Posted By: scobleizer | Jul 6th, 2005 @ 5:38 PM | 65,166 Views | 15 Comments
Kim Cameron has caused quite a stir with his Identity Blog. He came out with a whitepaper called "the Laws of Identity" which has caused quite a bit of conversation.

So, we went over and talked about, what else, identity online. It's important for developers (and companies) to think about.
Media Downloads:
Rating:
0
0
Hey Robert - Could you interview someone at MS working on code to make this stuff happen?

Thanks for the tip on the phone!  Is that the fourth time you've had it on camera?
Charles
Charles
Welcome Change
It was fun talking with Vim. Reliable Identity. Now that's u hard problem!
Maurits
Maurits
AKA Matthew van Eerde
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ah... identity confirmed...

-----BEGIN PGP SIGNATURE-----
Comment: pub key http://matthew.vaneerde.com/pgp-public-key.asc

iD8DBQFCzLbfUQQr0VWaglwRAssXAKCtMLQ2XEioQzbG1ihRiZbJx/qwgACg3GTf
tlWlW5dfc3/QiduD3jyaLH0=
=N3cQ
-----END PGP SIGNATURE-----

Passport isn't used outside of Microsoft because it was too expensive, and difficult to develop with.

I really wanted to use it, but these two problems stopped me.

rasx
rasx
Programmer/Analyst III, Emperor of String.Empty
Here's a comment for the old school sages in the audience and I mean old school---and I mean sage: The ideals of Kim Cameron will never be acheived as long as egocentric, imperial consciousness is regarded as a 'legitimate' form of human expression. The Kafka thang is irresistible to the imperial mind. It is not about the neo-(I need to watch my language) thing (that is just a homicidal work of art). It is about the neo-stasi thing... For you "normal," "regular" people in the audience. This whole post is silly. You guys keep it real... But I will try anyway: when you call yourself a "regular" person that means you are a regulated and predictable person---you are civilized instead of heroic. This is exactly what any mass market company wants. To easily predict earnings for shareholders, you need to predict the behavior of your customers. Such power of prediction is irresistible. So ya'll keep it real.
alexbarn
alexbarn
alexbarn_on_right
I really enjoyed this.

rasx - I have absolutely no idea what you are talking about.
moofish
moofish
Living in Scotland, UK
I liked this guy, even though he seemed to be some kind of indipendent thinker within a company that makes over $100m a day. We all know how MS does that too, so how far can this guy really get with the ethos that the user really is in control.

If markets at present can be bent to the will of say Wallmart and their RF-ID stratergy then won't the old ideas of 'well get you along with everyone else' prevail anyway?

I see that this guy is preparred to go for at least 10 years into the project, and only to get the stone rolling. Well I hope something materialises before then, but what? And how will this ID concept compare to what is going to be in Longhorn?
John Melville-- MD
John Melville-- MD
Equality Through Technology
Just a question on a point on the video:

You said I can eventually "be the same person" on my
Xp box, my phone, my linux box, my electronic underwear, etc.

Computer identity at its core has to do with posessing a secret.  I have a key that nobody else has.  The details are just in what do I have to do to prove to you that I actually have the key, and who knows that its my key, and how do they know.

In order to be "me" on two devices I either have to have the same secret key on two devices or I have to convince you that two separate keys are really the same person.  so you have two choices 1) Have some protocool to transfer my identity to another, arbitrary device, or 2 have some way to say that the same me has two keys.  (I don't thank that manually entering a 512 bit identity key is something my grandma could do.)

It seems like either of these two possibilities is just rife with social engineering potential if not technical attacks.

I know a lot of people have thought about this a lot more than me.  Are there easy answers?  what is the current best ideas?
Maurits
Maurits
AKA Matthew van Eerde
John Melville, MD wrote:
some way to say that the same me has two keys.


Write the sentence "I am John Melville, MD" and sign it with both keys.  Extensible to n keys.  Post all signatories on your blog or other public presence point.
Microsoft Communities