I can't imagine Microsoft why would try to compete on an "all things being equal Linux is just as unstable and insecure as Windows." stance -- although all evidence would suggest they are attempting this. All things being equal, Linux is still Free (in every way), and if both perform equally, as this stance supposes, then there is no reason to pay out the nose for restrictive licenses to maintain a Windows platform.

    3. Re:Wait a minute.... by Quarters · · Score: 5, Interesting

      Wow, what an over hypothesized, under-thought, convoluted conspiracy you have there.

      How about a simpler solution? Try this:

      Microsoft, knowing that IIS isn't anywhere near as accepted as Apache for web serving has decided that porting Passport to the OSes that run the majority of web servers would help with adoption rates for the technology.

      or, possibly:

      Companies that want to use Passport have told Microsoft that they are unwilling to switch from their Unix based web servers to Win2K Server w/IIS just to be able to use Passport. Microsoft has listened and has decided to port Passport to various Unices so that it will be accepted.

    4. Re:Wait a minute.... by GnomeKing · · Score: 3, Insightful

      So let me get this straight. Their productivity software, Office, that uses de facto document standards and which can currently be sold for a profit, they have no intention of porting to Linux.

      Port office to linux now and theres much fewer real reason for people NOT to switch to linux from windows

      But a broken, hole-y DRM/anti-privacy schema, accepted by only a few and generally looked on with suspicion, being developed with no profits in the near future to -- that, they're porting to Linux.

      Linux is a threat to Microsoft - if they can persuade people to use their authentication services, then in 5 years support can be slowly withdrawn because linux "isnt as secure" as their palladium future... Guess what? So many services use passport that people feel they have no choice but use windows

      Passport being on linux isnt going to persuade people that a move to linux is viable - but it might just persuade a few linux users to sign up - which just increases microsofts power for the future

    5. Re:Wait a minute.... by GoofyBoy · · Score: 1

      but like so many of their previous failings, this one too will come back to bite them in the ass.

      All failings for any company can be seen to "bite them in the ass."

      --
      The surprise isn't how often we make bad choices; the surprise is how seldom they defeat us.
    6. Re:Wait a minute.... by technix4beos · · Score: 1

      Well, ok, perhaps I was being a little theatrical with that last statement. ;-)

      But my point is clear, is it not?

      There are so many issues with Microsoft that have yet to be resolved, or for that matter, brought up in any court to rectify them for the victims of their monopolistic behaviour.

      Remember the boot loader issue?

      --
      user@host$ diff /dev/urandom /dev/uspto
    7. Re:Wait a minute.... by Quarters · · Score: 2

      But my point is clear, is it not?

      Not in the least. Say this a few times, "The simplest explanation is usually the correct one."

      There are so many issues with Microsoft that have yet to be resolved, or for that matter, brought up in any court to rectify them for the victims of their monopolistic behaviour.

      Please tell me how Microsoft offering Passport on a variety of OSes has anything at all to do with the price of tea in China (or, in this case, the anti-trust lawsuit)?

      Remember the boot loader issue?
      Again, how does that come into play with regards to Passport on various Unices?

    8. Re:Wait a minute.... by Malcontent · · Score: 2

      "Microsoft, knowing that IIS isn't anywhere near as accepted as Apache for web serving has decided that porting Passport to the OSes that run the majority of web servers would help with adoption rates for the technology."

      The question was not why they were porting it it was why are porting this one thing that isn't making any money while refusing to port other software which is making them money. A question which is still left unanswered.

      "Companies that want to use Passport have told Microsoft that they are unwilling to switch from their Unix based web servers to Win2K Server w/IIS just to be able to use Passport. Microsoft has listened and has decided to port Passport to various Unices so that it will be accepted."

      I find it very hard to believe that a unix shop anywhere actually wants to use passport. They are probably using kerberos or ldap or nis or something.

      --

      War is necrophilia.

  27. cash flow by Anonymous Coward · · Score: 0

    Once Microsoft controlls all passports terrorists will be able to flow into the country easily thus generating cash flow.

    1. Re:cash flow by mr_z_beeblebrox · · Score: 1, Funny

      Once Microsoft controlls all passports terrorists will be able to flow into the country easily thus generating cash flow.

      Secretary Rumsfeld said that our enemies are very smart and competent. That doesn't sound like a revenue stream for Microsoft.

  28. Ready-to-Run software? by Kj0n · · Score: 5, Funny

    I'm certainly Ready-to-Run away from it.

  29. what is the proof passport does not work? by Anonymous Coward · · Score: 0

    all i hear is innuendo. proof, please, not acrimony.

  30. No no, its O.K by Anonymous Coward · · Score: 1, Insightful

    You see, Microsoft are doing it, so its O.K. It will be perfectly secure. Everyone trusts Microsoft, theres nothing to worry about.

    Until the first Passport Server exploit is found.

    Will it happen? Undoubtably. I'm not saying that because it is Microsoft, although that is partly a concern. I'm saying that because a computer which is connected to a public network can never be secure. Microsoft seem to have a worse track record for secure online systems than anybody else, and it doesn't really matter if that is because their code is inherently worse, or simply because Microsoft platforms are more widespread. The previous trends would indicate that Passport Server will be insecure, and that data will be compromised. It won't matter if it is running on Windows, Linux, HP-UX or Unicos : Your data will not be secure.

    Now, all you have to do is enter you credit card # in that little box there. Go on, you trust Microsoft now, don't you?

  31. Over lunch, I discovered how Passport assign vars. by PhysicsScholar · · Score: 0, Troll

    So, Microsoft uses this:
    C = 983830091
    for their ciphertext value in assigning variables.

    They then change plaintext to integers via this method:
    a -> 01, b -> 02, c -> 03, z -> 26

    Then the Passport system uses simple RSA methods with the public key(e,N):
    e = 7; N = 2651733127

    Any old bloke can now decrypt the encrpted message to find the original plaintext, a string of English letters.

    To decrypt, all you need to find is the private exponent d. This isn't incredibly hard to do; just factor it with any microcomputer:
    N = 71593 * 37039 = p*q

    Note that both of the factors are prime.

    Then, M = phi(N) = (p-1) * (q-1) = 2651624496.

    Now find d such that
    e*d = 1 mod M.

    That is,

    7*d = 1 mod 2651624496

    It's now just "a walk in the park" from here, something my six-year old child could deduce in a few minutes with a notepad and a Crayon(TM), perhaps:
    gcd(7, 2651624496).
    2651624496 = 7*378803499 + 3
    7 = 3*2 + 1
    3 = 1*3 + 0

    1 = 7 - 2*3
    = 7 - 2*(2651624496 - 7*378803499)
    = 7*757606999 - 2*2651624496

    7*757606999 - 2*2651624496 = 1

    7*757606999 = 1 mod 2651624496

    d = 757606999

    C^d mod N = 983830091^757606999 mod 2651733127


    The answer is 211911, but you probably figured that out in your head by now. Oh well, let me go check if there's any nitrous left for this afternoon.

    Happy cracking!

    --

    Department of Physics and Atmospheric Science, Dalhousie University, Halifax, N.S., Canada, B3H 3J5
  32. How about using this as a migration tool? by mhesseltine · · Score: 4, Insightful

    For companies that already have passport for certain things, you can setup a secure, fast, *nix server, and allow the few half-wits that use passport to authenticate. How many people got excited by the prospect of being able to do groupware, email, and calendar funtions like Exchange, but without using an Exchange server? This could be the same thing; a way for *nix admins to use their current systems, and support their users who choose to use this thing.

    --
    Overrated / Underrated : Moderation :: Anonymous Coward : Posting
  33. They haven't a clue! by Glanz · · Score: 0, Redundant

    Don't the fartheads at Monopolosoft know that people actually use Linux to stay away from their SlopWare designes for borderline idiots? Do they not know that their Fascist protocols do not interest the truly free?

    --
    Rien n'est plus beau que le creux du 0.
    1. Re:They haven't a clue! by D4M4DH477X0R · · Score: 0, Offtopic

      monopolosoft sounds like a kids toy or something... Maybe a toy company! and farthead is thier latest toy. Uhh, continue as if i never said anything.

  34. Limited platform support, no client support by msobkow · · Score: 5, Interesting

    Interesting how such a limited platform list is provided for servers. What about Mandrake, SuSE, et. al.? With canned commercial support, what of potential customers that want to use a different HTTP server, different patches, different languages/tools, etc.?

    You also note that there is no mention of support for developing client software under the *nix platforms. It's yet another way to lock in the desktop as Microsoft-only, much as many of their "servers" already do.

    --
    I do not fail; I succeed at finding out what does not work.
  35. you know the solution... by uohcicds · · Score: 3, Insightful
    It's really very simple:

    If you don't want to use it - don't install it. If it's installed - turn it off.

    (I also encourage people not to use Passport in my academic capacity - and I tell them why).

    I fail to see why MS is providng ports to platforms where the user base is so hostile to the concept of the massively insecure single sign-in

    --
    It's not you: I'm just this horrifically socially awkward with everybody.
  36. RTR is very silent on their licensing policies... by sisukapalli1 · · Score: 3, Interesting

    For instance, the unix utils (a2ps to top) are included in a distribution that costs $399.
    Here is a blurb from their site:
    Ready-to-Run provides you with software ready-to-run immediately for much less than what you would pay to acquire the same software in non-executable source form from a bulletin board. And only for a fraction of what you would pay for most of the commercial software available!
    So, are they charging for service (giving us the freedom to redistribute?) Anyone knows the answers? Would M$FT's system be really free (as in speech?) S

  37. Two words... by Keck · · Score: 5, Insightful


    chroot() jail

    --
    A computer without Microsoft is like ice cream without ketchup.
    1. Re:Two words... by colinleroy · · Score: 1

      To be more precise
      chroot /dev/null

      --
      blah
    2. Re:Two words... by ffatTony · · Score: 2

      chroot /dev/null

      I think my computer is broken, all I see is:
      chroot: cannot change root directory to /dev/null: Not a directory
      </sarcasm>

  38. That doesn't make sense by Anonymous Coward · · Score: 0

    You've made a mistake. Here:

    7 - 2*(2651624496 - 7*378803499)

    Should be

    7 - 2*(2651634496 - 7*378803499)

    Hope this helps!

  39. Re: Clients are browsers by moderators_are_w*nke · · Score: 2, Informative

    The passport client is a web browser. Works great in any mozila powered browser on any operating system, including Windows, Linux, AIX or whatever.

    --
    "XML is like violence. If it doesn't solve your problem, use more." - Anonymous Coward
  40. maybe its just in case by daniel2000 · · Score: 2

    the whole i want to be a better bank then the banks (ie take a little bit of money for each transaction / authentication or whatever) works out. If it does work out then the whole software development thing that Microsoft does will seem pretty unimportant MS wont care if you are running win or lin or whatever... MS will be raking it in anyhow and will no longer have to maintain a big pile 'o code known as an operating system.

    Of course if it doesn't work out then they will be glad that they didnt port anything else and help linux gain popularity and market share at the expense of windows.

  41. Comment removed by account_deleted · · Score: 2

    Comment removed based on user account deletion

  42. What is gonna happen is pretty predictable by PinkX · · Score: 4, Insightful

    First of all, everyone is gonna love Microsoft for porting its great universal authentication solution to the *nices platforms, making it more universal. Big *NIX companies will buy the software and will offer Passport support to their clients. Then, after a couple of (outdated) versions, specifications will change without previous notice and the implementation will be worthless, the performance will go much below that the native winXX version, big companies customers will start bitching around about lack of support and functionality, and the final response from M$ to big compianies will be 'our passport system was created to work from the ground up on the .NET framework, which uses native winXX functions not available in any other working environment, thus we cannot guarantee the correct behaviour on other platforms'. End result: big company will migrate its *NIX servers to M$ platforms, and big company customers opinion about how *nix sucks, and how far winXX is superior at accomplishing the same tasks. Don't you see it's all but just a FUD game the M$ people is trying to play with you?

    1. Re:What is gonna happen is pretty predictable by Anonymous+Conrad · · Score: 1

      No, Microsoft won't be after instant PR for this - they're laying the groundwork for when they can convince everyone that passport is a good idea. Sure, there'll be early adopters, but no one will use this seriously until it's had good real-word exposure. Amazon run HPUX. Chances are they've got too much an investment in *tested* software to ever change that. Microsoft would probably do anything they could to get Amazon to accept Passport.

