Slashdot Mirror


Henri Poole of Affero On Online Trust

Henri Poole writes "In the interview 'Trust Unlimited', Robert McMillan at LinuxPlanet asks Poole about the roots, current developments, and future of Affero's trust and commerce system. Poole talks about his work at the Well, Mandrakesoft's e-services initiative, and current work with LinuxQuestions, and covers topics of transportable reputations, gaming, profits, blogs, forums, independent media and the importance of independent perspectives and decentralized trust metrics in a democratic society."

55 comments

  1. Hmmm by Anonymous Coward · · Score: 0

    Some of his points made sense but he seemed keen on pushing his own company ... I dunno ... I don't trust him.

  2. What about the reverse by watzinaneihm · · Score: 1

    From the affero webpage Simply register and you are assigned a unique web address (URL). Once you attach this URL to your digital content, others can recognize you with reputation points and or financial contributions.
    What about the reverse , can I get money , for my reputation?
    Then I'll encash all my Karma before this post gets modded down and destroys it all.....

    --
    .ACMD setaloiv siht gnidaeR
  3. USA will assimilate you...Jump on board!!! by Anonymous Coward · · Score: 0

    You too can bask in the glory of the USA!!!

    1. Re:USA will assimilate you...Jump on board!!! by Anonymous Coward · · Score: 0

      is it the same glory that made Perle resign ?

      face it : La France est ton seul ami qui te veuille du bien !
      Hoorray for Denis Papin !

  4. Isn't it a little weird? by Anonymous Coward · · Score: 2, Interesting
    Henri Poole made the /. submission and talks about himself being interviewed in third-person?

    Does this make him a meta-karmawhore?

    1. Re:Isn't it a little weird? by Textbook+Error · · Score: 1

      It's called a slashvertisement.

      --

      Nae bother
    2. Re:Isn't it a little weird? by Anonymous Coward · · Score: 0
      Henri Poole made the /. submission and talks about himself being interviewed in third-person?
      The author of this comment finds this weird too.
  5. Wow, neat Idea. by BrookHarty · · Score: 2, Insightful

    With searching of google newsgroups, and forums, I can finally say thanks for someones post who fixed my problem, even if the post was months/years old.

    Now, how about we add this to Slashcode! This is moderation on a whole new level. Very cool idea.

    1. Re:Wow, neat Idea. by the_bahua · · Score: 1, Interesting

      I have been looking for that kind of ranking for a long time, because wading through search results gets pretty cumbersome, pretty quickly.

      I just want my pr0n... uh.. I mean. My information.

  6. Re:What about the reverse by Telex4 · · Score: 2, Interesting

    If you feel you're worth it, you can get listed as a person.organising to donate to. Then people can give *you* money if they appreciate your work.

    So it's particularly useful for projects that need a small cash stream to keep going, and for developers that would like to do more Free Software work, but don't have the money/time to do so.

  7. How would this translate to getting a job by atlantageek · · Score: 2, Insightful

    This all sounds interesting. However what would be really useful is a way to translate this to a resume. The number of years in a certain language does not really translate well to being a good fit for a position. If working on open source projects and building a lot of OS Karma would help people get jobs then you would see a big rise in the quality and effort of open source projects.

    1. Re:How would this translate to getting a job by Telex4 · · Score: 1

      I shouldn't imagine that putting the URL of your Affero profile on your CV/resume would help you very much. On the other hand, describing your various Free Software projects most certainly would - already/

      Maybe in a few years time, when Affero is more established, some companies might take heed, but I doubt it :)

    2. Re:How would this translate to getting a job by dsplat · · Score: 1

      Actually, I expect that the employers who know what Affero is and need the kind of people who have built good reputations with it will go to Affero looking for employees. Rather than putting it on your resume, they'll find your resume through it.

      --
      The net will not be what we demand, but what we make it. Build it well.
  8. Personally ... by BillsPetMonkey · · Score: 0

    I've never really trusted those nerds at LinuxQuestions.org

    --
    "It's not your information. It's information about you" - John Ford, Vice President, Equifax
  9. Yeah, I did that by Anonymous Coward · · Score: 1, Insightful
    Launched with two other MandrakeSoft refugees in the summer of 2001, Affero is trying to build a standard system of reputation measurement for the Internet.

    Sounds like a project I worked on a while back. Except mine automatically gave a negative rating to anyone that claimed to be able to objectively rate every Internet user on the planet.

    Seriously though, who would pay any attention to something like this? Are there actually people out there that care if Joe from Texas gave them X for their "Internet rating?"

