What do you think of replacing the stereotypical front yard with some type of garden and some home raising of animals (chickens come to mind)? I'm nowhere near a farmer, but having the ability to have food available a few feet away seems like a wise idea, especially with food prices skyrocketing.
In a previous/. topic, it was stated that shareholders want growth above everything, and that a firm with a market niche that was profitable was considered far less attractive than one that was operating at a net loss, but was expanding into new markets and buying out other companies [1].
Amazon is playing the market quite smartly. Shareholders want growth, Amazon is giving them what they want. I wouldn't be surprised to see an Amazon MP3 player (although that market is a tired one), if it kept the shareholders thinking the company was "growth-focused".
[1]: Maybe it is a good thing long-term. Buy companies like IBM or GE that are established and have stocks paying dividends, and hold those until this "growth" fad dies off and the stocks of functioning companies becomes mainstream again.
Ada 2012, or an earlier rev? Programming languages do help, but are not a guarantee of security. I'm sure one can write a bad website or application in Ada as they can in Java, PHP, Python, or HTML5.
Security is about forcing the blackhats to go through time and expense. STO usually doesn't work, but with using thirty year old technology, it would require an attacker to jump through a lot of hoops just to even procure a computer that can read an 8" floppy drive, the drive itself, and the exact media used (hard-sectored or soft-sectored). Even then, there are different ways to format the disk, be it CAV or CLV, one read/write head or two.
Of course, once a usable disk is obtained, it is a lot harder to get that past security than a USB flash drive.
Nothing is 100% secure, but there are not many hacking tools made these days that can physically compromise an old System/3, or machine of similar vintage. It would take old school mainframe experience, something that wouldn't be widespread knowledge.
There is also the fact that they are used as a long term area denial measure. An organization or nation that might be losing a war or battle can mine an area, not to gain a military advantage, but to keep it from being used by another party.
Sadly, EMET isn't that often used. It really should be part of the OS and turned on by default similar to the NX protection. Then in a few OS revs, being active for all programs and not just IE, Office, and MS stuff. Other operating systems add security restrictions that are overall good for the ecosystem, but require major program changes left and right. Android's locking down of SD cards and SELinux set to enforce is one example.
I do know that XP does have support to some businesses and organizations. I wonder how long until those fixes wind up on the usual sites. IMHO, there is something ironic about having to pirate software to obtain security fixes.
Don't forget to check the Authenticode signature on the Firefox package (and check the key and CA as well...) Before anything gets installed on Windows, I check the signatures. I've been surprised, and quite glad that I've done so, as some download places "repackage" the installers for other programs and re-sign the executables... and usually there are unwanted (well, more accurately, potentially unwanted) additions.
That has been tried. People will just drive illegally, using a "friend"'s vehicle, or find other ways to skirt the law.
I rather have self-driving cars as a solution. This means instead of watching for the drunks/texters, I can catch a snooze or read a book on the commute. Highways could be designed without fancy on/off loops, but just as raised, 4-way intersections with each vehicle's computer timing speed so that two highways can cross without stopping.
That is a tough problem, and it affects regular cars as well. If the vehicle is aggressive, someone hits it, and sues Google for metric bum-tons of cash and there goes the self-driving car concept. If the vehicle is too passive, it might not get past a lane that ends, or even getting out on a three way intersection like a highway frontage road.
Of course, a self-driving vehicle has faster "reactions", and if it can get itself into traffic with a fast turn, it can turn a T-bone collision into a rear-ender, shifting fault to the other driver.
The tech savvy criminals will then move to another notch of security.
One example of this are self-contained apps like Divide that contain a rudimentary word processor, spreadsheet, and other tools, working on files in its space, all encrypted. Unlike Divide, the app would be decentralized, perhaps looking at incoming SMS messages for a kill signal, or even more useful, a keepalive signal. No signed text, deadman switch goes off, and the app would zero out its encryption keys.
Of course, where the real crooks lead, the herd follows, so an app that handles a lot of functions, perhaps even contacts via a Google Voice like setup, would be a best seller.
Blackberries have a nice security feature that I wish iOS and Android had:
If the device does not get a cellular signal (when it checks if it was told to erase itself), after x amount of time, it will erase itself automatically.
No other device, or app has this functionality. It sounds like paranoia, but it would come into handy, especially if there is sensitive data on the device.