    2. Re:What is gonna happen is pretty predictable by LittleBigScript · · Score: 1

      "We think it's really about building an [independent software vendor] ecosystem around this," Sohn said.

      Ecosystem? Are they're animals in the wild that behave like lawyers? or monopolies?

    3. Re:What is gonna happen is pretty predictable by LittleBigScript · · Score: 1
      Oh, I got a better one.

      Microsoft, right? They don't have any division in their company for software that is "Ready to Run." They only develop ready for
      • BSOD(tm)
      and
      • Ready to Reinstall(tm)
      Any maybe their R/D department for
      • Arbitrary API Changes to Crash Netscape(tm)
  43. Passport--what could be more secure? by jeblucas · · Score: 1

    As this story indicates, Passport provides users with a safe and secure way to access secure information over the Internet. It's a Good Thing® Microsoft®; is there to save us. Ooh hey "There to Save Us®". That's a slogan!

    --
    blarg.
  44. Re:RTR did not disclose the details of its plans.. by Anonymous+Conrad · · Score: 1

    Do they really expect people who do not use IIS to use Passport?

    Why should they care if anyone's actually using it? They're getting paid.

    And no users == no tech support.

  45. How long before we see GNUpassport by Anonymous Coward · · Score: 3, Funny

    (*) 1 month
    (*) 6 months
    (*) 1 year
    (*) 2 years
    (*) Never
    (*) Coyboy Neal passport rules :-)

  46. Centralized security is good by msobkow · · Score: 5, Insightful

    A properly set up centralized security server does nothing but run the authentication services and possibly the authorization services. It should not be running other services such as NFS, print services, HTTP servers, etc.

    That is not to say that different applications can't use secondary passwords to authorize certain facilities, or to mandate a seperate security ticket for the duration of a special session (e.g. starting an admin tool to add new users to the application's authorization set, or changing their authorization lists.)

    Many authentication and authorization services also support facilities like session limits (the place I work at right now only allows each id to be used for a single client station at a time; development and support staff are a special case.)

    Centralizing security also means that you only have to deal with hardening one set of authentication servers (gotta have redundant server clusters in a large environment for something this critical!) When patches are needed, you know they've been applied because you don't have to run around to all the application, data, and web server systems. Some application/web servers might break if they aren't patched to work with the updated security server, but that is a good thing -- you don't want outdated clients being authenticated when they're running software that has known security issues.

    However, there are far better products out there that aren't limited to Microsoft clients. Tools like Kerberos, Verisign products, Netware, etc. I just cannot fathom why anyone would voluntarily limit their options rather than just using a non-Microsoft product.

    --
    I do not fail; I succeed at finding out what does not work.
    1. Re:Centralized security is good by Anonymous Coward · · Score: 0

      Centralized security is good; until the same server you speak of is breached. It's really not that good then is it? The old saying is true "Never put all your eggs in one basket".

  47. Re:Over lunch, I discovered how Passport assign va by BoBaBrain · · Score: 0, Offtopic

    Was the parent modded up as a joke? Are the moderators trolling now too?

    My hat's off to you sir, you're typing out your ass. The sig was a nice touch too.

    --
    I am a Karma Library.
  48. One word, twofold. by miffo.swe · · Score: 3, Insightful

    Liberty.

    Why Passport?? *shudders*

    --
    HTTP/1.1 400
    1. Re:One word, twofold. by Anonymous+Conrad · · Score: 2, Insightful

      Liberty. Why Passport?? *shudders*

      Because Microsoft aren't going to pay people to work on their competitor?

    2. Re:One word, twofold. by miffo.swe · · Score: 2

      I was thinking about why anyone would want to lock themselves into Passport when a free alternative axists? It seems so counter productive and stupid to me.

      --
      HTTP/1.1 400
  49. Just stragedy by Anonymous Coward · · Score: 1, Funny

    Ok, so this is just Microsoft's stragedy...not to make Passport more used but to bring the reliability of Linux on par with Windows.

  50. Server Market Share by Rattle · · Score: 1

    I guess MS figured out that if they were only supporting windows on the server side, Passport couldn't possibly attain the market share they desire..

    --
    - My Blog - http://www.memestreams.net/users/rattle/
  51. Hmm by tjensor · · Score: 0

    I do find it quite ironic that I just had an ad for vs.net in this thread...

    --
    <fnord>OBEY</fnord>
  52. different distributions by koekepeer · · Score: 2, Insightful

    i don't think it would be very difficult to install the passport implementation on any other distribution. essentially RH doesn't differ that much from other "modern" distributions.

    the problem is of course certification. if passport is only certified to work on RH linux, other distributions might be able to run it, but only passport servers running on RH linux will be accepted as being valid passport servers. just a thought...

    maybe it's a smart move by MS to allow only passport on one specific linux vendor. suppose passport becomes the primary way to identify yourself on the net (*shiver*), it will enable MS to use their embrace & strangle policy on RH, effectively killing "commercial linux".

    maybe they're just being ignorant though, thinking RH = linux. an often made mistake ;-)

    1. Re:different distributions by Anonymous Coward · · Score: 0

      So will this support, not only x86, but also PPC, Sparc, MIPS, and others? So many times people think of Linux but forget that Linux is cross-platform.

      Just give us the source . . .

  53. subversion by JDizzy · · Score: 3, Interesting

    It just goes to show, if you cannot beat them; blur, subvert, entagle, go to bed with, and later on take a knife to their neck. This is one good way to get their roots into an otherwise concreate group who seem to stand firmly on open source. Heck, making Internet Explorer free (as in cost) utterly destroyed Netscape in the end, and now free (as in freedom) software is starting to destroy Microsoft. Kinda Ironic huh? Well it won't be so easy on this side of the camp for them to subvert. We can see it coming, and if Microsoft is so anti Finux, then why have a company contribute to that very same agenda they are scared of? Is this an "embrace, and exploite" method we have not seen before? Who knows, maybee MS will write their own Finux distro in the end! har... har..

    --
    It isn't a lie if you belive it.
  54. Re:RTR did not disclose the details of its plans.. by mr_z_beeblebrox · · Score: 2, Insightful

    What is the purpose of this? Do they really expect people who do not use IIS to use Passport? To what purpose? Think!

    The fact that you have this thought is why you will never be a competition for Microsoft (that and I'm guessing a 100 billion dollar income difference) but seriously. Wether you use IIS or Apache is irrelevant to passport users. They don't CARE. If they signed up for passport they think that you OWE them passport support. You can say "screw those end (L)users if you want, but they are a revenue stream and that is not considered "Best practices"

    Microsoft knows that by giving Linux/Unix users passport (which is probably shunned by everyone with a 'nix desktop they are catering to WINDOWS desktop users. Think about it, they are using Linux admins to cater to their clientele in the name of being 'open source' friendly.

  55. Should they ignore us? by Anonymous Coward · · Score: 0

    First the Linux community complains when
    Microsoft ignores them then when they do
    software for our market we complain about
    some evil plan?

    1. Re:Should they ignore us? by Hellkitten · · Score: 2, Interesting

      They could have simply released the specs for passport without any NDA or other stings attached.

      If anyone wanted passport on apache they coulde easily implement it themselves as OpenSource.

      What we are getting is a closed source product. We can't fix any fault's (security or other), we can't examine the code to make sure it's secure and we can't trust a fix to be available if it is

      Now tell us why we should be happy

      --
      - We are the slashdot. Resistance is futile. Prepare to be moderated -
    2. Re:Should they ignore us? by Terralthra · · Score: 1

      Ahh, I see. So, instead of releasing Unreal Tournament 2003 for Linux themselves, Epic should just release the entire spec for their rendering and physics engines, and if someone wants to run it on Linux, they can just imp it themselves?

      That is not a valid line of reasoning. I'd say the majority of software in the business and consumer world is sold as closed source software, but I don't remember the last time someone called John Carmack evil or domineering because he didn't bundle Quake 3's source with the CD when you paid $50 for it.

      Two points.

      First, this is a company out for a profit, which means they can't give their dev teams' work away for free.

      Second, releasing a security method open-source is the quickest way to get it cracked. Look at HDCP, for example. It hasn't even been deployed yet, but it's already been cracked, because the specification for it was released on the web.

      I really don't understand the linux mentality at this point. "Microsoft ignores us." Ok, here's Passport for Linux. "Bah I don't want your version, I want to make my own. Give me your code!"

      Microsoft is not GNU/GPL licensed software. They don't operate in that mindset, and expecting them to is setting yourself up for disappointment.

      Could anyone explain what they really realistically want from Microsoft?

      --
      -Terralthra...
    3. Re:Should they ignore us? by Hellkitten · · Score: 1

      Second, releasing a security method open-source is the quickest way to get it cracked. Look at HDCP, for example. It hasn't even been deployed yet, but it's already been cracked, because the specification for it was released on the web.

      And this is a bad thing because?

      Ok I'm not familiar with HDPC or what it is, but if it was cracked because the specification was released it's a good thing. Now instead of implementing a flawed product the flaw is discovered and the money isn't wasted

      The community doesn't like closed source for things we have to trust because we can't veryfy ourselves that it is to be trusted

      Your talk about UT2003 is way off the mark. UT is a game and closed source is acceptable (to me at least). OTOH if it was server software that I had to trust my business to I would prefer open source.

      The point is: We don't trust Microsofts intentions, and we don't trust their security, if they had released the specs (not nessesarily the code) for the communication involved in passport, could verify that the protocol isn't flawed, and then choose if we want to use it (and if we do: if we want to use their version, or roll our own)

      --
      - We are the slashdot. Resistance is futile. Prepare to be moderated -
    4. Re:Should they ignore us? by Terralthra · · Score: 1

      Ok I'm not familiar with HDPC or what it is, but if it was cracked because the specification was released it's a good thing. Now instead of implementing a flawed product the flaw is discovered and the money isn't wasted

      In theory. However, given that the DMCA makes publishing a paper on how it's flawed illegal, it's still being prepped for deployment, flawed and everything.

      The community doesn't like closed source for things we have to trust because we can't veryfy ourselves that it is to be trusted

      Well, that's very nice. It still does nothing for the people who rely on making a profit as a business to put food on their table. If MS releases their code (if it's open source, they're releasing the code, don't kid yourself), then no one has any reason to pay for it, and thus MS loses money. But, it's, uh, a business. They have to do things that make them money.

      Your talk about UT2003 is way off the mark. UT is a game and closed source is acceptable (to me at least).

      Epic is a company out to make a profit. Microsoft is a company out to make a profit. Their business methods are similar because those business methods lead to a profit. I don't know why you expect software that has more work and development put into it to make sure there is good encryption and security to be released open source, where all the work they pay good software engineers good money for is given away. It's not good business. If Honda comes up with a car security system that is really good and appears unbeatable, would you expect them to patent it and sell a patent license for it, or just publish the plans for free so anyone who wants to can make their own?


      --
      -Terralthra...
    5. Re:Should they ignore us? by Hellkitten · · Score: 1

      In theory. However, given that the DMCA makes publishing a paper on how it's flawed illegal, it's still being prepped for deployment, flawed and everything.

      Now IANAL but if there isn't any actual product to break yet, how can it be a violation of DMCA to publish a paper about how a proposed product is flawed?

      Anyway, going ahead when it's known to be bad is just plain silly.

      If MS releases their code (if it's open source, they're releasing the code, don't kid yourself), then no one has any reason to pay for it, and thus MS loses money.

      I didn't say they should release the actual code, but the specifications. e.g. If MS had invented TCP/IP they should release the standard (packet format, rules of communication etc). Then people can verify that the standard itself doesn't have holes. And if they choose so implement it themselves, (MS would still have a headstart since they made it first, and an incentive to make a good implementation since they'll compete with others)

      Yes I know it's hard to make a good business model based on open source, but when they target a server product at the open source market (apache) they can't expect closed source from a company with a bad reputation (in their attitude towards linux, everyone expects a dirty trick) to be accepted

      --
      - We are the slashdot. Resistance is futile. Prepare to be moderated -
  56. It still comes down to ignorance.. by Anonymous Coward · · Score: 2, Insightful

    and customers that don't understand their technology or options.

    honestly, u can use ldap with pam and smb for win authentication that will work across windoze and *nix. i love ldap and it's amazing how once company just kinda doesn't wanna push something that's a standard in light of their own crap.

    it's too bad. but this is typical and unfortunately only the companies and groups that really 'get it' will ever implement things the 'right' way. this is true with probably every software solution.

    i can see those guys at that company thinking this is a great idea, but it's not. bad ideas should be shot down and buried. passport has numerous problems and needs to be put in a hole.

    of course, like everything m$, they won't bury it. they'll keep bolting on to it until people give in or roll it into something else (read: sneak it in the back door).