    Not to mention, if you haven't noticed that every community that uses a publically displayed "experience points" type system slowly dies a redundant, boring death as people continually spit out the same useless advice as fast as possible to receive their precious points. It seems to attract the bottom of the barrel, perhaps because people who are truly interested in the discussion don't need the "incentive" and go to serious forums.

    1. Re:Yeah, I did that by tomlord · · Score: 1

      > Not to mention, if you haven't noticed that
      > every community that uses a publically
      > displayed "experience points" type system
      > slowly dies a redundant, boring death as people
      > continually spit out the same useless advice as
      > fast as possible to receive their precious
      > points. It seems to attract the bottom of
      > the barrel, perhaps because people who are
      > truly interested in the discussion don't need
      > the "incentive" and go to serious forums.

      Oh no....you're so wrong. Henri's all on top of that "gaming the system stuff". Didn't you read the interview? He _says_so_ and that proves it's true.

  10. But who will stop the Trolls? by Anonymous Coward · · Score: 1, Interesting
    Once you attach this URL to your digital content, others can recognize you with reputation points and or financial contributions.

    So what's to stop someone from assuming your identity and ruining your reputation? It seems this alone invalidates the system.

  11. Would you trust someone who says... by Anonymous Coward · · Score: 0

    This:

    Poole: We have a Web services interface, so you can check the reputation of someone by interacting with our Web services system.

    He's obviously an early beta of the Microsoft Buzzword Drone. Don't trust him.

  12. If you have found this comment useful... by mikeophile · · Score: 0
    Click here to donate to the Affero cause, "Rent me a hooker in Las Vegas weekend Fund"

    Thank you, and god bless.

  13. Re:Who? by Anonymous Coward · · Score: 0

    And Henri Poole is?

    He caused a
    financial disaster at MandrakeSoft and was
    fired for this.

  14. Nice idea, but... by kinnell · · Score: 1

    Doesn't it seem a bit too generic? I mean he assumes that having a good reputation in one community should translate directly into a good reputation in another community, which is often not the case.

    For example, does having excellent karma in slashdot qualify you to be an authority on the linux kernel mailing list? Taking a real world example, if you were popular among all your neo-nazi friend for your strong political convictions, and you suddenly moved to israel, would/should you enjoy the same good reputation as in your previous home?

    I think for this to be any use, each community would have to choose to accept and rate points from any other community. If I have X points from community A, community B might rate me as X*3, while community C rates me as X*-2 because it doesn't like community A, and community D rates me as zero, because it has never heard of community A.

    Even then, there will obviously be opportunities for canny folk to abuse the system, and gain credits they don't deserve. A bit like politics really.

    --
    If I seem short sighted, it is because I stand on the shoulders of midgets
    1. Re:Nice idea, but... by Telex4 · · Score: 1

      It's certainly not a catch-all solution, but then I can think of many cases where it might be useful. For example, if I were to prove very helpful on LinuxQuestions, then I'd get a good Affero rating for that. If I then offered my help on the GNOME documentation project, they'd have proof positive of my ability.

      Webs of trust are always transferrable between similar communities. I don't think Poole is pretending Affero is the ultimate Karma system.

    2. Re:Nice idea, but... by kinnell · · Score: 1
      if I were to prove very helpful on LinuxQuestions, then I'd get a good Affero rating for that. If I then offered my help on the GNOME documentation project, they'd have proof positive of my ability

      To a point, but even in a case like this, being able to answer questions on linux does not mean you are good at gnome documentation. What if you are just an expert on setting up ntpd, and puke at the sight of a GUI? Whether you had a good rating or not, most open source communities will probably accept your help based on the quality of the help you offer. The only universal application of this idea is to weed out trolls, et al. But they're hardly going to advertise their bad ratings

      --
      If I seem short sighted, it is because I stand on the shoulders of midgets
    3. Re:Nice idea, but... by Telex4 · · Score: 1

      Hmm, well ok, maybe "proof positive" is a bit strong, but it's certainly a useful indicator. Put it this way: without Affero, if I received an application to help with GNOME documentation (assuming I was in charge ;-), I'd have to check that person's previous documentation work out, and that's really all I could do. However, if I saw that on Affero this person had a good rating at LinuxQuestions, and a good rating for documents submitted to NewToLinux, then I'd know that his documents on NewToLinux are highly rated, and I'd also have a quick look at his posts on LinuxQuestions to check out what help he has given, his personality, the quality of his posting etc.

