OpenID 2 has that, although it still depends on your "identity URL" being available. You list what OpenID providers you want to auth against and which order to test them in.
Why can't it resolve the right place to conduct authentication business via DNS the same way SMTP gets it's MX record based on everything after the @domain.com?
Because for the average person, it's a lot easier to set up a blog than it is to get their ISP to set up custom DNS records.
Then they need to boot out any fool who things the "login" should be anything other then an email address. Whoever dreamed up using a URL for a login wanted the spec to fail.
Excellent point. OpenID 3.0 should include provisions for carrying out the authentication via SMTP, and maybe BitTorrent or NNTP.
Meanwhile, in reality, you know that ultimately the URL is the location of your OpenID server, right?
I would change the nexus from some server-in-the-sky to your PC storing/providing authentication. I know that's crazy-talk, being responsible for your own identity and everything.
That's a great idea! I think you should call it OpenID.
I've been using SimpleID for a personal OpenID provider, but it seems to have problems with a lot of popular OpenID consumers like Plaxo and even Sourceforge itself (or more properly, they have problems with it, like ".failed to check_authentication(): failed to verify response"). I'd like the idea of a multi-user provider so that my wife can use it to. Any suggestions?
OK, so OpenID doesn't solve that particular problem, but it helps the common case where users have the same password for every site. That's still a net gain.
True, but you should also be able to run a popular web application on something less hardened than an OpenBSD server configured by a paranoid schizophrenic.
osx, and linux and most all other operating systems that I've used will not swap memory until the machine is completely out of ram, and are noticeably faster in this area.
On my FreeBSD desktop with 6GB of RAM, I'm 200MB into swap with about 4GB of RAM free. During idle times, it proactively copies data to swap so that if a sudden demand arrives it can release lots of RAM without paging out at that moment. That's a far cry from needing to swap, though.
Although I like that I can just type 'apt-get install whatever' or equivalent, they do seem to exist primarily to fill the void left by the lack of standardized, binary installers for Linux.
I disagree. I think their primary mission is to provide one-stop shopping for software that's been tested to play nicely together. There's nothing stopping you today from downloading your own software to install, but you can't expect it to use the OS-standard startup scripts or to automatically support an uncommon feature that your distro happens to like.
This is one place where Apple really does it a lot better: Executables come in nice little packages that contain their own filesystems.
This has one fairly significant drawback: each app brings along every dynamic library it needs. If AppA ships with a newer version of libfoo than AppB, then AppB is unable to use it. If libfoo is found to have a security hole, then you need new copies of AppA and AppB, rather than just upgrading libfoo. It also means that you get multiple copies of libfoo in memory instead of just one single shared version.
To me, that says you're used to using crappy operating systems. Each version of FreeBSD is faster than the one before it because of things like improved schedulers, better memory allocators and more fine-grained SMP locking. If you expect new OS releases to be slower than its predecessor, then you need to start demanding more from your vendor. Seriously, this "newer is slower" meme is stupidly niche and not at all universally true.
Partnering with Microsoft is like becoming a Wal-Mart vendor. The up-front profits look pretty good, but you know they'll bankrupt you in the long run.
Sell comes a cross Crist's computer, and he hands over the computer to his friend Hipple who he knows is looking for a computer.
So, Crist's old laptop came to have child porn on it some time when it was possessed by Crist, Sell, or Hipple. Has anyone thought to question Sell?
While I have no sympathy whatsoever for child abusers of any stripe, I'm a lot more interested in the rule of law being preserved than I am in discarding the rules to catch one man.
Honestly, I'd have to question the humanity of someone who is NOT outraged by any crime against a child, and least we can understand now that, that, given the active choice to let child molestors walk, that, all this other so-called liberal talk about children is a lie.
I agree completely, but with the caveat that due process trumps every other concern. We can't protect children - or anyone/anything else - unless we ensure fair trials for everyone. This guy is probably a creep who should be taken out back and beat down, but we don't know that, largely because the prosecution screwed up while gathering evidence. And since tainted evidence is the same as no evidence, we can't prove that he actually did anything.
If you want to get angry, aim at the police and prosecutors who messed this up.
Or maybe - just maybe! - we don't like Bush but don't give him credit for micromanaging every aspect of the economy. Remember, this was the guy portrayed for eight years as a drunk failure of an ex-frat boy, but now he's able to manipulate the price of crude oil? You can't have it both ways.
OK, I've heard people mentioning messaging and middleware, but what is this exactly? Why would I want to use this instead of XMLRPC or SOAP or something else?
For another, there is no way for your boss to verify that the ballot you took a picture of is the one you actually voted with because you can always get a new paper ballot and if you are taking a picture of the computer screen, you can always go back and change it too.
The same is true for "proving" that the machine changed your vote, hence making photographs useless for all cases.
My god, I paid my mortgage online the other week, and yes, I trusted not only that my payment would get there, but that it would be right amount, that it wouldn't be eavesdropped on, that an confirmation number would be enough to defend myself if the bank claims never to have recieved it.
Now add "must be 100% untraceably anonymous" as a fundamental requirement.
Slashdot Mirror
OpenID 2 has that, although it still depends on your "identity URL" being available. You list what OpenID providers you want to auth against and which order to test them in.
Why can't it resolve the right place to conduct authentication business via DNS the same way SMTP gets it's MX record based on everything after the @domain.com?
Because for the average person, it's a lot easier to set up a blog than it is to get their ISP to set up custom DNS records.
Then they need to boot out any fool who things the "login" should be anything other then an email address. Whoever dreamed up using a URL for a login wanted the spec to fail.
Excellent point. OpenID 3.0 should include provisions for carrying out the authentication via SMTP, and maybe BitTorrent or NNTP.