  57. Ximian.Net on Linux ? by Anonymous Coward · · Score: 0

    Will Ximian's .NET thing use this ? ..
    I had heard rumors of MS people helping that
    along ...

    Will the future GNOME depend on such .NET Crap ?

    1. Re:Ximian.Net on Linux ? by Anonymous Coward · · Score: 0

      Will the future GNOME depend on such .NET Crap ?

      Migual has indicated that he would like to see the .net platform languages adopted by GNOME. Personally I think its a mistake. The languages are not that great, its a bloated piece of crap. However Gnome is ment to be a windows clone...if windows is going there gnome will follow...

  58. I see what this is about... by jaybird144 · · Score: 1

    Microsoft just wants to have personal information on all of the *nix users...they have to know who to attempt to convert. This is an important demographic that MS has yet to exploit! They couldn't let that happen...

  59. drug pusher-ware by dbazile · · Score: 1

    Give 'em something that interests them, get them addicted (they DO know how to do that), make them think they need it to live, then suddenly announce that you're going to discontinue support. In order to access your information again, you have to log in from Windows.

  60. What Distro will carry it? by ealbers · · Score: 1

    You think Redhat will put it on their dist? I don't think so.

    1. Re:What Distro will carry it? by rnturn · · Score: 2
      ``You think Redhat will put it on their dist?''

      Heh. As soon as they do I'll be a Slackware user again.

      --
      CUR ALLOC 20195.....5804M
  61. I can see it now by Anonymous Coward · · Score: 0

    (ballon popping out of the bottom right hand corner of the screen)

    "Add your .NET Passport to Red Hat Linux!"
    "Add your .NET Passport to Red Hat Linux!"

  62. yes, but Linux is total dreck anyway by Anonymous Coward · · Score: 0

    it takes no special braniac to figure that out...

    1. Re:yes, but Linux is total dreck anyway by Anonymous Coward · · Score: 0

      Hello, Microsoft staffer! You're surely a coinoisseur of dreck.

  63. I believe Penny-Arcade's Gabe put it best... by Valen+Faerlwynd · · Score: 1

    I believe Penny-Arcade's Gabe put it best with this comic from a few months ago.
    http://www.penny-arcade.com/view.php3?date=2 002-07 -22&res=l

    As far as Passport goes, look, if Linux users are going to want to a use the most ridiculus form of password management ever, fine, let them. Their funeral. Me, I'll keep with my cryptic nmemonic passwords and pgp keys, stored in the greatest filesystem, my mind (hehe, formated into journalised ext3, of course. Yeah, I know, reiserfs can be a little faster, but it's not a true jfs)

    Love and Peace,
    Valen

    --
    "The best compliment a girl ever gave me was 'Your hair smells nice.' I hate being the platonic friend." -Valen
  64. Yay! by Greyfox · · Score: 4, Funny
    Pretty soone I'll be able to...

    apt-get install pam-passport clippy ntkernel msdllmgr mslicmgr msautopay msextraviruses mssolitaire

    I so look forward to being able to read those Word attachments management keeps sending me!

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:Yay! by Anonymous Coward · · Score: 0

      I so look forward to being able to read those Word attachments management keeps sending me! Whoa. You can read???

    2. Re:Yay! by Anonymous Coward · · Score: 0

      You're an idiot. Tons of *nix word processors read MS Word files.

  65. Existed but not strongly supported, or working tbh by DrSkwid · · Score: 4, Interesting

    I know they exist, I installed them on day 1.

    The updates fell out of step with the IIS versions.

    And so many things didn't work compared to the IIS version that we dropped the whole 'we host frontpage' idea because it was too much time in support explaining the differences to frontpage users who, quite reasonably, just wanted it to work like it says in the instructions.

    And then you still have "why don't my database controls work" to contend with.

    fp on Unix was a poisoned chalice as far as we were concerned.

    Poison on IIS too but that's another story!

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  66. Finally . . . by buzzdecafe · · Score: 1

    All the insecurity of Windows on Linux! Where do I sign up?

  67. Missing the point... by gmezero · · Score: 5, Insightful

    ...please forgive my pseudo-rambling, It's going on 24hrs since I last slept ;p doh! ...

    Look, the primary reason for passport logins is in order to attract customers. PERIOD. If MS can offer passport security (sic) login support across nearly all commonly used platforms, then they can potentially approach a company with large volume customer interaction such as AT&T, FedEx, etc... or even our Government and use the sell line of "XX% of the US internet population has access to Passport, and XX% of internet users already have accounts created, reducing your sign-up/registration headaches. We would like to offer you this secure (sic), unified login solution for your customers as a convienence to both you and them. We can even integrate all of your customer service functions into this login for you as part of your initial installation! We'll even support your internal *nix environment so that you don't have to change servers (!for now!)."

    So, then say, FedEx says hey, that sounds great, we can integrate everything into this, and it looks like everyone already has a Passport account, and there's no change in equipment on our end, and wow this will really make it easier for our customers to login and issue shipments, track shipments... We'll take it.

    Microsoft never abandons a product, period, they just repurpose it a few years later. The MSN network never died, MS is just trying to co-op the internet under their wing. They want all data to come through them so they can get on with the subcription model they have been trying to migrate to since 1995. Passport has one primary purpose, it is the login mechanism of MSN, and the leverage to get companies to chanel data through MSN, which get's more customers, then more companies, etc...

    Once MS has "critical mass" on Passport, they can leverage it even harder as part of their DRM initiatives. This isn't to control what you see and here per se. Remember, MS is about one and only one thing, maximizing the profit of the shareholders. PERIOD. If every piece of data has to pass through a piece of MS technology, even a nominal toll of cents becomes a tremendous amount of money.

    What do you think the X-Box is all about. It is about marginalizing the PC. Just wait till next year when the data/streaming formats that are only X-Box compatible, or X-Box first start to role out. Just wait until you can subscribe to Office on your X-Box variant... Not only does this completely elimiate anti-trust issues due to the large volume of established law supporting the rights of hardware manufactures to control the content on their systems. The consolidation of all of these technologies over the next couple of years will give MS even more leverage in pushing their protocols to prospective clients... thus feeding the loop. ...and don't give me that crap about "nobody is buying X-Box systems". You're right, nobody is buying them. That's not the point. If MS was worried about sales, they wouldn't be giving away litterally hundres, if not thousands of consoles regularly. Pepsi shortly ends yet another "500 free X-Boxes" promotions this month. Who as ever heard of a console manufacture regularly givining away thousands of systems as much as a year after launch? MS only cares about

    DRM components on a PC may or may not ever happen, but I believe the whole discussion will be mute in a number of years anyways...

    1. Re:Missing the point... by IamTheRealMike · · Score: 3, Informative
      What do you think the X-Box is all about.

      Interesting you should mention that. Apparently Passport does indeed now have a Kerberos stack (I had previously thought that would be too hard to do), and the XBox service uses it. They are cross tying their products already.

    2. Re:Missing the point... by SetiAlphaOne · · Score: 1

      Microsoft never abandons a product, period, they just repurpose it a few years later.

      What about MicroSoft Bob?

      Sounds like a movie.

    3. Re:Missing the point... by Reziac · · Score: 5, Interesting

      I've been attending M$ seminars for several years now, and from what they themselves say, you're dead-on. They really do want to move to a purely subscription model.

      Subscription-based *software* won't cut it, tho -- because the user CAN escape that, so long as there is some way to port their data elsewhere. But making *access* to your data a subscription feature -- THAT will lock people in for all time, unless they decide they can do without any data already committed to the system. And what's locked in can be charged on a regular basis (either per timespan or per-use, or both).

      M$ understands this perfectly, and is working to achieve it.

      "Once you pay the danegeld, you never get rid of the Dane." -- British proverb (ca. 600 A.D.)

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    4. Re:Missing the point... by _Sprocket_ · · Score: 2


      What about MicroSoft Bob?


      Don't tell me you've never heard of Clippy.
    5. Re:Missing the point... by puppetluva · · Score: 2

      Microsoft never abandons a product, period, they just repurpose it a few years later. The MSN network never died, MS is just trying to co-op the internet under their wing.

      This is a fantasy that comes straight out of the M$ hype-machine. Microsoft abandons products ALL THE TIME. They just manage to kill them so thoroughly that they drop out of the public consciousness. Microsoft BOB does NOT live through Clippy. It was canned. Ever see Microsoft Task Manager? - I wasted a hell of a lot of time on that piece of junk. Didn't Microsoft have a Unix a while back? What about IE on Solaris? What about abandoning updates to Office on the Mac for EIGHT YEARS. What about Microsoft Passport's sidekick that was supposed to integrate EBay, etc. into the desktop (wasn't it called Sandstorm or something like that) - well that's gone. What about the Microsoft phone? How many versions of Word did they forcefully obsolete in the last 7 years without actually adding any new features?

      Microsoft's product stability is a myth that I'm really tired of. They only thing you are really sure of in their lineup is Excel and Word. . . and even then you're only sure that they'll force you to pay for it again every year or so or else they'll fail to support you.

    6. Re:Missing the point... by gmezero · · Score: 1

      Oh, I said nothing about stability. I said they never abandon a product. You're interpretation is literally the output of the MS hype machine. They want people to think they're doing something new when they are always repurposing the past in addition to anything new they might add.

      Bob is Clippy
      MSN is still MSN
      WinG is DirectX
      etc... have you ever actually developed using the MSDN kit? They don't hide any of this, it's all in the comments, in the source code examples, in the documentation/guides. The whole MS interpretation of OO and reusable code is add to code and always use existing modules wherever possible. You do not start from scratch.

      If there is a product they have put on the back burner in the last few years, rest assured it will show up someplace else as some other name down the road.

      Microsoft has never hidden their ultimate goal... Read the company literature. Read the comments from the staff. But remember, that you have to read it from a corporate perspective.

      What does that mean? Well, what is their mission statement? Their corporate mission statement has always been literally to achive Windows on every desktop/screen/whatever. Period.

      Are they working to achieve this goal? The answer is yes.

    7. Re:Missing the point... by Grumpendorfer · · Score: 1
      > Microsoft never abandons a product, period

      Microsoft FOCAL ?

    8. Re:Missing the point... by Anonymous Coward · · Score: 0

      > They really do want to move to a purely subscription model.

      That's because they are smarter than you are. Today Microsoft announced record revenues thanks to the success of the subscription model.

  68. No, Only One! by Anonymous Coward · · Score: 0

    All of the Microsoft stupidity seems to reside in one person, the one who calls himself "Chief Software Architect".

    This is the only explanation for the fact that Microsoft hires nobody but geniuses but they all seem to turn into blithering morons immediately after starting work!!!

  69. How Many Passport Accounts Does a Person Need? by Mr.+No+Skills · · Score: 1

    I hope this doesn't increase the number of sites with Passport logins. I've already created about 100 accounts and am getting tired of it.... ;-)

    --
    Sleep is for the Weak
  70. M$ Will Pull The Plug For Linux Support - No Doubt by Anonymous Coward · · Score: 0

    Seems very much like a dope dealer approach. They need to get everyone hooked on it. Once M$ gets enough end user support for Passport platform, they'll simply pull the plug off Linux support. No more 'soup' for you! They need end-user support more than ever now.

  71. Milk Sucks by peterpi · · Score: 1

    Thought I was the only one on /.

  72. Yawn by IamTheRealMike · · Score: 4, Informative
    Old news guys. There has been an Apache/Linux module for Passport for years. At Digital ID World 2002 I chatted with some of the Passport guys, and pretty cool they are too. They told me that they were going to rewrite it, as they didn't have many (read, any) skilled Linux coders, and their present Apache implementation sucked dogs balls.