I wouldn't even need to bother with a Faraday cage. I'd just pull the SIM card and call the deed done. Unless the device can get onto the Internet via an open Wi-Fi connection, pulling the SIM card will ensure it doesn't receive the kill signal as of now.
The modern shareholder item where a company must grow no matter what... and if a company is well established, but not gaining new market, it is considered a hot potato and has to be dropped... This is a self-destructive philosophy seems to be fairly recent.
I think part of the reason why Dell went private is exactly this. The desktop/server/workstation market is not growing by leaps and bounds. Is it still lucrative? By far. Companies amortize their computers every 3-5 years on taxes, Moore's law allows more functionality in the same server and workstation space, and new real estate to expand server rooms is a lot more expensive than replacing existing servers for more bang/cubic centimeter. However, is it growing by leaps and bounds? Not really.
Another big issue is that companies that are stable end up getting bought out by others that have the "growth focus". This means that a product made by a firm for 20 years and is tried and true gets replaced by something cheap and shoddy because there is no stake in that one little niche anymore, so the larger firm can cut corners there without risking the stock value all around.
I've seen this happen fairly often in the RV industry. A small firm that has some useful widget gets bought out by a larger, "growing" company, and next thing you know, the well-made, made in USA item that was made to last a lifetime now is made overseas [1] out of a cheaper metal and manufacturing process... or is turned to craptastic plastic fresh out of an injection mold. Of course, the price doesn't go down. Yes, the larger company expanded and seized a narrow market. However, other than that one company, nobody else is benefiting from this.
As described above, exponential growth isn't sustainable. What does a firm do when they reach market saturation? Get bought up by a bigger firm that is "growing"? The result of this are a few companies owning a lot of market niches.
Finally, when a recession hits, the focus on growth can turn so-so times into a death spiral. A company may not be expanding in a sour economy... but it can be holding its own. However, with the growth mentality, no new market additions can push stock values down, causing that company to collapse. The car industry comes to mind here, because the first thing that happens in a recession is that people stop buying new cars, so automakers get hit hard in the stock market when this happens.
[1]: I don't want to bash China on this one. Generally, they try to make stuff to spec, and if a company specs "cheap junk", they will deliver "cheap junk". If a company specs high quality and foots the bill for the better materials/fit/finish/manufacturing processes, it will come off the ship that way.
I don't know how cheap/expensive this would be... or if it would be possible, but maybe put this chip on canned goods or produce with some obvious "this stuff isn't fit for consumption" alert if the chip detects any toxins?
In cases like this, I wonder about just moving to a VAT entirely and dispensing with income taxes.
In a perfect world where companies paid what they earned, an income tax would be better in theory, as consumption taxes tend to slow down purchasing and movement of money.
However, in the real world, we read all the time about the stashing of income. A VAT is better because it is a lot harder to get around (as of now... I'm sure there might be loopholes.)
tl;dr... Income can be hidden. Hiding that factory, Lear Jet, or Maybach, not so much.
It depends. I have an old HP color laser that is still on its starter set of toner that I bought about a decade ago on closeout, and it still works for the occasional photograph. I've seen old HP Laserjet 4 models still continue to keep going for almost 20 years. If it has Postscript, a distinct driver isn't really needed.
Now, inkjet printers are a different story. For a while, one could buy an ink cartridge and get a low-end printer "free" with it. I expect little from a printer that costs well south of a C-note.
I think 3D printers will be similar. The cheap ones will probably have issues with melted filament. The good ones will have mechanisms to ensure that isn't an issue.
You hit the nail on the head. Sometime in the late 2000s, Archos, Creative, et. al. just stopped making HDD players [1] with a decent capacity, leaving Apple and MS as the only companies with HDD players, and then MS bowed out of the market.
The iPod Classic does have a niche that nothing else sold today even comes close to. It doesn't require being online, stores a decent amount of songs, can be used as an external hard disk, and would be difficult to hack from remote.
I'm sure its days are numbered because 128GB MicroSD cards are out and it is only a matter of time before 256 GB MicroSD cards start selling which will put the final nail in the iPod Classic's coffin. However, the device has had a very good run.
[1]: They did make "multimedia" players, but were intended for watching movies and were too large to be a decent MP3 player.
