Slashdot Mirror
'Open MS Passport': MyUID Goes Beta
mastergoon writes "MyUID, which has been refered to as an "open MS Passport", has opened their doors to public beta testing. MyUID is a user database system, with the purpose of allowing virtually anyone to refer to its records using only HTTP or HTTPS. Many companies have unified login systems, like Yahoo! and Microsoft, but unlike MyUID, these databases cannot be put to use by any site. As of now there is an alpha release PHP4 connectivity API, which while not feature rich is in full working order. APIs should be available in your favourite language soon. You can view this example of a site remotely connecting to MyUID using the alpha API, and give a go at spoofing a login. They want the security of the login methods tested extensively before going production."
It has no reverse DNS, which will mean some people won't allow it to send them mail.
They have the most useless FAQ in recorded history...
The API is also decidedly undocumented.
Please come back when there's actually something to show us...
Kudos to whoever made this, I know you must have put your heart into this. I don't mean this comment as an insult to you or your idea. But really is there a need for this? I like the idea of simplifying the web for people but Passport exists (and failed) and I believe there's a competing group with Sun in it called the Liberty Alliance that has a non-centralized model which I think sounds much safer. A centralized database has too many problems related to it to be useful.
I'd just like to have one fake email/password so i could remember it for the thousand different sites that want my details
This is a joke. I am joking. Joke joke joke.
I'm concerned that it is just another centralized database of information. At least with Passport you don't have to worry about their database being bought by Microsoft.
At Identity Commons we intend to give people full control over their personal profile information, including not only who has access to which parts under what circumstances, but also where which parts of it are stored. If you don't trust any of the "banks" you can store it under your virtual mattress (if that's where you keep your server, though it might get kinda hot under there).
The free and open source code base is built upon two new OASIS XML standards, Extensible Resource Identifiers (XRI) which add (among other things) persistence and cross references to URIs, and the XRI Data Interchange (XDI) spec which enables a "dataweb", much like URIs enable a "document web". The coolest part of XDI is the concept of Link Contracts, that enable fine-grained access control over profile data while simultaneously recording the details that both parties agree to (and electronically sign) before any data exchange takes place.
While we're still a month (or more) from announcing, we have enjoyed some good initial exposure.
BTW: we're looking for people to play with the (pre-alpha) software (it's on SourceForge and there are even some CPAN modules) and help us bring it to the next level.
The antidote for misuse of freedom of speech is more freedom of speech.
-- Molly Ivins
I have just signed up, and my welcome message reads:
"MyUID is giving out three Gmail invitations to it's users. Three MyUID users will be chosen at random on Monday, June 21st at 10:00 PM PDT (GMT minus seven) to receive the invites. Good luck."
Why wouldnt google come up with its own 'passport' service?
This is my sig. There are thousands more, but this one is mine.
Public email = PUBLIC EMAIL. It's optional. They don't put your private email in.
Why not use Jabber Tickets? I already have an account with a Jabber server, and this way the site can automatically tell me if my friends are also using the site, or even notify me that they are using it, so I can spark up a conversation about some topic on the page I know they are at.
Question
http://www.ironfroggy.com/
Yeah, but their concept and framework appears to basically suck. They made a simple user database, tagged in some email address verification and a (currently gimped) "Read this image test", and release an API for any other website to authenticate against this database. Welcome to Web Programming 101. If the problem was this easy to fix, it would've been fixed a long time ago.
There is a (more than one probably) right way to do this, and this isn't even close to being it.
As a matter of fact, I came up with one while typing this, but I deleted my description of it. Why feed slashdot my design work when I should just jot this down somewhere and go implement it myself
11*43+456^2
It's not that I distrust them or anything, it's just that I couldn't find any information on who these people are and why they're making MyUID.
Since this is Slashdot I can only assume that these guys are on the "good" side, but a few answers to "why?" and "who?" in their FAQ wouldn't hurt.
I can't even begin to understand what "MySQL" is supposed to mean.
/etc/my.cnf is the configuration, so MySQL AB has at least some legitimate claim to the prefix "my".
Derived from and/or to be consistent with muSQL. Also the name of a daughter of one of the developers was "My".
At least it's not "My SQL" with the embedded blank.
"My Computer" belongs to whoever stuck the "My" label on "Computer". It wasn't me who did that.
MySQL belongs to MySQL AB. They happen to be nice enough to allow me to use their SQL.
I don't leave a copy of my creditcard at the mall so stores can ask the mall for access to it. No, I keep it with me, and will show it to selected stores when *they* ask *me*.
The first project I'll seriously look into trying to tackle this problem will be a project that has code to download for me to run: either a web service I can run or an XMPP services (presence subscribtion could probably be extended to data ACLs).. whatever.
Any project that requires me to store information on a remote server will be ignored. Obviously most users will actually use the passportd of their company or ISP, but the freedom to run your own - just like httpd/sshd/smtpd/jabberd - that's really a REQUIREMENT.
Instead of pushing my data to centralized databases, I want an interface where third parties can pull it directly from me.