    Second point, so what? Passport has practically zero penetration, even less since the screwed over doristheflorist.com and removed the Wallet functionality (for being unnecessary bloat). Now don't me wrong, I'm sure MS will push Passport until it gets bigger and better, but at the moment that isn't an issue.

    Final point, digital identity is a good idea, and the world will be an easier and more secure place for those who want it to be when we can have digital identities. So, what are we doing about it?

    The PingID project is developing an open royalty free set of protocols, with an open source (though unfortunately non-free) reference implementation of the server. This will be something you can download and install onto your server for free, that will then let you sign in to various accounts that support the protocols, manage your personal document store and any authorizations you have given out (at least, in the beginning). The url is pingid.org but I'm not linking to it, because we're going to be putting up a new site that more accurately reflects the new open source nature of the project in like 3 or 4 days, so I don't want people to go look and go "huh, he was talking out of his ass". Code for v0.1 will be coming in a few weeks hopefully, I get paid to hack on it part time. Join the mailing lists to help out and track its progress. So far, this is really the only open answer to digital identity we've found, so I'm pretty glad I'm a part of it :)

  73. Re:Over lunch, I discovered how Passport assign va by digitalsushi · · Score: 2
    It's now just "a walk in the park" from here, something my six-year old child could deduce in a few minutes with a notepad and a Crayon(TM), perhaps:

    ...what is a crayon?

    --
    slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
  74. Re:Milk Sucks - we're everywhere by DrSkwid · · Score: 1

    at least 25% of the world

    but round my way I'm a freak

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  75. Even more disturbing would be the story... by cpuenvy · · Score: 1

    cpuenvy writes "PCWorld reports that Microsoft comissioned Ready-to-Run Software, a small software vendor, to port the IIS server software to Solaris, Red Hat Linux, AIX, and HPUX."

    --
    DISCLAIMER:

    I don't believe what I write, and neither should you.

  76. oh joy by Anonymous Coward · · Score: 0

    passport and .net..two things that I really did not want to happen for linux oh well...

  77. Where's the alternative? by Fished · · Score: 2

    Look folks ... it's all well and good to dis passport (and I'm with you in hating it), but if no one comes up with something else that will work, this battle will be lost. Where are the comparable alternatives to passport? (I'm sure they exist, but I'm not familiar with them.)

    --
    "He who would learn astronomy, and other recondite arts, let him go elsewhere. " -- John Calvin, commenting on Genesis 1
    1. Re:Where's the alternative? by Anonymous Coward · · Score: 0

      Look at the sun liberty alliance project

    2. Re:Where's the alternative? by RazzleDazzle · · Score: 1

      I probably don't have a clear idea on what passport is or does. I also don't like MS. I also don't have a clear idea on what .NET is or hailstorm either. I also don't understand the difference between SAN and NAS. I went the MS website to try and understand these things and google and could not come up with a clear answer. It is all just PR and marketing speak to me.

      Why do we need alternatives to this crap if we are all alive and kicking without them before they were invented?

      --
      ZERO ZERO ONE ZERO ONE ZERO ONE ONE! Just brushing up for my next big invention: Ethernet over Voice (EoV)
  78. M$ Passport by Anonymous Coward · · Score: 0

    Anyone in the OS world who uses this crummy technology should be summarily horsewhipped fro allowing embrace and extend into the *nix space.

  79. poor sport liesense by Anonymous Coward · · Score: 0


    this ill eagle payper liesense hostage ransom scam report just in, from the Billyum De FUDgeville Institute, indicates that folks are just thrilled with the kingdumb's bugwear, & that there is no knead to look for alternatives.

  80. Re:RTR is very silent on their licensing policies. by Zebbers · · Score: 1

    wtf how can charging 399$ for binaries be cheaper than downloading source from a BB?

  81. I have no problem with Microsoft developing Apps by cbreaker · · Score: 5, Insightful

    Really, it's the OS that we don't want Microsoft controlling right?

    If this is a move on their part to start supporting Linux as a "valid" operating system, and start developing applications for it, I'm not upset with that one bit.

    You can "OpenOffice" all you want, but personally, I *do* like Microsoft Word. And I like Outlook. If they started making these applications available in full form to Linux, I would run them.

    Personally, I think that down the road sometime (probably not very soon) Microsoft will be developing real products for alternate operating systems. On one hand, they want everyone to use Windows. On the other hand, there is a growing amount of users switching to alternate systems, and Microsoft would love to sell you software. At some point, unless something goes horribly wrong with Linux, the community won't be able to be ignored.

    Ahh well. Who cares what I think anyways.

    --
    - It's not the Macs I hate. It's Digg users. -
  82. Linux not a threat? by yonnage · · Score: 1

    Huh, curious that microsoft is doing this, considering that linux is "not a threat" to them.

    1. Re:Linux not a threat? by adalger · · Score: 1

      There's no inconsistency. This move doesn't affect the relative positions of Windows and Linux in the server market at all. As others have noted, the ability to run a Passport server isn't going to cause a company with Linux servers to migrate to Windows. If Microsoft saw Linux as a threat, then they *might* see giving the ability to run Passport on Linux as dangerous and tending to encourage server operators to switch to Linux.

      This particular move probably isn't about Linux. More likely it's about Passport.

      --
      -- Robert Bunn, gun-toting neo-Nazi anarchist redneck freak
  83. Why not release the source? by chrysalis · · Score: 3, Interesting

    Why did Microsoft _pay_ a company to port Passport to _some_ operating systems?

    They'd better :

    - Release the source code and the protocol description, so that anyone can freely create Passport compatible software for every operating system.

    - Keep their cash for marketing, so that people understand what Passport could bring.

    --
    {{.sig}}
  84. stessed? thirsty? by Anonymous Coward · · Score: 0


    Concerned that the hole fairytail stock markup FraUD "economy" may be coolappsing around US? Don't fret. live well/a long time

  85. Passport? by SupahVee · · Score: 4, Funny
    "Hi..my name...is...Werner Brandes...my voice...is my...PASSPORT...verify..me."


    Sorry, couldnt resist, carry on about your business folks, nothing to see here.

    --
    "See, we plan ahead! That way, we never have to do anything now."
    1. Re:Passport? by Cave+Dweller · · Score: 1

      Heheh, I'm an Uplink addict too :D

  86. After reading that by Anonymous Coward · · Score: 0

    I'm here, all weak...

    1. Re:After reading that by MyHair · · Score: 1

      I'm here, all weak...

      Does she have a sister?

  87. MOD PARENT IDIOT DOWN by Anonymous Coward · · Score: 0

    Passport is a _web application_ --- this usually means that you would use a __web browser__ to access it!

  88. Passport means what exactly? by zaqattack911 · · Score: 1

    Is this just fancy rehtoric for portal?

    I barely understood what a web-portal meant untill recently.

    Someone clue me in.

    1. Re:Passport means what exactly? by Anonymous Coward · · Score: 0

      Micro$oft has full control over what you do when using the internet intensly giving them the right to close down all your Micro$oft related activities based on an email sent to abuse at hotmail

      __________________________________

      Dam that OEM shipment stopped dead in its tracks fast.Whoa never again

    2. Re:Passport means what exactly? by Anonymous Coward · · Score: 0

      The nutsack above meant to say:
      Pasport is an authentication management service. The basic idea is simple. Imagine if every web site you used, and every network resource you accessed and every internet protocol that needs a login only used one user id and password. That's Passport. MS, (or anyone running a Passport server) would hold all the information needed to provide you with a single sign on. To make things even better... imagine if Slashdot used passport. You would log into Slashdot. Then if you went to any other Passport site (Hotmail, or used an app like MSN Messenger), then you wouldn't have to log into each one. Your initial login would count for all sites. Of course, as Linux users, we don't want this sort of thing if it comes from MS.

      I think a better apprach to single sign-on would be through the use of a physical device. Say something shaped like a key (the kind you use in a door). It could be a USB device since those ports are pretty standard now. This key would contain all the logins for any service you use whether it's on your LAN, on the internet, etc... This key would require only one un/pw and then automatically place an authentication bundle on that workstation for the duration of your login (or perhaps a certain time limit. The bundle would automatically authenticate you for any web site or network service that you use. (Imagine XDM, GDM, KDM with a button "PhysKey Login") Once you log out, the bundle is removed from RAM. The bundle also just "evaporates" in the event of a crash or improper shutdown. Use the physical key on any and all machines to get authentication for everything that you need. No need to have everything centralized on one company's server, it all stays with you.

      Sometimes the best solutions are the simplest and oldest ideas.

  89. Strange choice of operating systems by Ed+Avis · · Score: 3, Funny

    They're not porting it to XENIX? This is an outrage!

    --
    -- Ed Avis ed@membled.com
  90. Circling the drain? by Gerry+Gleason · · Score: 4, Interesting
    Microsoft appears to have been circling the ol' financial drain for some time, with shaky bookkeeping, shrinking markets, and admissions that their products cannot compete on technical merits. Perhaps this last week's media blitz is a sign that the execs have offloaded enough of their stock options for us to hear that last *glunk* and see MSFT along side EOG.

    Much as I would like to believe this, I haven't seen any public signs that they are hurting. Could this be true? The decision in India has to be a big blow to them, I wonder just how bad the international numbers are at this point. I know they are always trying to spread out their income and losses, but if things really are bad, at some point they will have to take a loss. Any predictions on when this might happen?

    What is EOG?

    1. Re:Circling the drain? by Anonymous Coward · · Score: 0
      but if things really are bad, at some point they will have to take a loss. Any predictions on when this might happen?

      No predictions, only fact: $18 billion loss in 1998. See about half way down the article.

    2. Re:Circling the drain? by Gerry+Gleason · · Score: 2
      No predictions, only fact: $18 billion loss [economist.com] in 1998. See about half way down the article.

      This isn't what I'm talking about. I mean an actual reported loss regardless of accounting tricks. This is an article about the cost of options, and what they say about MS is a 4.5B profit becomes an 18B loss when you account for cost of options given to employees (the bulk to executives, no doubt). The problem is that this doesn't really relate to operational profit/loss, although it is pretty important WRT stockholder value. I'm talking about the former.

  91. Microsoft using Linux to "Enable" Passport ... by NZheretic · · Score: 2
    It looks like Microsoft is beginning to "get" the Business Case for open source

    With apologies to Dr "Suse", to the tune of "Green Eggs and Ham".

    Linux can. Linux can .Use Linux

    That Linux can! That Linux can! I do not like that Linux can!

    Do you like open sourcing plan?

    I do not like that Linux can. I do not like the open sourcing plan.

    Would you like to free source share?

    I would not like to free source share. I would not like it anywhere. I do not like open sourcing plan. I do not like that Linux can.

    Would you like it very stable? Would you like it to enable?

    I do not like it very stable. I do not like it to enable. I do not like to free source share. I do not like it anywhere. I do not like the open sourcing plan. I do not like that Linux can.

    Would you use it in a X-Box? Would you use it if it ROCKS?

    Not on X-box. Not if it rocks. Not if very stable. Not to enable. I would not let them free source share. I would not let them anywhere. I would not allow open sourcing plan. I do not like that Linux can.

    Would you? Could you? In your biz? Use it! Use it! Here it is.

    I would not, could not, in our biz.

    You may like it. You will see. You may like it if it's free!

    I would not, could not if it's free. Not in our biz! It should never be!

    I do not like it on the X-box. I do not like it that it rocks. I do not like it amongst our biz. I do not like it that it is. I do not like they free source share. I do not like that anywhere. I do not like that Linux can. I do not like you Linux man!

    service! service! service! service! Could you, would you, as a service?

    Not as a service! Not if it's free! Not in my biz! Man! Let not it be! I would not, could not, on a X-box. I could not, would not, if it rocks. I will not use it if its stable. I will not use it even to enable. I will not let them free source share. I will not let them anywhere. I do not like open sourcing plan. I do not like that Linux can.

    Say! if in copyleft? always free copyleft! Would you, could you, copyleft?

    I would not, could not, in copyleft.

    Would you, could you, why so nervous?

    I would not, could not, I'm NOT nervous. Not as copyleft. Not as a service. Not in my biz. Not if it's free. I do not like that it can, you see. Not if it's stable. Not on X-box. Not to enable. Not if it rocks. I will not let them free source share. I do not like it anywhere!

    You do not like open sourcing plan?