      Conversely, if I went and looked at his Affero rating, and saw that he had received some negative or middle-of-the-road feedback, or that compared to others on LinuxQuestions he barely had any, I might be less inclined to take him on.

      It's not a magic Karma system, like I said, but it's certainly helpful when checking someone's abilities.

    4. Re:Nice idea, but... by tomlord · · Score: 1


      Conversely, if I went and looked at his
      Affero rating, and saw that he had
      received some negative or
      middle-of-the-road feedback, or that
      compared to others on LinuxQuestions he
      barely had any, I might be less inclined
      to take him on.

      And you think this is a _good_ thing?

      Suppose someone gets a negative rating for reasons that are really stupid or that no longer apply. That kind of thing happens all the time and then, looking at the evidence N years down the road, it's impossible for 3rd parties to tell what happened. You're proposing that that kind of bad luck should be amplified and have a long term effect on a person's life -- apparently because you find it convenient or even compelling to simplify your evaluation task to just "Look at the number in column 4".

      I have in my pocket a list of ... um... _57_ communists within the federal government ....

    5. Re:Nice idea, but... by Telex4 · · Score: 1

      Oh come on now, you're taking my points to the extreme and pointing out their breaking points :) Of *course* I wouldn't judge somebody exclusively on some bad karma they got back in 1999, but then are you trying to tell me that if you had one position to fill, and you had two people applying, and one had a better Affero profile than the other (which, after a little investigation, proved well founded), you wouldn't choose the person with the better profile? Are you saying that Affero wouldn't help one bit?

    6. Re:Nice idea, but... by tomlord · · Score: 1

      Oh come on now, you're taking my points to
      the extreme and pointing out their
      breaking points :)

      I'm simply thinking through the implications of what happens if Affero succeeds on their current path. It's you times 100s or 1000s of others.

      Of *course* I wouldn't judge somebody
      exclusively on some bad karma they got
      back in 1999,

      Timing of "bad karma" isn't the primary issue. The unrecorded context is. Haven't you ever been in a situation where the group dynamic included people trying (and succeeding) at making you "look bad"? I think the best way to judge, say, a potential employee is to sit down over a nice meal and talk with them. Then sit down with some paper or a whiteboard and talk with them. In programming, look at their code, then talk with them some more.

      are you trying to tell me that if you had
      one position to fill, and you had two
      people applying, and one had a better
      Affero profile than the other (which,
      after a little investigation, proved well
      founded), you wouldn't choose the person
      with the better profile?

      First, I don't believe that there is any such thing as a "well founded" Affero profile.

      Second, yes -- I would not use Affero to judge candidates. I would try to get to know the candidates and their capabilities personally. If I still couldn't decide, or had doubts about the reasons for my intial decision -- I'd flip a coin.

      We don't need to make ourselves less human and more robotic by reducing to a database table our highest values. We need the Johnson Family (a code of conduct at the turn of the century in the American west; good bums and theives; a Johnson is a good man to do business with; he honors his obligations; he isn't a snoopy, self-rightous person; he doesn't stand idly by when someone is drowning or trapped in a burning car; a Johson will give help when help is needed...)

      -t

    7. Re:Nice idea, but... by Redglare · · Score: 1

      Would you say, Tom, that you are a Johnson?

    8. Re:Nice idea, but... by tomlord · · Score: 1

      > Would you say, Tom, that you are a
      > Johnson?

      I would say that that is question we should each ask of ourselves, and work towards in our lives. I would say that that answers are never simple, but the ideals not so hard to grasp. I would say that "The Place of Dead Roads" by William S Burroughs is, perhaps, his best work -- and certainly a milestone in American literature.

      -t

  15. Prototyped a UI for The WELL? by chuckk · · Score: 1

    Apparently not a very good one. Most all active WELL users are still interfacing through an ~15+ year old command line toolset.

  16. CEO for SALE by Syncroswitch · · Score: 2, Insightful

    As the former CEO oif Mandrakesoft I cant take his article seriously. In the early stages of the linux community we saw a few well supported bleeding edge distros with focused objectives of what they wanted to accomplish. later linux boomed, and the big distros ate the smaller ones, then became complacent and generalized. Now (In the aftermath of the bursted bubble) we see an rampant growth in little, focused, and well supported distros,(www.distrowatch.com) while the lumbering giants beg for money, or try to sell us "Services". The Outgoing "linux execs" never had a clue, they dont understand that opensource will not evolve into corprate grey. Its a grassroots thing, always has been, always will be. Its powerful because of that. Henri was a leader amongst sellouts, so he is modded into /dev/null

  17. Distributed Trust Models by techmuse · · Score: 1

    I recommend reading the following two papers on The Solar Trust Model, a distributed trust model that can be used by anyone to compute relative trust of anyone else, regardless of prior relationships or context.

