Clik here to view.
Hunting Nessie
Jakob Nielson declares Portal SSO to be the Loch Ness Monster of Portal Usability (hat tip to Vikram Kumar): Single sign-on is the Loch Ness monster of the intranet world: People hear about it and even...
View ArticleClik here to view.
Living dangerously
Google has apparently had a serious flaw in its implementation of “SAML” (quotes intentional) that has just been closed. Kim Cameron takes Google to the woodshed: This is all pretty depressing but it...
View ArticleClik here to view.
An OpenID game changer
One theme I have harped over the last year of so is that it means little for the big content providers to become OpenID providers if they don’t also become relying parties. You can’t build a highway...
View ArticleClik here to view.
Friends don’t let friends do crypto
Jeff Atwood has this post about the dangers of copying code from the internet and writing your own crypto routines. He includes this very funny play from Thomas Ptacek about writing crypto which also...
View ArticleClik here to view.
Flashers
It looks like Flash cookies, which are really old news, are back in the news (via Bruce Schneier). This form cookie is particularly insidious because it does not honor the cookie policies of your...
View ArticleClik here to view.
Stealing the keys to the kingdom
There are some interesting tidbits coming out about the Chinese hack of Google. Apparently the source code to Google’s SSO technology was a target (although this is misstated in the headline as a...
View Article