    I do not like that Linux can.

    Could you, would you use what we wrote?

    I would not, could not, use what you wrote!

    Would you, could you, to avoid your bloat?

    I could not, would not, avoid bloat. I will not, will not, use what you wrote. I will not compete with them as a service. I will not because it makes us nervous. Not in our biz! Not if it's free! Not if it is! You let me be! I do not like it on the X-Box. I do not like it that it Rocks. I will not use it if it's stable. I do not like that it does enable. I do not like they free source share. I do not like it ANYWHERE I do not like open sourcing plan!I do not like that, Linux can.

    You do not like it. So you say. Try it! Try it! And you may. Try it and you may, I say.

    Man! If you will let me be, I will try it. You will see.

    Say! I like open sourcing plan! I do! I like that, Linux can! And I would use it because it's stable. And I could use it to enable...

    And I could charge for providing a service. And I could copyleft without being nervous. And in my biz. And still source free. For you can still charge for a service fee!

    So I will use it on the networked X-box. And I will promote it because it ROCKS. And I will use it because it's stable. And I will use it to enable.

    And I will use it here and there. Say! I can use it ANYWHERE!

    I do so like open sourcing plan! Thank you! Thank you, Linux man!

    By The Cat with the RedHat

  92. All your root passwords are belong to us... by gatoresque · · Score: 1

    I would love to read the EULA for that one!

  93. They pulled the same stunt with IE by Tim+Macinta · · Score: 5, Insightful
    Remember when Microsoft announced they were releasing Internet Explorer for the Mac and for "Unix" (which turned out to just be Solaris and HPUX, I think)? They did this when Netscape was the dominant web browser because many companies were reluctant to switch from Netscape to IE because IE was not a cross platform solution. I said at the time that they would yank these other versions as soon as Netscape started to die out. Guess what happened? Internet Explorer now has the lion's share of the browser market and Microsoft recently yanked the Unix version.

    Everybody please avoid Passport for *nix when it comes out - they are in all likelihood doing the exact same thing. They will abandon you as soon as they get what they want (i.e., a monopoly position).

    1. Re:They pulled the same stunt with IE by fulldecent · · Score: 1
      If you'll recall, the Microsoft products for alternate operating systems have actually been better than the Windows ones. Microsoft actually says this in a press release, I lost the URL, but here are some clear examples (sorry, only Mac ones here):

      * Office 1998 for Macintosh supports translucent contextual menus. This is application-based screen polling and rendering, something you know a programmer would only do if they were in a over-budgeted and over-staffed team with lots of free time and free coffee.

      * MSIE 5.0 for MasOS 8+ has so many more freatures that will never be included in the Windows counterpart: auction tracker, page holder, download manager...

      I think MS is clearly putting a lot of time and money into the alternate operating system development project, and they're making better products than before. So they're making money and the user get products that have been developed (for Windows) and then re-developed (with feature plus) for them. So everybody wins.

      This theory suffices even without the larger picture of adoption and abandonment, so I think the simplest theory is the most probably.

      --

      -- I was raised on the command line, bitch

  94. Who will bother to look at it? by Gerry+Gleason · · Score: 2
    Unless you have some direct interest in the product, why would anyone want to take the time and effort to understand this code? True open source creates a community of interest around the product, and this can only happen if the community trusts what is going on.

    This is a problem with a lot of so-called Open Source projects (e.g. Java). Clearly it's not as bad as MS and the Pasport release, but in essense it is the same. If anyone at Sun is listening, you should pay close attention to this. Give it away under GPL or equivalent terms, and you will be richly rewarded.

    Apple should listen too. They would not loose control of their own development programs by releasing under GPL. If external projects went further, they could take the changes in, and if they don't like them, they can keep up their own fork. Naturally, that would eventually mean Apple GUI environments on PC hardware and under Linux, but this would strenghen them, not weaken. Ok, so they have to get more competetive in hardware, but they should be able to keep an edge because with a more controlled hardware platform 'it just works' is easier to achieve. Think about how much easier it would be to get the company to spring for that Apple portable if most of the PCs are running an Apple desktop on Linux.

    Note to GPL zealots, this is the kind of idea that promotes software freedom on its own merits, rather that with 'because it's right' arguments. Most people will not be swayed by your religious fervor, and in many cases it will just turn them off.

  95. The honest reason MS will be in hell by ChaosMt · · Score: 3, Interesting

    > Remember, MS is about one and only one thing,
    > maximizing the profit of the shareholders. PERIOD.
    >
    Whoa whoa whoa there cheif! I hate to point this out, but you're wrong. Seriously. I know we all have the little capitialist mantra in our heads about profit. However, MS has constantly and routinely screwed their shareholders out of divedens they rightly deserve. The majority stock holders aren't interested in giving anything back and sharing their gains with the rest. Instead, any and all profit goes to continue lining their 40 billion dollar treasure chest. At this point, MS could buy and sell the world if they'd like - hell, they could stop wars, yet they're to frugal to give a penny back to their investors. And this is the REAL reason why MS will be in the very bottom of hell -- Malice toward benifactors.

    1. Re:The honest reason MS will be in hell by cyberformer · · Score: 3, Insightful

      Like many tech companies, Microsoft is about maximizing its own short-term stock price. To a manager with millions in stock optons, this is more important than anything, even profit.

    2. Re:The honest reason MS will be in hell by jpmorgan · · Score: 2

      You do realise there are more ways to get money to your shareholders than dividends, right? In fact, a lot of companies don't pay dividends, since it forces your shareholders to pay taxes on the income.

      Now, having stock-splits, then using your profits to buy-back the stock and consequently maintain the stock price at its previous level is such a sweet way of paying profit to your investors. It's a wonder any companies even bother paying dividends at all.

      This is, of course, why Nader was so cross about MS not paying dividends - in his view they're screwing the government out of tax revenue, which in a way they are. It's not that they're not paying out profit, it's that they're paying out profit in a very unusual way for tax reasons.

  96. Awriiiight!!! by mwood · · Score: 1

    I've been waiting impatiently for the opportunity to say, "no, thank you" to Passport on my Linux boxes.

  97. Sneaky by karlowfwb · · Score: 1

    Microsoft may be evil, but they are not stupid. They know that if they want to Passport to be big and catch on that they cannot be the sole propriators of it. They have a bad enough name in security already.

    They also realize that a LOT of webservers are not windows boxes. So they port it to the *nixes. This is the only way that it has a chance of succeding.

    Plus, many people see *nix and think "Secure"...

  98. Red Herring by Gerry+Gleason · · Score: 2
    There is a FUD value here, but I wouldn't worry about these things too much. Unless they can prove you were looking at their source while you were coding, they wouldn't have much of a case. Of course, most of us would rather not have MS lawyers beathing down our necks whether they have a case or not.

    A more interesting question is what you *can* learn from looking at their code. Probably a lot of negative examples with some evidence of a few talented coders who left their mark. I suppose they try to prevent people who have seen the code from saying anything qualitative about it, but I don't imagine that this could be binding. Anyone 'in the know' that can comment, or at least say why you can't comment?

  99. Oh Well... There's always *BSD! [nt] by Threed · · Score: 0

    [no text]

  100. I don't think you're right by bhsx · · Score: 2

    I think that's a bit too much conspiring for M$, that said, you did strike a chord in me.

    What if M$ was planning on shipping Apache on win32? It wouldn't be a bad move for microsoft. They get a stable code-base to work from, get to make any proprietary extensions they want, get all their own modules running on it (running better under their own version than on the open versions, of course) and BAM! Ship Windows .NET Enterprise 2006 Featuring ApacheM$. I think I'd do it if I were them.

    --
    put the what in the where?
  101. Ready To Run are good guys by Anonymous Coward · · Score: 3, Insightful

    I used to work for them a couple of years ago as an intern- and am still friends with many of them. They're a great small company- I loved working there over all the other places I've worked since then.

    They're good folks- diehard unix people(the president, Jeff, is one of the most experienced unix people I've ever met) who have been, for years, making various open-source software easier to install/use, backing the packages with support, and folding changes back into the community. They've been doing this since the very early 1990's.

    One could argue that RTR helped, in a major way, bring open source software into the corporate world. Not with Linux- but with all the commercial unixes. Solaris. HPUX. AIX. Irix. etc.

    Their ReadyPaks, at the time, were practically revolutionary- with one command you pulled a full installer off a tape, installer asked you a whole bunch of questions, and boom, you got a working installation. It was exactly what many large companies were looking for- open-source software fixed up, given a good installer, and a commercial company to stand behind it for support.

    Whereas you'll see other people talking about how to bring free software to the business world- RTR has been doing it for over 10 years.

    So if you're going to grumble about a company- please don't grumble about RTR. Much of the open source GNU packages you use today, especially on the non-free unixes, work better(or at all) on those platforms in part due to RTR.

    That said, they are a very small company, folks- please use google caches and stuff to keep from swamping their line/webserver....

  102. Re:RTR is very silent on their licensing policies. by Anonymous Coward · · Score: 0

    If the bulletin board has an 0906 access number (I think this is £1 or £1.50 per minute) and the staff downloading and compling it charge a huge sum to do so, maybe.

    USD 399 probably WON'T be cheaper for the any user who uses an unmetered Internet connection and compiles it himself/herself.

  103. Obligatory "Switch" comment. by innosent · · Score: 1

    Yeah, this is great. Now we'll have MORE stories from Microsoft employees about how great their lives are now that they've switched to Frontpage and Passport. Who knows, maybe this time they won't use a stock photo, too!

    Microsoft: Un*x administrator switches to Passport, says 'much more reliable'
    AP (next day): Microsoft 'Un*x administrator' found, works for Microsoft PR firm... sound familiar?

    --
    --That's the point of being root, you can do anything you want, even if it's stupid.
  104. Re:RTR is very silent on their licensing policies. by Anonymous Coward · · Score: 0

    wtf how can charging 399$ for binaries be cheaper than downloading source from a BB?

    Easy. There's someone standing behind it, supporting it...someone you can call. It is exactly what corporations want- not software they have to post a message to some mailing list about when it doesn't compile or install(also, remember, even to this day, compilers from the OS vendors cost $$$$) while meanwhile they have a project being held up, or an annoyed customer, or (insert $100,000+ per hour of downtime situation). $500 in comparison is lunch money.

    Look- if you've never worked in a commerical or corporate IT department, don't go yakking about what you don't understand. There's more than just initial purchase price, there's TCO(Total Cost of Ownership), reliability, support...even if it "costs" more initially, if it improves your chances with saving the day with that big huge client, you pony up the extra $.

    One could say the same about Solaris- "why do people pay thousands more for solaris hardware and big $$$ for the solaris OS?" Answer- to some companies, having a REAL company behind the product is important.

    Why do you think RedHat is so successful? They offer support contracts and consulting. Duuuuh.

  105. DotGNU by absurdhero · · Score: 1

    Its a good thing the DotGNU project is around. The project's goal is to totally replace .NET and its whole platform, including passport, with a decentralized, open system. Not to mention, you can run .NET apps on any platform.
    If the project continues at a good pace, we will not have to rely on Microsoft for anything at all when it comes to Webservices.

  106. To be fair... by 0x0d0a · · Score: 3, Insightful

    MS's release of technical information and source (even, as was mentioned recently, on demand from the courts) *is* a joke, as you've pointed out -- it pretty much is a legal ploy to entangle people in legal barriers preventing from them from working on competition.

    But, let's also be fair here. This is *Microsoft* and *Slashdot* we're talking about. If Microsoft BSD-licensed Windows and released the source, there'd be a ton of people on here talking about how it was an attempt to crush Free Software by making BSD licensing more popular than the GPL. :-)

    1. Re:To be fair... by Herkum01 · · Score: 1

      If Microsoft BSD-licensed Windows and released the source, there'd be a ton of people on here talking about how it was an attempt to crush Free Software by making BSD licensing more popular than the GPL. :-)

      Looks like you have a story submital waiting to be posted here.

  107. PingID looks more like the way forward by Gerry+Gleason · · Score: 2

    Just a quick look at the PingID website tells me that this idea is pretty far along, but I don't think many people are aware of it yet. I have a lot of questions that probably could be answered by further reading at the website, but maybe it would be worthwhile to give an executive summary. Better would be a /. article just on PingID with a link to the executive summary. The picture is pretty good, but I also want to know where the infrastructure needs to be to support this, and how you are doing in getting it widely adopted (i.e. if servers don't support it, what good does it do to have the choice for my favorite clients).