    The Solar Trust Model: Authentication without Limitation at:

    http://www.acsac.org/1998/abstracts/fri-a-1030-c li fford.pdf

    Networking in The Solar Trust Model:
    Determining Optimal Trust Paths in a Decentralized Trust Network at http://www.acsac.org/2002/papers/9.pdf

    From the second paper's abstract:

    The Solar Trust Model provides a method by which the sender of a message can be authenticated, and the level of trust that can be placed in the sender of the message or the message itself can be computed. The model works even if there is no prior relationship between the sender and receiver of the message. The Solar Trust Model overcomes a variety of limitations inherent in the design of other trust models and public key infrastructures. This paper presents a variety of enhancements and formalizations to the basic concepts of the model. In addition, this paper provides a set of algorithms that can be used to determine all of the possible trusted paths along which a message can be sent from a sender to recipient and the optimal choice of paths from a selection of paths. The paper also presents algorithms for reducing the network load produced by the model through piggybacking, path caching, and load distribution techniques.

    1. Re:Distributed Trust Models by techmuse · · Score: 1

      That first link doesn't seem to have posted correctly. It's http://www.acsac.org/1998/abstracts/fri-a-1030-cli fford.pdf

      No space in the word "clifford"

      first paper

      second paper

  18. integration by it0 · · Score: 1

    The way I look at affero is that it is another way that 1 systeem keeps track of your identity. The same as microsoft is doing with hotmail/msn. But affero doesn't use it to proof who you are for transactions. Instead it proofs your credibility as someone who adds to a community. With an added posibility to get donations because you are such a swell guy. It would be nice if we could combine this stuff.

    I mean it's easy if you don't have to log on everywhere and it's great to be or feel appreciated for your effort in forums/irc/etc..

  19. Yogi Berra, Anyone? by RoloDMonkey · · Score: 1
    Almost all of the top moderators and experts in that community have been using Affero.
    Isn't this essentially saying that all the people rated highly by our system are using our system?
    --
    Long live the Speaker Bracelet
    Rolo D. Monkey
  20. Who he is by Anonymous Coward · · Score: 0

    Always remember that this guy is the main reason that Mandrakesoft is today in deep financial shit.

    So take anything he says and does with lots of salt and take his past CEO abilities into account...

  21. trust vs. databases by tomlord · · Score: 1

    Human trust or reputation is usually developed one-and-one and in personal interactions. It is a _little bit_ transitive (A trusts B, B trusts C, therefore A trusts C) but there are many interesting exceptions. It is a _little bit_ like an incrementally adjusted "score" in a long term game, but again, there are many interesting exceptions where it changes with the wind. Trust and reputation, in their human sense, are mysteries.

    A database about "trust" or "reputation" based on voting is something completely different. It has little or nothing in common with the human forms. It can not "change with the wind". Worse than being strictly transitive, it's a popularity contest (A "trusts" anonymous crowds of voters; an anonymous crowd of voters "trusts" C; therefore A "trusts" C). That's not trust -- that's an election for homecoming king and queen in a cliquish high school.

    In short, systems such as Affero smack of an unscientific sociological experiment to redefine what trust and reputation mean. Worse, given its proposed connection to money and careers -- it's an experiment that, if it succeeds, forces everyone in the free software industry to play. In short, it is immoral.

    (This isn't to say that it's fundamentally different from, say, HR blacklists and other private realizations of similar ideas.)

    One of the key "properties" that Affero possesses is a _great_ thing: the paylist mechanism. You can make a list of people or organizations and describe how they "divide up a pie" -- and people can, in a single transaction, pay all the members of that list according to the proportions. That's a (potentially) incredibly useful tool. Think of it as "group paypal". For example, a software project or a group of musicians can use that to organize an on-line tip-jar without the hassles and legal overhead of forming a formal organization.

    So, Affero, _please_ drop this obnoxious, culture-polluting notion of formalized "trust" and "reputation", surface the paylist mechanism, and let us use that as we see fit. We'll use _real_ trust and _real_ reputation to negotiate among ourselves how to structure the paylists.

    Meanwhile: we really _do not need_ a monetized, playground popularity contest.

