Linked by Thom Holwerda on Sat 26th May 2007 20:15 UTC, submitted by Punktyras
Microsoft Microsoft is launching a slew of initiatives to help Web sites identify visitors. First, the company is kicking off four open-source projects to support the development of ID cards for online users. Microsoft is also releasing one of its identity management specs, Identity Selector Interoperability Profile, under its OSP, meaning the specification is clear of licensing fees or patent worries.
Order by: Score:
OpenID?
by miketech on Sat 26th May 2007 20:41 UTC
miketech
Member since:
2005-07-21

Why not supporting OpenID? Why do we need so many different ID systems? If Microsoft chooses an open system, then OpenID could be an alternative.

Greetings

Mike

Reply Score: 5

RE: OpenID?
by miguel on Sat 26th May 2007 20:54 UTC in reply to "OpenID?"
miguel Member since:
2005-07-27

Microsoft announced that they will also support OpenID. Google finds a few articles about it from the last couple of months.

Reply Score: 4

RE[2]: OpenID?
by Beta on Sun 27th May 2007 11:16 UTC in reply to "RE: OpenID?"
Beta Member since:
2005-07-06

I find it interesting that they announced they would support OpenID months back, yet haven't produced anything so far but PR.
... and as time goes on, still nothing.

I'm to understand they might be adding support to .Net, but you'd know all about that, wouldn't you Miguel ?

It'd help if they officially joined the OpenID mailing lists and contributed, but they wont.

Reply Score: 2

RE: OpenID?
by flanque on Sun 27th May 2007 00:01 UTC in reply to "OpenID?"
flanque Member since:
2005-12-15

It's called choice.

Reply Score: 5

Java and Ruby?
by sukru on Sat 26th May 2007 21:03 UTC
sukru
Member since:
2006-11-19

It's really an unexpected move from Microsoft.

However what puzzles me most is the software is in Java and Ruby supporting Active Directory and OpenLDAP.

What I would've expected would be C# and Python (for which they already have a complete version in .Net) supporting FedoraDS and ApacheDS (which have much better structured core / plugin functionality).

Anyways it's unexpected but a good move, and cheers to Microsoft for BSD license instead of shared source (GPL would be fine too). I hope they continue supporting open standards.

Edited 2007-05-26 21:07

Reply Score: 4

RE: Java and Ruby?
by bn-7bc on Sun 27th May 2007 12:17 UTC in reply to "Java and Ruby?"
bn-7bc Member since:
2005-09-04

Am I missing something here?
IIRC Both FedoraDS and ApacheDS are LDAP compliant, so as slong as jyo suport LDAP and can parse the results there realy should be no need to support the individual serbers, right?

Disclaimer: I´m not a software developer so please correct me if I´m wrong

Reply Score: 2

RE[2]: Java and Ruby?
by jayson.knight on Sun 27th May 2007 17:13 UTC in reply to "RE: Java and Ruby?"
jayson.knight Member since:
2005-07-06

In theory you are correct, but vendors usually add tweaks/platform specific additions/changes though I don't know if FDS/ADS do.

.Net already has support for LDAP, and there are quite a few 3rd party libraries that add support for their versions of an LDAP provider.

LDAP is kind of ODBC...all the major DB vendors support ODBC, but you don't get the true performance/benefits unless you use the native provider (such as SQL OLEDB for MSSQL).

Reply Score: 2

deja vu
by antik on Sat 26th May 2007 21:23 UTC
antik
Member since:
2006-05-19

This projects reminds me existing ID-Card technology prooved itself in Estonia for couple of years already. http://www.id.ee/?lang=en

Reply Score: 2

Microsoft
by osgeek on Sat 26th May 2007 23:41 UTC
osgeek
Member since:
2006-12-23

might come to know the virtues of open source software development by the end of these projects.

http://osgeek.blogspot.com

Reply Score: 1

At It Again
by segedunum on Sun 27th May 2007 00:45 UTC
segedunum
Member since:
2005-07-06

I have to hand it to them, they don't give up and change their tac. After the failures of Hailstorm and Passport over the years, they keep on trying.