    1. Re:PingID looks more like the way forward by IamTheRealMike · · Score: 2
      That picture is going :) Sorry, that's why I said not to bother looking at the site, it's going to completely switch in a couple of days.

      Yes, we are very far along architecture wise, it's basically just building it now (the hard bit, in other words :)

      Hopefully I'll be able to get a slashdot story on it sometime, otherwise watch my sig for a link to it. If you want to ask any questions, you can email me on mike theoretic com. There will be a technical summary of the various pieces on the site by next week, promise.

  108. Re:I have no problem with Microsoft developing App by Keck · · Score: 1

    Really, it's the OS that we don't want Microsoft controlling right?


    If you don't think MS will try to leverage passport to make it harder or less attractive to use anything but WinXP and it's successors, you aren't being paranoid enough :) Embrace and Extend can't be done in the traditional way since it's their protocol to begin with, but similar to Palladium and other DRM efforts they DO want it to become so de-facto that you can't get around using it.

    If they can get everyone, not just MS sheep, using passport, then those of us saying "I'll never buy a Palladium/Hardware DRM computer, etc" will not have much choice once they tie passport in with Palladium.. Scary, ain't it?

    --
    A computer without Microsoft is like ice cream without ketchup.
  109. Sometimes there are RedHat specifics by msobkow · · Score: 3, Insightful
    If you download the Sybase 12.5 ASE Developer edition, you'll find you can't get it to work under SuSE 8.0 or Mandrake 8.2 because it only works with a very specific glibc patch level under RedHat. Of course you can't run it if you update your RedHat installation, either.

    But that is precisely the kind of problem I'm concerned about. When you are dealing with any sort of security services, you do not want server patches held off because of a package dependancy that you have no way to work around. Some of the patches that don't get along with ASE 12.5 are rather important security patches, for example.

    --
    I do not fail; I succeed at finding out what does not work.
  110. That only applies to web applications by msobkow · · Score: 2


    I know Passport is irrelevant as far as the browser client sees (it's all buried in tickets/cookies), but I'm talking about "thick" client applications. You log in to Passport on a WinXX box once because it is shared by all applications through Microsoft internals. Using HTTP over SSL from a client would not allow that shared authentication behavior because the information is not shared by the clients in any standard fashion.


    That also means that if you have different browsers started, you need to log in for each one seperately, which negates one of the key points of a single-login facility.

    --
    I do not fail; I succeed at finding out what does not work.
  111. Re:I have no problem with Microsoft developing App by Sunnan · · Score: 2, Insightful

    I'd rather live in a world without Microsoft Office (with all that that entails of .doc-files and other horrors) than a world without Microsoft Windows. The OS is just one piece of the computer experience. Someone running XP at home? That doesn't hurt me, happily using GNU/Linux. Microsoft controlling password servers and document formats? That does hurt me.

  112. Gee ... will they open-source it? by duck_prime · · Score: 1

    If they open-source the Linux Passport server, won't that make for an even more efficient lock-down?

  113. License Details? by schlach · · Score: 2

    You become "tainted" and MS may well sue you if you work on a conceptually related project.

    I did some digging on the ms shared source license, and couldn't find much. As much as I appreciate the anec(Slash)dotal evidence, I would like to actually read the damn license and find out how bad the tainting provision is.

    I did find the Rotor shared-source CLI license, and it seems relatively benign. But that's not the Windows XP shared-source license. It looks like you have to contact by hand someone at an office if you want to even see the conditions of the license. Anyone have a copy, want to post it?

  114. Solaris, Redhat by Anonymous Coward · · Score: 0

    Why port Passport? I want to see the net work, not security holes. Given M$'s history, I wonder what the hidden reporting features will be.

  115. I see it as a warning... by mmol_6453 · · Score: 2

    The fact that they've released a product to new, competing platforms is not a good thing.

    I see three possible reasons:

    First, they could be extremely desperate to keep a presence on a minimum percentage of the market. This is bad, since that makes them a cornered animal.

    Second, they may be desparate to keep that product available for competing platforms. Considering the product, and the nature of Passport, I see it as a potential offense against privacy and, down the road, fair use.

    Third, they may be trying to force people to switch to Microsoft products, via making a service a de-facto standard, then dropping all support for that service for any platform they don't have financial interest in. Apache FP extensions is a good example.

    (Frankly, I see the idea that one entity controls both software and a kernel as a conflict of interest.)

    --
    What's this Submit thingy do?
  116. Re:I have no problem with Microsoft developing App by cbreaker · · Score: 1

    I do believe in the phrase "The greater the power the greater the responsibility" and Microsoft acts very irresponsibly when it comes to some (okay, many) of their business practices.

    But. I do like Office. It's easy to use and it's got a ton of stuff you can do. And there's other things I like. Hell, I like the Windows interface (no, not OS, the Interface. If it was linux under the hood, it would rule.) The guys that make this stuff aren't the ones that run the business. A lot of it is good. And if you deny that, you lose credibility IMO (statement not targeted at anyone in particular.)

    So, I would like it if I could run Linux and yet still run Office (natively!)

    I am not at the point where I can replace my workstation with Linux. I wish I could say "Yea well whateva' I run GNU - WORD UP!" but I cannot.

    If more games and more commercial applications hit the shelves, I'll switch. Until then, Photoshop is still more powerful then The Gimp, MSOffice is easier for me to use then OpenOffice, and I like to play more then the four (fairly recent) commercial games out there.

    I do use Linux wherever I can; I enjoy it quite a bit. Not for my "main" machine though.

    And yes, The Gimp and OpenOffice are free. They are very nice. But for me, and many others (especially Business) I don't want free if it's not the best or easiest. I am willing to pay for software if it's what I need.

    I don't know. I agree that I wouldn't want microsoft controlling all the authentication on the internet. But I wouldn't want any other single entity doing it either; I would want it a bit more distributed.. simply saying "NOT MS" isn't good enough for me.

    --
    - It's not the Macs I hate. It's Digg users. -
  117. How did I live without it !!!! by Ozric · · Score: 1

    Oh joy .... Now I can give MSFT all of my clients information. In one fell swoop, I might add.

    Oz

  118. Excellent point! by mmol_6453 · · Score: 2

    And since Joe Admin is stuck with one version of a given library, he may also be stuck with some very serious security holes that come with those libraries.

    Example: Let's say malloc() (or free()...not sure which) is discovered to not erase a certain-sized block of memory when one program releases it and another program takes it.

    If Microsoft were to dynamicly (or staticly) link specifically to that specific version of glibc, and not release an update, then they'd be technically correct in saying "Most Linux servers offering Microsoft-invented services have dangerous security flaws embedded in them. Why not switch to the source?" in an ad campaign.

    Sure, it'd be slander, but who's to defend?

    Who can take legal retribution for slander against Linux?

    --
    What's this Submit thingy do?
  119. Game On! by Teknogeek · · Score: 2

    All that's left is for WineX to run AC2, and I'll never have to boot into Windows again!

    --
    I mod down anyone who uses M$ in their posts. I like to live on the edge.
  120. mod parent up by Anonymous Coward · · Score: 0

    and whatnot

  121. "Microsoft never abandons a product, period" by Royster · · Score: 2

    Microsoft never abandons a product, period, they just repurpose it a few years later.

    I'm waitng for the next iteration of MS Bob. Do you think it might be the next security interface?

    --
    I have discovered a truly marvelous sig, unfortunately the sig limit is too small to contain i
  122. Re:I have no problem with Microsoft developing App by Keck · · Score: 1

    I do believe in the phrase "The greater the power the greater the responsibility" and Microsoft acts very irresponsibly when it comes to some (okay, many) of their business practices.

    No argument there.


    But. I do like Office. It's easy to use and it's got a ton of stuff you can do. And there's other things I like. Hell, I like the Windows interface (no, not OS, the Interface. If it was linux under the hood, it would rule.) The guys that make this stuff aren't the ones that run the business. A lot of it is good. And if you deny that, you lose credibility IMO (statement not targeted at anyone in particular.)


    I agree with you to some degree. For the most part it's stable, but the bloat is pretty bad -- Processors get faster but Office2k2 runs the same today on a P4 as Office97 did on my PII 300... I agree that MS has many many talented, even brilliant programmers working for them, my problems with them are mostly business related too. Other applications aren't that bad, but their OSen are just awful.


    So, I would like it if I could run Linux and yet still run Office (natively!)


    I would like to be able to do that too, but I wouldn't actually do it. :) What I mean by that is it would be a PERFECT means of switching everyone I know to some version of linux. Office has been the biggest linux migration killer there is, we have just about everything else now, for 95% of the population's needs.


    I am not at the point where I can replace my workstation with Linux. I wish I could say "Yea well whateva' I run GNU - WORD UP!" but I cannot.


    I keep a windows machine around but it doesn't do much. I haven't used windows on my primary machine in about 5 years. I'm not a GNU zealot, but free as in freedom is much more important to me than free as in beer.

    If more games and more commercial applications hit the shelves, I'll switch.


    I'm not chastising you in anyway here, but that's the same attitude that keeps our software from growing faster. It'll have to gain critical mass at some point, and that attitude runs contrary to it doing so. Again, it's not your job to do so, but if everyone did that we'd have no apps to begin with.


    Until then, Photoshop is still more powerful then The Gimp, MSOffice is easier for me to use then OpenOffice, and I like to play more then the four (fairly recent) commercial games out there.


    It's true, linux is not a gaming platform yet, but that goes back to the number of users demanding support for it too. I think that will change eventually. I don't fire windows up for games b/c up til now the only game I play is Unreal Tourney, which works just great in leeenux.


    I do use Linux wherever I can; I enjoy it quite a bit. Not for my "main" machine though.


    Keep trying! :)


    And yes, The Gimp and OpenOffice are free. They are very nice. But for me, and many others (especially Business) I don't want free if it's not the best or easiest. I am willing to pay for software if it's what I need.


    I absolutely agree with you. My company buys Office licenses, I use OpenOffice at work though b/c it does everything I need and I have two linux boxen here I use more than my NT machine (which I use almost exclusively for CAD) There are now and always will be applications that NEED to be proprietary because there is no motivation to make a free version. I'm talking about stuff like complete software suites that are used to run/manage hospitals, full fledged CAD apps, etc. The only point of making those things is to sell them, the writer(s) don't have so much use for those things that they would write them anyway.


    I don't know. I agree that I wouldn't want microsoft controlling all the authentication on the internet. But I wouldn't want any other single entity doing it either; I would want it a bit more distributed.. simply saying "NOT MS" isn't good enough for me.


    Totally agreed. I'm of the opinion that it shouldn't even be distributed, you should be the only person with access, like a password-wallet protected by a single master password. Like Mozilla has it implemented. Then we can stop talking about "will MS keep our stuff secure" and get back to securing our personal systems -- as we should already do anyway. Different people/organizations require different levels of security -- there's no such thing as perfect security of course. So why should there be a one-size-fits-all level of security like passport? as soon as it's defeated once, (which is as sure as the rising sun,) it all goes to hell.

    To sum up, I agree that MS has some good Apps, but the mere fact that they tie you to a MS OS is more than enough reason for me not to use them. I don't have a problem with YOU using their OS or Office or whatever you want. What I *do* have a problem with is them implementing hardware DRM like Palladium, tying Passport into it, and pushing it on the people who don't know enough to resist, until it gets to the point that to do anything useful *I* must also use an MS OS and Passport. This is their true goal, it's quite clear. Sorry if it sounded like I was focusing on the quality of their software.

    --
    A computer without Microsoft is like ice cream without ketchup.
  123. FreeBSD port? by Anonymous Coward · · Score: 0

    I only run FreeBSD on all my servers. Is MS going to do a FreeBSD port?

  124. Uptime? by IsoRashi · · Score: 1

    I know I'm beating a dead horse, but not only do I not trust MS, but I'm not so sure about the robustness and stability of their services. I have been using hotmail for years and years, since before it was an MS service--my hotmail address is my main one, the one that never changes and where people know they can reach me. Yesterday I was unable to access my account because the server with my information on it was "unaccessable"... all day... into the wee hours of the morning. Is this the kind of service we expect from them? What will happen when their authentication server goes down and all the people whose throats they're shoving Passport down can't access any of their stuff?