Meanwhile, in reality, you know that ultimately the URL is the location of your OpenID server, right?
I would change the nexus from some server-in-the-sky to your PC storing/providing authentication. I know that's crazy-talk, being responsible for your own identity and everything.
That's a great idea! I think you should call it OpenID.
I've been using SimpleID for a personal OpenID provider, but it seems to have problems with a lot of popular OpenID consumers like Plaxo and even Sourceforge itself (or more properly, they have problems with it, like ".failed to check_authentication(): failed to verify response"). I'd like the idea of a multi-user provider so that my wife can use it to. Any suggestions?
So host your own OpenID provider with pictures of your kids or something. If you don't see pictures of your kids, then it's the wrong site.
OK, so OpenID doesn't solve that particular problem, but it helps the common case where users have the same password for every site. That's still a net gain.
Or heck, someone simply gets hold of your master password.
How would they do that since you never give it out to anyone?
isn't this a major single point of failure issue or have I missed something?
Possibly, until you change your master password (or SSL cert or Kerberos key or whatever) and every website you use is instantaneously updated.
you really should configure your apache better.
True, but you should also be able to run a popular web application on something less hardened than an OpenBSD server configured by a paranoid schizophrenic.
osx, and linux and most all other operating systems that I've used will not swap memory until the machine is completely out of ram, and are noticeably faster in this area.
On my FreeBSD desktop with 6GB of RAM, I'm 200MB into swap with about 4GB of RAM free. During idle times, it proactively copies data to swap so that if a sudden demand arrives it can release lots of RAM without paging out at that moment. That's a far cry from needing to swap, though.
Although I like that I can just type 'apt-get install whatever' or equivalent, they do seem to exist primarily to fill the void left by the lack of standardized, binary installers for Linux.
I disagree. I think their primary mission is to provide one-stop shopping for software that's been tested to play nicely together. There's nothing stopping you today from downloading your own software to install, but you can't expect it to use the OS-standard startup scripts or to automatically support an uncommon feature that your distro happens to like.
This is one place where Apple really does it a lot better: Executables come in nice little packages that contain their own filesystems.
This has one fairly significant drawback: each app brings along every dynamic library it needs. If AppA ships with a newer version of libfoo than AppB, then AppB is unable to use it. If libfoo is found to have a security hole, then you need new copies of AppA and AppB, rather than just upgrading libfoo. It also means that you get multiple copies of libfoo in memory instead of just one single shared version.
Do they have virtual desktops that actually work yet?
They've spent two decades training users to limp through a half-assed single-screen window manager. Do you think they're likely to change that now?
To me, that says you're used to using crappy operating systems. Each version of FreeBSD is faster than the one before it because of things like improved schedulers, better memory allocators and more fine-grained SMP locking. If you expect new OS releases to be slower than its predecessor, then you need to start demanding more from your vendor. Seriously, this "newer is slower" meme is stupidly niche and not at all universally true.
Partnering with Microsoft is like becoming a Wal-Mart vendor. The up-front profits look pretty good, but you know they'll bankrupt you in the long run.
If they wanted their writings available for free, then why would they bother to publish in the first place?
...says the man publishing his writings to Slashdot for free.
Sell comes a cross Crist's computer, and he hands over the computer to his friend Hipple who he knows is looking for a computer.
So, Crist's old laptop came to have child porn on it some time when it was possessed by Crist, Sell, or Hipple. Has anyone thought to question Sell?
While I have no sympathy whatsoever for child abusers of any stripe, I'm a lot more interested in the rule of law being preserved than I am in discarding the rules to catch one man.
Honestly, I'd have to question the humanity of someone who is NOT outraged by any crime against a child, and least we can understand now that, that, given the active choice to let child molestors walk, that, all this other so-called liberal talk about children is a lie.
I agree completely, but with the caveat that due process trumps every other concern. We can't protect children - or anyone/anything else - unless we ensure fair trials for everyone. This guy is probably a creep who should be taken out back and beat down, but we don't know that, largely because the prosecution screwed up while gathering evidence. And since tainted evidence is the same as no evidence, we can't prove that he actually did anything.
If you want to get angry, aim at the police and prosecutors who messed this up.
Or maybe - just maybe! - we don't like Bush but don't give him credit for micromanaging every aspect of the economy. Remember, this was the guy portrayed for eight years as a drunk failure of an ex-frat boy, but now he's able to manipulate the price of crude oil? You can't have it both ways.
Not at all. Thank you (and everyone else!) for a good primer on the subject.
Congratulations on being reelected dispite being a convicted felon. I hope you enjoy serving your remaining term in PMITA Federal Prsion.
You know, that's a nickname for the Senate that I hadn't heard before, but I really can't find fault with it.
OK, I've heard people mentioning messaging and middleware, but what is this exactly? Why would I want to use this instead of XMLRPC or SOAP or something else?
For another, there is no way for your boss to verify that the ballot you took a picture of is the one you actually voted with because you can always get a new paper ballot and if you are taking a picture of the computer screen, you can always go back and change it too.
The same is true for "proving" that the machine changed your vote, hence making photographs useless for all cases.
My god, I paid my mortgage online the other week, and yes, I trusted not only that my payment would get there, but that it would be right amount, that it wouldn't be eavesdropped on, that an confirmation number would be enough to defend myself if the bank claims never to have recieved it.
Now add "must be 100% untraceably anonymous" as a fundamental requirement.
Is it illegal for someone to take a cellphone into the booth and record this happening?
I hope so, because I don't want my boss or union steward to have me take a picture of my ballot so he can check it for mistakes.
What contract? Care to point me to the "TOS" header in HTTP that asserts that you've agreed to it?