If IAP was used for basic stuff like additional levels, etc., then it wouldn't be as bad. However the nickel and diming for microtransactions makes almost all newer games not worth playing. Even the old tower defense games suffer from this, where versions of the game made before IAP was put in had items and towers that cost $5 now.
I'd rather pay $10 to $20 for a game, have all content with the package, then perhaps add expansions similar to how the RedShift's "The Quest" handled things (additional levels came as apps that you ran once and could delete once they copied the data to the main Quest program.) The microtransaction/nickel and diming is annoying and makes almost all new games not worth the bother downloading.
This does make sense, because it benefits all involved and not a single company/organization has to shoulder all the dev work. Plus, should something happen, the donors are well insulated from lawsuits.
It would be nice to see more projects along these lines. ZFS comes to mind so a drive array attached to a Linux server could be moved to a Windows box and imported without trouble in a production environment.
There are many jobs that don't need a college degree and will pay well.
First, there is always mortuary science. People die regardless of the economic cycle, and is sounds grisly, but dealing with the bereaved and handling funerals does need people.
There will always be a need for plumbers, HVAC people and electricians. There becomes more of a need come construction booms, and people leave the field when the building stops. However, a master HVAC person will find work somewhere.
Welding is important. Yes, a robotic welder is extremely precise, but it will be a while before a robot is autonomous enough to go into the field to weld a metal plate onto the side of a building or do one-off metal fab work for a project (for example, I've had a local welder fab me steel cages so that some servers don't go missing that are used by a business in a crime-prone area [1].) Right now, no robot can do that on site, yet.
As for college degrees being stable... not in this economy. Even postdocs struggle in this environment, and people consider this economy "recovered" now. So, might as well learn a trade that pays as much if not more [2], and skip the six digit student loan debt.
[1]: Ironically, this was a suggestion several years ago made on/. It has worked out well because before that, the local meth-using element would just snip any Kensington cables with bolt cutters.
[2]: Good luck getting H-1Bs for plumbers and electricians. It will take people fresh off the boat just as much time to get their master HVAC certification as someone out of high school.
If I had to give five general things a company could do, it would be similar to the following the parent stated:
1: First and foremost... separate and isolate. Finance should be isolated from everything else, with a Citrix or TS server so people working there can browse the web with the browsing well separated from critical assets. If a breach does occur, it will be limited in scope.
2: Laptop encryption is trivial. BitLocker [1] and the AD infrastructure to recovery is a must-have. Depending on level of paranoia, AD policy can be set to auto-encrypt USB drives, so a dropped thumbdrive doesn't mean a massive data breach. In fact, it would be wise to have BitLocker on all desktops as well, so repurposing of the machines is easy -- just a simple format or clean command in diskpart.exe.
3: Backups. Often overlooked, but a humble tape drive can mean the difference between a quick restore versus paying some guy out of Russia a lot of BitCoins. Disk arrays != backup because one command (blkdiscard for example) can render all backed up data gone in seconds.
4: A clear chain of command. This way, someone can't hack a VoIP connection, browbeat some lackey to get some critical access or knowledge about internal networking.
5: Active pen-testing from a guy running a script on boxes to actual blackhats using everything at their disposal including sending people on site in coveralls and fake badges to get in.
[1]: Yes, TrueCrypt is a good utility, but this is the enterprise where recoverability is as important as security.
Sometimes good security isn't a pain. Had client certificates been used more often, or just having a website ask the user to PGP/gpg sign a blob of text for logging in, passwords would be less critical.
With a client cert, almost all authentication troubles go away. However, client certs are troublesome for users to manage (have to remember the key's password as well as copy the private key to every device in advance), so it comes at a cost, although if people got as used to it as they are used to the like button, it wouldn't be that much of a speedbump.
I've wondered about more adaptation of CAC-like cards for logging in, where the card reader (or even better, access tokens that work with a USB port) is standard on all new computers. This way, a host has a list of public keys for authorized users, rather than sensitive passwords (even if stored as salted hashes.) The way malware can work would be to generate bogus signatures/decryptions with the user's access token, and that is a lot more intrusive than just slurping a password typed in.
Of course, this is a double-edged sword against anonymity, so this isn't a perfect solution. However, for SSO in a company, it might be useful.
Slashdot Mirror
What do you think of replacing the stereotypical front yard with some type of garden and some home raising of animals (chickens come to mind)? I'm nowhere near a farmer, but having the ability to have food available a few feet away seems like a wise idea, especially with food prices skyrocketing.