    --
    This is not the greatest sig in the world, no. This is just a tribute.
  125. At least will stop the FUD by obdulio · · Score: 1

    M$ selling closed software for Linux will stop the FUD about GPL (GPL software can be charged for, etc).

    --
    PENAROL: Seras eterno como el tiempo y floreceras en cada primavera.
  126. You know... by Anonymous Coward · · Score: 2, Funny

    I thought apache could use a large security hole.

  127. Passport on Linux, Solaris, etc. by Daimaou · · Score: 2

    Great! Now there will be even more platform on which I can ignore this stupid technology.

    1. Re:Passport on Linux, Solaris, etc. by Daimaou · · Score: 2

      Sorry, I meant platforms.

  128. Re:I have no problem with Microsoft developing App by cbreaker · · Score: 1

    I really wish I was a programmer. I'd help out and program Linux stuffs.

    But other then that, I really don't know how to support it.

    I use it whenever I can, but I can't use it prime time. I push it on everyone, and I run it on five out of the 13 machines I have at my house. I'll use Linux exclusively to do web serving and firewalling/routing, and I use it for a boat load of other stuff. Mostly utility though.

    Everyone's requirements for switching to Linux are different. I play games. I enjoy them quite a bit. And, if Sony ported Everquest to Linux, I would be a lot closer to switching. UT2003, EQ.. would be pretty nice.

    And I can't find a damned mail client that's got half the features I like in Outlook. All the good Linux mail clients are clumsy. And no, I won't use a terminal based mail client.

    I understand that by holding back because the applications are not available to me is part of the problem. Why develop applications so people like me *might* switch?

    There is another thing about Linux on the desktop though, and I need to mention it. It's not just application availability. It's the user-friendly aspect. With a Windows machine (2000, XP) file sharing, printer sharing, (in fact, PRINTING at all!) is so easy. You plug into the network, and you're good. Sometimes I just want to bring my machine to my friends house, plug into his network, and have full run of his services (well, with a user account..) without hours of learning and configuration, messing with NFS or Samba or ssh or whatever.

    I completely agree with you about the security of your identity and information. People should be required (and able) to take a little bit of responsibility and make sure they secure themselves. The problem is finding the right tools to give people so that they can protect their own information successfully.

    I think a large scale authentication system could definately be USEFUL, I mean, having one sign in for thousands of web pages would be great. There's a better way then a large server sitting on the internet though.

    Of course, try getting Microsoft to impliment these features into IE. IE was a better browser then Netscape.. at the time. But it's stagnant now, and we're all screwed because of it.

    --
    - It's not the Macs I hate. It's Digg users. -
  129. WHoa! by Maskirovka · · Score: 3, Funny

    Damn! I saw a beta of this on kazaa last week, but thought it was fake.

  130. They REALLY think the Linux world WANTS this?? by pair-a-noyd · · Score: 1

    I thought Linux was about freedom from oppression by the Evil Empire.
    Where the hell do they get the idea that Linux people want to be assimilated into the Borg M$ machine??

    No thanks Billy, I'll PASS on Passport..

  131. Re:Over lunch, I discovered how Passport assign va by Jhan · · Score: 2

    Nice troll. Plausible all through, except for this part:

    To decrypt, all you need to find is the private exponent d. This isn't incredibly hard to do; just factor it with any microcomputer:

    And as we all now, key lengths are selected so that it would take about 1,000,000,000 years to "just factor" that number with "any microcomputer".

    Try again :-)

    --

    I choose to remain celibate, like my father and his father before him.

  132. Linux helps Microsoft more than hurts by Anonymous Coward · · Score: 0

    Microsoft keeps making claims in court that Linux is a "competitor" therefore M$ is not a monopoly. If you make a retarded passport, regardless if anyone uses it, M$ will claim it has a competitor.

    1. Re:Linux helps Microsoft more than hurts by Zelig321 · · Score: 1

      Very insightful. I too think this is the new strategy adopted by MS.

      They can't buy off OSS, so they might as well leverage on it to make it their Wild Card in court, so they can continue stuffing more and more pre-installed software in Windows, charge you for it, and leave their "corporate" competitors in the dust...

      After saying such a thing, I feel Ballmer blood flowing in my veins...

  133. Re:I have no problem with Microsoft developing App by Keck · · Score: 1

    I really wish I was a programmer. I'd help out and program Linux stuffs.

    Aha! You don't have to be. I haven't contributed a single line of code to any major opensource project, though i've written patches for smaller programs in order to suit my own needs and submitted the patches to the owners. Outside of that, we need WAY more people submitting feedback and bug reports on larger projects than we need core developers. There was a study linked to on /. the other day about how most major projects have no more than 15 core developers, then a bunch of people who contribute patches and suggestions, but lots of feedback, quickly, from many people makes free software improve very fast (or at least, it's neccessary for fast improvement).


    I use it whenever I can, but I can't use it prime time. I push it on everyone, and I run it on five out of the 13 machines I have at my house. I'll use Linux exclusively to do web serving and firewalling/routing, and I use it for a boat load of other stuff. Mostly utility though.


    That's more than a good start, I'm wondering why you can't use it prime time .. I don't call a gaming machine prime time, but that's just me; so if you use windows for games, big deal.

    Everyone's requirements for switching to Linux are different. I play games. I enjoy them quite a bit. And, if Sony ported Everquest to Linux, I would be a lot closer to switching. UT2003, EQ.. would be pretty nice.


    It's your lucky day. Everquest runs in WineX now, supposedely pretty well.
    http://slashdot.org/article.pl?sid=02/10/12/2037 23 1&mode=thread&tid=127

    Also, UT2003 shipped with a linux installer on the CD.. they didn't advertise it on the box because they weren't sure if they'd have the linux port done in time to ship, but it is there, and it does work quite well. I think it supports a smaller number of graphics cards on linux at the moment though, that's expected to improve as well.


    And I can't find a damned mail client that's got half the features I like in Outlook. All the good Linux mail clients are clumsy. And no, I won't use a terminal based mail client.

    That's where I differ from you; i'm emphatically opposed to the idea of Outlook. It's a virus distribution tool at best. Features are all well and good but I believe email should stay email -- text with mime attachments, not HTML in the freakin body. I *love* mutt. If you want to try a well-featured mail client you could try Mozilla's (without even switching off of windows, even)


    With a Windows machine (2000, XP) file sharing, printer sharing, (in fact, PRINTING at all!) is so easy. You plug into the network, and you're good. Sometimes I just want to bring my machine to my friends house, plug into his network, and have full run of his services (well, with a user account..) without hours of learning and configuration, messing with NFS or Samba or ssh or whatever.


    I'll give you partial credit for that one; but if you know samba even a little it's not hard to set it up so you work seamlessly with windows networks. You shoould have no problems plunking your box down, using dhcp, and having your shares be seen, and mount yoru friend's shares. There are plenty of graphical tools available for this if you don't like typing (I do). As for printing I'm perfectly comfortable with lprng, but I agree most people aren't. The CUPS project though is quite advanced and goes a long way toward bridging the gap. Check it out at www.cups.org.


    I think a large scale authentication system could definately be USEFUL, I mean, having one sign in for thousands of web pages would be great. There's a better way then a large server sitting on the internet though.


    Agreed. The utility of Outlook is not in question as millions use it; the security however SUCKS, no explanation needed. Utility without security, when it comes to something like storing all your personal info, is just plain wrong.


    Of course, try getting Microsoft to impliment these features into IE. IE was a better browser then Netscape.. at the time. But it's stagnant now, and we're all screwed because of it.

    Not all of us. I use Mozilla and like it just fine. It takes longer to load up because it doesn't get pre-loaded when I start my OS (Like
    IE does) but after that it's just as fast as IE, and I've never had a problem with it rendering something wrong. The SINGLE complaint I have is that Macromedia doens't have a Shockwave plugin for linux though Flash works just fine.

    Though you are right -- MS doesn't HAVE to include more features in any meaningful way, because they killed the competition -- what was that whole DOJ vs Microsoft thing again? :)

    I'm glad we had this little talk, Wally.

    --
    A computer without Microsoft is like ice cream without ketchup.
  134. Re:Linus is not author of Linux! by Anonymous Coward · · Score: 0

    Moderated down again, but the truth cannot be suppressed.

  135. Re:I have no problem with Microsoft developing App by cbreaker · · Score: 1

    Truthfully, I can configure samba in my sleep. The problem is getting everyone else to do it. And what you say about using DHCP, mounting shares, and all that jazz, automatically? Sure, once you figure the damned thing out.

    I have never been able to not figure anything out on a unix system. I've implimented sendmail servers and apache web servers in data centers. I'm kind of speaking for the more lay person that doesn't know linux very well, wants an alternative to Windows, and this is not it.

    I love the way you can configure (almost) every unix server product from the console. True remote administration. But for the desktop.. Print dammit! Wait, I have to install this CUPS thing? Okay. Grr. Failed dependency on xyz-1.2.3.4.5.6. Find that. Install. Grr. Need to load the parport module. Failed, need to specify IRQ in /etc/conf.modules.
    I just want to print. And it's the same for so many different aspects.

    Yea, we know that linux needs some sort of better installation system. RPM is all well and good and the open source GNU freaks will push it on everyone all day, but it's still a pain sometimes. Many times I just say screw it and install from source.

    Do I want to deal with all that? I like a good mix of GUI tools and command line tools. I like to be able to do everything command line, but have the option of GUI for normal tasks. There's a SourceForge project for almost everything I want to do... but it's crazy sometimes to locate all these things and get them all working in a resonable amount of time.

    And yea, Outlook I guess is insecure. Ho hum. I run an Exchange 2000 server here and host e-mail for my family and friends. It all works very well, and the Outlook Web Access in E2k is really cool. (I used to do Exchange Tech Support.. for MS) I run Trend on the server, and it takes care of most malicious stuff coming in. As far as attachments from unknown senders, well, don't open them. And as far as attachments from known senders, but look fishy, don't open them. Just say delete.

    Personally I've never had a security problem with Outlook, and neither has anyone else I know. I use Outlook in "native" MAPI mode, and it's great. It's fast, I get instant notifications when e-mail shows up (you can get that from IMAP too) and all the mail is stored on the server (also can be done with IMAP, but it's not as nice.) Outlook is my Messaging Center, and no other mail client around (besides maybe Lotus Notes - don't laugh I like Notes) provides me with everything I need, including MozillaMail (Tried it, and keep trying it with every new release.)

    Yea, it's really cool that UT2003 has the Linux version right on the 3rd CD. Very cool. And I'll surely check out EQ; I'm really curious how it will run. I wonder if MacroQuest will work too.. =) Never had much luck with WINE. I haven't looked at it in awhile and could only really get MiRC to work; I hope I have better luck this time.

    --
    - It's not the Macs I hate. It's Digg users. -
  136. I smell a rat... by Anonymous Coward · · Score: 0

    Does anyone believe this? Does anyone really believe that MS has nothing but good intentions? Isn't the reason most of us switched to Linux was to get away from MS, except for use in gaming? In the words of that horse from the old Ren and Stimpy cartoon: "No sir, I don't like it."

    Beware of Greeks (or is it Geeks) Bearing Gifts...

    1. Re:I smell a rat... by Anonymous Coward · · Score: 0

      Geeks? The dorks at MS are anything but geeks. Real geeks use *nix. Some of them used to be geeks since Windows 3.x was written in C on Unix... But those days are long gone. There is no such thing as a geek that uses Windows.

  137. Re:I have no problem with Microsoft developing App by Keck · · Score: 1

    Sure, once you figure the damned thing out.

    Yes, you are correct that it's not for Joe User.


    I'm kind of speaking for the more lay person that doesn't know linux very well, wants an alternative to Windows, and this is not it.


    I think it will get there as those tools you have trouble finding, including CUPS, are packaged and setup by default. I don't know who's going to do it yet of course..


    Okay. Grr. Failed dependency on xyz-1.2.3.4.5.6. Find that. Install. Grr. Need to load the parport module. Failed, need to specify IRQ in /etc/conf.modules.


