'Open MS Passport': MyUID Goes Beta
mastergoon writes "MyUID, which has been refered to as an "open MS Passport", has opened their doors to public beta testing. MyUID is a user database system, with the purpose of allowing virtually anyone to refer to its records using only HTTP or HTTPS. Many companies have unified login systems, like Yahoo! and Microsoft, but unlike MyUID, these databases cannot be put to use by any site. As of now there is an alpha release PHP4 connectivity API, which while not feature rich is in full working order. APIs should be available in your favourite language soon. You can view this example of a site remotely connecting to MyUID using the alpha API, and give a go at spoofing a login. They want the security of the login methods tested extensively before going production."
It seems like this project is only implemented on one site called mastergoon.com, and the /. post comes from a user named "mastergoon". Hmm...
Seems like a one-person project. Very easy to declare standards without all those annoying other people!
From their website
MyUID is giving out three Gmail invitations to it's users. Three MyUID users will be chosen at random on Monday, June 21st at 10:00 PM PDT (GMT minus seven) to receive the invites. Good luck.
Weren't they supposed to do something similar? Sure seems to be taking them a long time.
Surely you sign on to their secure server and it generates a token which can authenticate you to the third party site...
Isn't that about the only sane way to do this?
Real nice (if you need email addresses):
t tp://www.myuid.com/api/usercard.php?uid=13/ /www.myuid.com/api/usercard.php?uid=16w .myuid.com/api/usercard.php?uid=18u id.com/api/usercard.php?uid=21c om/api/usercard.php?uid=29a pi/usercard.php?uid=32
http://www.myuid.com/api/usercard.php?uid=12
h
http:
http://ww
http://www.my
http://www.myuid.
http://www.myuid.com/
etc
Lets add to this the fact that the "story" for this reads like a press release, and one that lies at that.
"Many companies have unified login systems, like Yahoo! and Microsoft, but unlike MyUID, these databases cannot be put to use by any site"
So you can't use Passport on your own site? What utter bollocks. Oh look, there's the passport SDK.
But I can't run it on Linux you cry? Really? Step back a version, version 2.1 has code for Apache/CGI in it (Or did last time I looked). Admittedly the documentation for it is sparse to say the least.
Finally lets look at the story submitted. mastergoon. OK, lets look at who owns myuid.com,
Registrar: DOTSTER
Domain Name: MYUID.COM
Created on: 28-APR-04
Expires on: 29-APR-05
Last Updated on: 28-APR-04
Administrative Technical Contact:
O'Shea Kevin kevin@mastergoon.com
Oh look, it's another shill story. Someone sumbitting a story about his service without admitting it.
When did slashdot become a press release site?
I strongly believe that we need to reduce the number of accounts per person - our attempt at that is Mindlocked which we hope to develop further - especially in terms of distributed/replicated databases etc...
Anyone interested in joining this project (that will be released under GPL soon...) - let us know!
That's my 2 cents worth of marketing =)
Our power grid is more vulnerable than you realize...
It says "open" not "open source." It's open in the sense that any web site can use myuid to autheticate users, as opposed to MS Passport which requires a hefty contract with MS.
<sig>Guvf vf abg n frperg zrffntr