In a previous /. topic, it was stated that shareholders want growth above everything, and that a firm with a market niche that was profitable was considered far less attractive than one that was operating at a net loss, but was expanding into new markets and buying out other companies [1].
Amazon is playing the market quite smartly. Shareholders want growth, Amazon is giving them what they want. I wouldn't be surprised to see an Amazon MP3 player (although that market is a tired one), if it kept the shareholders thinking the company was "growth-focused".
[1]: Maybe it is a good thing long-term. Buy companies like IBM or GE that are established and have stocks paying dividends, and hold those until this "growth" fad dies off and the stocks of functioning companies becomes mainstream again.
Ada 2012, or an earlier rev? Programming languages do help, but are not a guarantee of security. I'm sure one can write a bad website or application in Ada as they can in Java, PHP, Python, or HTML5.
Why can't more companies and organizations grok this point? An Internet connection is not a must for every new revision of a toaster.
Security is about forcing the blackhats to go through time and expense. STO usually doesn't work, but with using thirty year old technology, it would require an attacker to jump through a lot of hoops just to even procure a computer that can read an 8" floppy drive, the drive itself, and the exact media used (hard-sectored or soft-sectored). Even then, there are different ways to format the disk, be it CAV or CLV, one read/write head or two.
Of course, once a usable disk is obtained, it is a lot harder to get that past security than a USB flash drive.
Nothing is 100% secure, but there are not many hacking tools made these days that can physically compromise an old System/3, or machine of similar vintage. It would take old school mainframe experience, something that wouldn't be widespread knowledge.
There is also the fact that they are used as a long term area denial measure. An organization or nation that might be losing a war or battle can mine an area, not to gain a military advantage, but to keep it from being used by another party.
Sadly, EMET isn't that often used. It really should be part of the OS and turned on by default similar to the NX protection. Then in a few OS revs, being active for all programs and not just IE, Office, and MS stuff. Other operating systems add security restrictions that are overall good for the ecosystem, but require major program changes left and right. Android's locking down of SD cards and SELinux set to enforce is one example.
I do know that XP does have support to some businesses and organizations. I wonder how long until those fixes wind up on the usual sites. IMHO, there is something ironic about having to pirate software to obtain security fixes.
Don't forget to check the Authenticode signature on the Firefox package (and check the key and CA as well...) Before anything gets installed on Windows, I check the signatures. I've been surprised, and quite glad that I've done so, as some download places "repackage" the installers for other programs and re-sign the executables... and usually there are unwanted (well, more accurately, potentially unwanted) additions.
yum -y install lynx
Whew. OK here.
That has been tried. People will just drive illegally, using a "friend"'s vehicle, or find other ways to skirt the law.
I rather have self-driving cars as a solution. This means instead of watching for the drunks/texters, I can catch a snooze or read a book on the commute. Highways could be designed without fancy on/off loops, but just as raised, 4-way intersections with each vehicle's computer timing speed so that two highways can cross without stopping.
That is a tough problem, and it affects regular cars as well. If the vehicle is aggressive, someone hits it, and sues Google for metric bum-tons of cash and there goes the self-driving car concept. If the vehicle is too passive, it might not get past a lane that ends, or even getting out on a three way intersection like a highway frontage road.
Of course, a self-driving vehicle has faster "reactions", and if it can get itself into traffic with a fast turn, it can turn a T-bone collision into a rear-ender, shifting fault to the other driver.
The tech savvy criminals will then move to another notch of security.
One example of this are self-contained apps like Divide that contain a rudimentary word processor, spreadsheet, and other tools, working on files in its space, all encrypted. Unlike Divide, the app would be decentralized, perhaps looking at incoming SMS messages for a kill signal, or even more useful, a keepalive signal. No signed text, deadman switch goes off, and the app would zero out its encryption keys.
Of course, where the real crooks lead, the herd follows, so an app that handles a lot of functions, perhaps even contacts via a Google Voice like setup, would be a best seller.
Blackberries have a nice security feature that I wish iOS and Android had:
If the device does not get a cellular signal (when it checks if it was told to erase itself), after x amount of time, it will erase itself automatically.
No other device, or app has this functionality. It sounds like paranoia, but it would come into handy, especially if there is sensitive data on the device.