    -t

  22. Funny thing about trust is... by adpsk · · Score: 1

    Trust can extend itself as long as it's trusted to.

  23. Reputation and networking have many aspects by dsplat · · Score: 1

    The nice thing about Affero is that it is flexible. Slashdot's Karma/Moderation/Meta-Moderation system captures some excellent ideas. All of them can be expressed in terms of Affero and shouldn't be overlooked.

    Another way of looking at it is simply the usual networking transaction that take place in the real world. Imagine that you are looking for a reliable contractor to renovate your house. There are a number of three-way transactions taking place between you, a friend you trust, and a contractor he trusts well enough to recommend. The whole point of reputation and networking is to allow a certain amount of transitivity in trust relationships.

    A trusts B's judgement. B trusts the quality of C's work. B recommends C to A. If the final transaction works out well, then A's trust in B's judgement is reinforced and A comes to trust C's work directly. C gets more business out of it.

    In the open source community there is an inner circle of people with large reputations. Most of them have substantial time commitments already. But most of them, by virtue of their widespread contact with the OS community have had an opportunity to meet and interact with a large number of other people. They may not have the time or interest to do a project for me, even if I can pay. However, they probably know people who would do a good job.

    --
    The net will not be what we demand, but what we make it. Build it well.
    1. Re:Reputation and networking have many aspects by tomlord · · Score: 1

      > Another way of looking at it is simply the
      > usual networking transaction that take
      > place in the real world. Imagine that you
      > are looking for a reliable contractor to
      > renovate your house. There are a number of
      > three-way transactions taking place
      > between you, a friend you trust, and a
      > contractor he trusts well enough to
      > recommend. The whole point of reputation
      > and networking is to allow a certain
      > amount of transitivity in trust
      > relationships.

      If I'm looking for a contractor for a big job, sure -- I'll bring my friend whose worked with several over for wine and, in the course of the day, form my own nuanced judgement. I might treat the prospective contractors to a lunch or dinner to chat about nothing in particular and construction and quality. I'll bring them to my house and watch how they look at it. What part of this, exactly, do you want to reduce to a score on a web site?

      How, in Affero's system, do you say "I didn't get along with that guy at all -- but knowing you as I do, I wonder if he might not be the right guy for your job?"

  24. *BSD is dying by Anonymous Coward · · Score: 0
    It is official; Netcraft now confirms: *BSD is dying

    One more crippling bombshell hit the already beleaguered *BSD community when IDC confirmed that *BSD market share has dropped yet again, now down to less than a fraction of 1 percent of all servers. Coming on the heels of a recent Netcraft survey which plainly states that *BSD has lost more market share, this news serves to reinforce what we've known all along. *BSD is collapsing in complete disarray, as fittingly exemplified by failing dead last in the recent Sys Admin comprehensive networking test.

    You don't need to be a Kreskin to predict *BSD's future. The hand writing is on the wall: *BSD faces a bleak future. In fact there won't be any future at all for *BSD because *BSD is dying. Things are looking very bad for *BSD. As many of us are already aware, *BSD continues to lose market share. Red ink flows like a river of blood.

    FreeBSD is the most endangered of them all, having lost 93% of its core developers. The sudden and unpleasant departures of long time FreeBSD developers Jordan Hubbard and Mike Smith only serve to underscore the point more clearly. There can no longer be any doubt: FreeBSD is dying.

    Let's keep to the facts and look at the numbers.

    OpenBSD leader Theo states that there are 7000 users of OpenBSD. How many users of NetBSD are there? Let's see. The number of OpenBSD versus NetBSD posts on Usenet is roughly in ratio of 5 to 1. Therefore there are about 7000/5 = 1400 NetBSD users. BSD/OS posts on Usenet are about half of the volume of NetBSD posts. Therefore there are about 700 users of BSD/OS. A recent article put FreeBSD at about 80 percent of the *BSD market. Therefore there are (7000+1400+700)*4 = 36400 FreeBSD users. This is consistent with the number of FreeBSD Usenet posts.

    Due to the troubles of Walnut Creek, abysmal sales and so on, FreeBSD went out of business and was taken over by BSDI who sell another troubled OS. Now BSDI is also dead, its corpse turned over to yet another charnel house.

    All major surveys show that *BSD has steadily declined in market share. *BSD is very sick and its long term survival prospects are very dim. If *BSD is to survive at all it will be among OS dilettante dabblers. *BSD continues to decay. Nothing short of a miracle could save it at this point in time. For all practical purposes, *BSD is dead.

    Fact: *BSD is dying