    Dependency hell? Try debian. I'm not gonna preach, you have enough clue to read if you don't know it already; but apt/dpkg are a great system. Dependency problems melt away and I can have my system automatically updated if I really want..
    RPM is not a very good system IMHO for upgrading an entire distribution, but I haven't used it much since RedHat 6.0, either. Debian is just the right way to do it, for me.

    Many times I just say screw it and install from source.

    I only have to install from source the important stuff that people don't package the way I want it (there would be too many packages) like apache.

    Do I want to deal with all that? I like a good mix of GUI tools and command line tools. I like to be able to do everything command line, but have the option of GUI for normal tasks.

    I can respect that. Personally I don't care about GUI anything except a web browser, the GIMP, and other things that inherently can't be done right without a gui. I'm much more into automating things, which is much easier with CLI tools anyway.

    There's a SourceForge project for almost everything I want to do... but it's crazy sometimes to locate all these things and get them all working in a resonable amount of time.

    That's a hole I think will be filled by a user-friendly distribution at some point. Looking back, Redhat 8.0 is easier to install and use than WinXP, and it's about 10x easier to install than RH 6.0, 5.2, 5.0, etc. Within a few years I'd say it'll be 5x as good as it is now for new users.

    I'm not going to address your paragraphs about Outlook too much. To each his own, just so long as I can use the one I want to. If it works for you it works for you.

    Never had much luck with WINE. I haven't looked at it in awhile and could only really get MiRC to work;

    WineX isn't wine, it's a fork of wine; it's specifically geared to let you play windows games that haven't been ported. Heh, what's the point of getting MiRC to work? :P) there are plenty of good irc clients you can run natively. BitchX, Xchat are both good, I prefer BitchX.

    --
    A computer without Microsoft is like ice cream without ketchup.
  138. DotGNU MACS@FrePort -- A passport replacement by Gopal.V · · Score: 1

    Finally we get to do what we want ... roll out a Passport clone. And one which you can use for Free as well :-)...

    DotGNU is planning a nice replacement for Passport and has been working for the past one year on something "real people call secure" ...

    DOTGNU

  139. while at it... by BalkanBoy · · Score: 1

    can they also port MS Office and everything else that Microsoft ever wrote? :)

    --
    'A lie if repeated often enough, becomes the truth.' - Goebbels
  140. Well that is why Office doesn't exist for *nix yet by PigeonGB · · Score: 1

    And the user base is not hostile to Passport if they are the ones that requested it.

    Microsoft has its reasons. I have yet to see them make a move in Redmond without having a way to capitalize on other people's mistakes.

    Passport on *nix is better than nothing on *nix, as far as the market is concerned. A product exists where another product does not. I haven't heard squat about Liberty or anything similar.

    Then again, it could be because enough people know it is a big security risk.
    I mean, I risk enough when my email accounts at three different providers as well as my /. account as well as other accounts all have the same password.
    To have them actually behind the very same password is worse.
    At least I can change the passwords for each if one gets compromised.
    With Passport or any alternative, I don't know how I would protect my accounts.

    But again, Microsoft is providing a product where there is no product, and will win a big market share, even if it is on a Free OS, simply because there is no alternative. At the same time, it is good and bad.

    --
    I have 3656.9 Bogomips. How many Bogomips do you have?
  141. One way hash by msobkow · · Score: 2

    How can I get the importance of one-way hashing at the security services database through to you? It is a technology that does not actually store your password on the server at all! Instead, it relies on using your password as a seed value to other information unique to the server to produce a hash value. Only that hash value is stored on disk.

    The algorithms used for one way hashing on security servers combine the user's password, a security server seed, and potentially other seeds to produce the value stored to disk. Even if you swipe the "password file" from the security servers, you lack the seeds necessary to even try a brute force attack to produce the key. Because multiple passwords will hash down to the same value, the only way to even know you have "the" password is if you have multiple databases being crunched (you cannot restore the same security data files to a server that is configured with a different seed.)

    You also need to read up on what terms like "trusted client" means in the realm of computer security. Generally, it means that the client resides in a physically secure environment where it is guaranteed to be maintained, such as in a corporate data server subnet.

    Where you are at risk with centralized authentication services is poorly implemented and maintained security servers. This is not a task managed by a typical sysadmin nor by an MCSE. Why did you think security infrastructure specialists are so damned expensive, even in the post-dot-bomb era? (No, I am not such a specialist, but I learned most of what I know about the topic from people who are security/cryptography specialists. They start talking in set/pattern/probability mathematics that make my head hurt, which is why I never went into that specialty.)

    --
    I do not fail; I succeed at finding out what does not work.
    1. Re:One way hash by miffo.swe · · Score: 2

      bla bla bla bla bla....

      How you word it wont change the simple truth, dont put all your risks in one single point of failure. Somewhere somehow a mistake is made and the wrong person gets access where he shouldnt. By that time the people that endorse this kind och things are gone like smoke or pretending like its raining.

      --
      HTTP/1.1 400
  142. Note: That only applies to the developer edition by msobkow · · Score: 2

    The problems that occur with the developere edition do not occur with the commercial or demo versions. It is a weirdity of the developer build, and I don't want to give people the idea that there is a generic problem with Sybase 12.5. This is a very special case problem and they are working on a resolution.

    --
    I do not fail; I succeed at finding out what does not work.
  143. Let me see if I have this right by dacarr · · Score: 2
    Microsoft, a company I don't trust, wants to put a program on my computer direcly or otherwise that allows me to use just one password to access any other password controlled site I have out there.

    All of the Linux browsers out there have a password manager, with the possible exception of Lynx or Opera.

    Can somebody tell me why I need .NET passport, especially when it strikes me as a security hole I could pilot the Starship Enterprise through sideways and not hit the edge?

    --
    This sig no verb.
  144. This is only so much dogrel by Anonymous Coward · · Score: 0

    Microsoft is the anus of the software industry, studiously excreting software into the market place for "Joe Coprophage" to consume. The only reason they are making this for Linux is because they are trying to find a way to take it down. I will be very surprised is the squeaky clean world of Linux admins takes the bait. Most Linux admins are incredibly smart and don't tolerate shite on their systems. Microsoft is only run by sub-human monkeys that have randomly typed on their consoles to create the travesty that is Windows. Avoid Passport at all costs unless you want Microsoft to 0WN j00.

    Dogrel, I say... just plain dogrel.

  145. Re:RTR is very silent on their licensing policies. by Anonymous Coward · · Score: 0

    So, getting their software is cheaper than downloading code from Sourceforge. ($0)

    Wow! The $399 figure must be how much they pay you to use their software.

  146. Re:This is only so much dogrel by Anonymous Coward · · Score: 0

    Is that sig of yours supposed to be referring to whatever it was that you wrote above it? In this case it sure does...

  147. Who cares? by Anonymous Coward · · Score: 0

    Linux users are smart enough to not give a @#$%@#^ about that. Atleast I hope. I'm using *NIX to keep microsoft software OFF of my computer, plain and simple.

    1. Re:Who cares? by eno2001 · · Score: 1

      Here here... Someone mod this up! This man speaks the truth!

      --
      -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
  148. Re:This is only so much dogrel by eno2001 · · Score: 1

    I know this is off toppic, but what exactly IS dogrel? I can't find a definition for it in any dictionary. There were some references to it on Google, but those just seemed to be a German word and I don't understand German. Does "dogrel" actually mean anything in English? It kind of makes me think of Dogbert. :P

    --
    -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
  149. Microsoft vs GPL by Anonymous Coward · · Score: 0

    I thought that GLP software was 'viral' and that any applications ported to run on GPL software had the IP sucked out of it.

    How is it possible that Microsoft has ported *anything* to Linux? Didn't the 'viral' nature of the GPL suddenly force it all to become open source? Someone should ask them for the source.

    Oh, yeah. I forgot. Microsoft are blithering liars.

  150. Re:Presumably because... BAD XML by Anonymous Coward · · Score: 0

    Your XML is crap you don't even close your tags
    DUH

  151. Ready To Run by Brown+Line · · Score: 1

    If this is the same company I've dealt with, RTR ported the X Window system to the old Coherent operating system 'way back when. Is Jeff Moskow still running it? Enquiring minds want to know ...

    --
    [this .sig for rent]
  152. You are entitled to your misunderstanding by msobkow · · Score: 2

    You are entitled to misunderstanding what security servers are, how redundancy prevents the issues you raise, and how large scale systems are secured.

    I can only hope that your clients listen to more knowledgeable sources than you before they make decisions. While smaller environments might not be able to justify the expense of full security servers, they should do so with full information about the risks they incur by doing so.

    In the meantime, please get your brain off that "single point of failure" focus. That is what distributed security services and authentication databases are designed to prevent. Go over to IBM's web site and read some redbooks on Kerberos architectures and DCE, think about what they are saying, and I think you will eventually realize that your concerns have been addressed for well over a decade.

    You might also be thinking that I am advocating a web-wide security service, such as Microsoft tried to force on everyone. If so, your assumption is incorrect -- no one company should have that kind of power and responsibility.

    --
    I do not fail; I succeed at finding out what does not work.
  153. Open source? by Felinoid · · Score: 1

    Why don't they simple puke beta OS type sorce code and leave it for us to support from there?
    Not saying OS is better than CS but that consistancy is good.
    The whole *nix world is wrapped around downloading the souce.
    "Many eyes" fixes problems and really makes things run smoothly.
    Yes"Many eyes" is the best way to find,fix,maintain software.
    But before we get into the whole OS religion thing let me say ME is not exclusive to OS
    (ME: Many eyes)
    (OS: Open Source)

    Wide beta, Code review, breaking code into digestable segments for exper review and vareous auditing protocalls give closed source the benifit of ME plus tech support and user servays for after release input used for future updates etc.
    But the Linux world uses OS for ME. There just isn't enough closed sorce ME software review going on to know what works for *nix and what dosen't.
    OS ME has similar issues on Windows.
    You can't fight the world an os lives in.
    Thats one hold back for Linux in the CS world.

    --
    I don't actually exist.
  154. Circling the drain. by SgtChaireBourne · · Score: 2
    public signs that they are hurting
    Here are the signs: financially unsound business model, bad track record with existing customers, lack of suitable products.

    First off they've grown through acquisition rather than innovation. That business model pretty much guarantees that they'll drop like a stone after their zenith. Additionally, their income follows a few quarters behind the hardware manufacturers which have not yet bottomed out.

    Since they turned an $18 bn loss in 1998, they've been found guilty of breaking federal law, specifically by violating the Sherman Antitrust Act. On the side, they admitted to and removed at least one backdoor in their relseased binaries, and without a code audit there is no way to confirm or deny the precense or absence of more. Even if a government or large enough consortium of corporations were to pay a code audit , the existing code meets neither privacy nor security requirements needed inside the U.S. Outside the U.S., specifically in Europe, privacy standards are much higher and there is not much chance that these problems will be addressed in the near future. These are the result of design flaws not typos. Patches can't fix this, only a rewrite can.

    So there's more to say regarding DRM, software subscription, further leveraging the desktop monopoly+DRM, undocumented APIs, OEM tricks, and last but not least perpetual lock-in from the MS-Word and MS-Excel file formats + DRM. So far, Germany, China, Peru, Venezuela, India, Norway, Finland, and others have expressed doubts as to the wisdom of trying such experimental technology, which of what little has been examined has been found wanting.

    Also their desktop markets are saturated. In the office suite, MS-Word 2.0 for windows and MS-Word 5 for Macintosh were good enough. Folks grudgingly went along with the newer versions as long as times were good. The Windows product line has come to near its end - Win2000 is good enough and few customer have deep enough pockets nor are there enough big chumps to go for License 6.0 that sneaks in with WinXP. Macintosh OS X gives you most of the commercial desktop applications that you will need, plus you have the added stability and ease of maintenance.

    In the server room, any one that can read English is sticking with one of the *NIXes.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  155. You're an idiot. by Anonymous Coward · · Score: 0

    I installed fp extensions with apache on RH 5.1 like 4 years ago.

  156. Last Post! by alpg · · Score: 1

    If he once again pushes up his sleeves in order to compute for 3 days
    and 3 nights in a row, he will spend a quarter of an hour before to
    think which principles of computation shall be most appropriate.
    -- Voltaire, "Diatribe du docteur Akakia"

    - this post brought to you by the Automated Last Post Generator...