I wouldn't even need to bother with a Faraday cage. I'd just pull the SIM card and call the deed done. Unless the device can get onto the Internet via an open Wi-Fi connection, pulling the SIM card will ensure it doesn't receive the kill signal as of now.
The modern shareholder item where a company must grow no matter what... and if a company is well established, but not gaining new market, it is considered a hot potato and has to be dropped... This is a self-destructive philosophy seems to be fairly recent.
I think part of the reason why Dell went private is exactly this. The desktop/server/workstation market is not growing by leaps and bounds. Is it still lucrative? By far. Companies amortize their computers every 3-5 years on taxes, Moore's law allows more functionality in the same server and workstation space, and new real estate to expand server rooms is a lot more expensive than replacing existing servers for more bang/cubic centimeter. However, is it growing by leaps and bounds? Not really.
Another big issue is that companies that are stable end up getting bought out by others that have the "growth focus". This means that a product made by a firm for 20 years and is tried and true gets replaced by something cheap and shoddy because there is no stake in that one little niche anymore, so the larger firm can cut corners there without risking the stock value all around.
I've seen this happen fairly often in the RV industry. A small firm that has some useful widget gets bought out by a larger, "growing" company, and next thing you know, the well-made, made in USA item that was made to last a lifetime now is made overseas [1] out of a cheaper metal and manufacturing process... or is turned to craptastic plastic fresh out of an injection mold. Of course, the price doesn't go down. Yes, the larger company expanded and seized a narrow market. However, other than that one company, nobody else is benefiting from this.
As described above, exponential growth isn't sustainable. What does a firm do when they reach market saturation? Get bought up by a bigger firm that is "growing"? The result of this are a few companies owning a lot of market niches.
Finally, when a recession hits, the focus on growth can turn so-so times into a death spiral. A company may not be expanding in a sour economy... but it can be holding its own. However, with the growth mentality, no new market additions can push stock values down, causing that company to collapse. The car industry comes to mind here, because the first thing that happens in a recession is that people stop buying new cars, so automakers get hit hard in the stock market when this happens.
[1]: I don't want to bash China on this one. Generally, they try to make stuff to spec, and if a company specs "cheap junk", they will deliver "cheap junk". If a company specs high quality and foots the bill for the better materials/fit/finish/manufacturing processes, it will come off the ship that way.
I don't know how cheap/expensive this would be... or if it would be possible, but maybe put this chip on canned goods or produce with some obvious "this stuff isn't fit for consumption" alert if the chip detects any toxins?
In cases like this, I wonder about just moving to a VAT entirely and dispensing with income taxes.
In a perfect world where companies paid what they earned, an income tax would be better in theory, as consumption taxes tend to slow down purchasing and movement of money.
However, in the real world, we read all the time about the stashing of income. A VAT is better because it is a lot harder to get around (as of now... I'm sure there might be loopholes.)
tl;dr... Income can be hidden. Hiding that factory, Lear Jet, or Maybach, not so much.
It depends. I have an old HP color laser that is still on its starter set of toner that I bought about a decade ago on closeout, and it still works for the occasional photograph. I've seen old HP Laserjet 4 models still continue to keep going for almost 20 years. If it has Postscript, a distinct driver isn't really needed.
Now, inkjet printers are a different story. For a while, one could buy an ink cartridge and get a low-end printer "free" with it. I expect little from a printer that costs well south of a C-note.
I think 3D printers will be similar. The cheap ones will probably have issues with melted filament. The good ones will have mechanisms to ensure that isn't an issue.
You hit the nail on the head. Sometime in the late 2000s, Archos, Creative, et. al. just stopped making HDD players [1] with a decent capacity, leaving Apple and MS as the only companies with HDD players, and then MS bowed out of the market.
The iPod Classic does have a niche that nothing else sold today even comes close to. It doesn't require being online, stores a decent amount of songs, can be used as an external hard disk, and would be difficult to hack from remote.
I'm sure its days are numbered because 128GB MicroSD cards are out and it is only a matter of time before 256 GB MicroSD cards start selling which will put the final nail in the iPod Classic's coffin. However, the device has had a very good run.
[1]: They did make "multimedia" players, but were intended for watching movies and were too large to be a decent MP3 player.