Reply Score: 5

Huh...
by Almafeta on Sun 27th May 2007 02:00 UTC
Almafeta
Member since:
2007-02-22

Open-sourcing the method that our privacy is assured is somewhat like posting the security layout of a bank on the front door in order to see how to make it more impervious to thieves.

This may be lauded by some, but for myself, I won't be using any site that uses that technology.

I wonder how far they plan on taking this new 'customer-centric interoperability across platform' system?

Reply Score: 1

RE: Huh...
by Redeeman on Sun 27th May 2007 02:23 UTC in reply to "Huh..."
Redeeman Member since:
2006-03-23

Oh, so now because everyone can help find design flaws, its insecure?

newsflash: because everyone can know how it works, doesent make it insecure.

Or do you volunteer to crack any of my communication done securely using GnuPG? you may have the gnupg source!

Reply Score: 5

RE: Huh...
by dtiziani on Sun 27th May 2007 03:01 UTC in reply to "Huh..."
dtiziani Member since:
2005-07-13

-noc noc
-who's there?
- it's mister SECURITY THROUGH OBSCURITY DOESN'T WORK!

http://en.wikipedia.org/wiki/Security_through_obscurity

Reply Score: 5

RE: Huh...
by jessta on Sun 27th May 2007 09:34 UTC in reply to "Huh..."
jessta Member since:
2005-08-17

lol,
I've got a security system for you to buy.
It's the best security in the world.
I can't tell you how it works, or what it actually does because that would make it less secure.

Since I'm the only one that knows how it works, you'll be secure from everyone except me.
But don't worry I'm pretty trustworthy.

Reply Score: 5

RE: Huh...
by mcduck on Sun 27th May 2007 13:52 UTC in reply to "Huh..."
mcduck Member since:
2005-11-23

What amazes me is that he is getting modded down (-3 atm).

Allow me to list the valid reasons for modding somebody down;

"Yes, this comment includes personal attacks/offensive language
Yes, this comment is off-topic
Yes, this comment is spam or includes advertisements"

No matches there.

Now, please stop modding down just becuse you dont agree with their opinion.

Edited 2007-05-27 13:53

Reply Score: 2

RE[2]: Huh...
by John Nilsson on Sun 27th May 2007 19:28 UTC in reply to "RE: Huh..."
John Nilsson Member since:
2005-07-06

OT:

Maybe there should be two scores. One for quality and one for support. That way you could vote -1 for support without affecting the quality rating.

Reply Score: 2

RE: Huh...
by Soulbender on Mon 28th May 2007 04:34 UTC in reply to "Huh..."
Soulbender Member since:
2005-08-18

"This may be lauded by some, but for myself, I won't be using any site that uses that technology. "

You better not be using any secure sites then since SSL/TLS is an open standard and that must mean it can't be secure.

Reply Score: 2

RE: Huh...
by bailey86 on Wed 30th May 2007 08:51 UTC in reply to "Huh..."
bailey86 Member since:
2005-10-14

There are some excellent books - The Code Book by Simon Singh for one - which explains how public key security works. It's a bit of a technical subject but basically security has nothing to do with keeping the technology hidden - just your private key.

Reply Score: 1

Is this for real?
by Drift3r on Sun 27th May 2007 13:21 UTC
Drift3r
Member since:
2006-03-26

Is this truly open source or their bastardized version called managed source?

Reply Score: 1

Oh NO, not again!!!!
by jlt2007 on Sun 27th May 2007 20:29 UTC
jlt2007
Member since:
2006-06-10

What's next?????
Isn't this just another attempt to check your OS for a valid registration key? And to scan your system for DRM violations?

If this is another attempt to jamb something down my throat, I don't want it, I don't play that game......

I do accept necessary legitimate cookies from shopping sites and financial sites to facilitate transactions.

Assuming this is voluntary, and that this is a legitimate attempt at security, to positively identify a user, like coders/academics logging on to sites for computer activities or typical users doing financial transactions, why can't a special type of SUPER COOKIE be developed that contains the computers MAC address, the machine CPU ID, and a users private PHP encription key be enough to uniquely and sufficiently identify an individual on a particular machine?

What's next ....... Finger print scanners, retina scanners, DNA checkers????

Better read this fast folks, I always get modded down??

JLT

Reply Score: 1