If one wants a slim "phone", there is always the HTC Mini Plus which is a Bluetooth device that pairs with your main smartphone.
If IAP was used for basic stuff like additional levels, etc., then it wouldn't be as bad. However the nickel and diming for microtransactions makes almost all newer games not worth playing. Even the old tower defense games suffer from this, where versions of the game made before IAP was put in had items and towers that cost $5 now.
I'd rather pay $10 to $20 for a game, have all content with the package, then perhaps add expansions similar to how the RedShift's "The Quest" handled things (additional levels came as apps that you ran once and could delete once they copied the data to the main Quest program.) The microtransaction/nickel and diming is annoying and makes almost all new games not worth the bother downloading.
This does make sense, because it benefits all involved and not a single company/organization has to shoulder all the dev work. Plus, should something happen, the donors are well insulated from lawsuits.
It would be nice to see more projects along these lines. ZFS comes to mind so a drive array attached to a Linux server could be moved to a Windows box and imported without trouble in a production environment.
+1
There are many jobs that don't need a college degree and will pay well.
First, there is always mortuary science. People die regardless of the economic cycle, and is sounds grisly, but dealing with the bereaved and handling funerals does need people.
There will always be a need for plumbers, HVAC people and electricians. There becomes more of a need come construction booms, and people leave the field when the building stops. However, a master HVAC person will find work somewhere.
Welding is important. Yes, a robotic welder is extremely precise, but it will be a while before a robot is autonomous enough to go into the field to weld a metal plate onto the side of a building or do one-off metal fab work for a project (for example, I've had a local welder fab me steel cages so that some servers don't go missing that are used by a business in a crime-prone area [1].) Right now, no robot can do that on site, yet.
As for college degrees being stable... not in this economy. Even postdocs struggle in this environment, and people consider this economy "recovered" now. So, might as well learn a trade that pays as much if not more [2], and skip the six digit student loan debt.
[1]: Ironically, this was a suggestion several years ago made on /. It has worked out well because before that, the local meth-using element would just snip any Kensington cables with bolt cutters.
[2]: Good luck getting H-1Bs for plumbers and electricians. It will take people fresh off the boat just as much time to get their master HVAC certification as someone out of high school.
If I had to give five general things a company could do, it would be similar to the following the parent stated:
1: First and foremost... separate and isolate. Finance should be isolated from everything else, with a Citrix or TS server so people working there can browse the web with the browsing well separated from critical assets. If a breach does occur, it will be limited in scope.
2: Laptop encryption is trivial. BitLocker [1] and the AD infrastructure to recovery is a must-have. Depending on level of paranoia, AD policy can be set to auto-encrypt USB drives, so a dropped thumbdrive doesn't mean a massive data breach. In fact, it would be wise to have BitLocker on all desktops as well, so repurposing of the machines is easy -- just a simple format or clean command in diskpart.exe.
3: Backups. Often overlooked, but a humble tape drive can mean the difference between a quick restore versus paying some guy out of Russia a lot of BitCoins. Disk arrays != backup because one command (blkdiscard for example) can render all backed up data gone in seconds.
4: A clear chain of command. This way, someone can't hack a VoIP connection, browbeat some lackey to get some critical access or knowledge about internal networking.
5: Active pen-testing from a guy running a script on boxes to actual blackhats using everything at their disposal including sending people on site in coveralls and fake badges to get in.
[1]: Yes, TrueCrypt is a good utility, but this is the enterprise where recoverability is as important as security.
Sometimes good security isn't a pain. Had client certificates been used more often, or just having a website ask the user to PGP/gpg sign a blob of text for logging in, passwords would be less critical.
With a client cert, almost all authentication troubles go away. However, client certs are troublesome for users to manage (have to remember the key's password as well as copy the private key to every device in advance), so it comes at a cost, although if people got as used to it as they are used to the like button, it wouldn't be that much of a speedbump.
I've wondered about more adaptation of CAC-like cards for logging in, where the card reader (or even better, access tokens that work with a USB port) is standard on all new computers. This way, a host has a list of public keys for authorized users, rather than sensitive passwords (even if stored as salted hashes.) The way malware can work would be to generate bogus signatures/decryptions with the user's access token, and that is a lot more intrusive than just slurping a password typed in.
Of course, this is a double-edged sword against anonymity, so this isn't a perfect solution. However, for SSO in a company, it might be useful.