Identity Woman
Independent Advocate for the Rights and Dignity of our Digital Selves
I just met Alex Jacobs this morning. He told me within hours his new protocol for identity would be live within hours. It is now live.
It uses e-mail addresses (like so many sites) but users only have to authenticate their e-amil once.
How it works
1. User give you their email address e.g. john@example.com.
2. You post the email address, requested data, and a secret confirmation URL to the users mail domain e.g. in python: (see there site)
I just got into San Diego for eTech. I am in a very enjoyable tutorial by the Adaptive Path guys on Designing Web 2.0 applications.
The prime insight is that they are both informational hypertext systems and applications with a software interface. One must look at this duality throughout the development of the site on the stack from the must abstract – Strategy through Scope, structure, skeleton, surface – the most concrete.
I also got my 10th Sxip lanyard I have taken the liberty to do a Mashup adding the other Identity 2.0 protocols – OpenID, LID, inames, Yadis and front and center ID Gang. I took a photo you can see here.
We have new iname postcards promoting the developer portal that was launched today – content will be improving as the community contributes more.
Oh yes and as if that was not enough – we get to Sxip into our rooms – here is Phil with his Sxip Key. Maybe it is ‘sign’ that Sxip will work with infocards – they just did an STS exchange to issue us all hotel room keys. – this is of course an allusion to the presentation that Andre of Ping did at Digital Identity World last year where he went through the whole process of checking into the hotel and doing STS’s in analogue space.
Glenda Turner who is at the DoD and Network and Information Integration / Chief Information Officer of the Office of Assistant Secretary of Defense.
I had heard about ‘the killer brief culture’ of the pentagon and DoD. Most particularly from Thomas Barnett. This presentation was just so indicative of it. IT was a hodge-podge of different slides from different peoples ‘killer briefs’.
They are highlighted here on Flickr
Number 1
Number 2
Number 3
Here is what I wrote down while she talked.
Network centric operations and warfare – Peacefair. “the next 15 years” how DoD is thinking and what is in progress to position information assurance.
There are:
It is big business:
BIG
Difference industrial space and hostile environments.
Platforms:
Netcentricity this is a set of behaviour and how we conduct business
The quality of information and horizon…how far in the net you can see…
Make information avaliable on the network that people depend on and trust populate the network with new dynamic sources of informaiton
deny enemy advanatages and exploit weakness…
Sensor and Shooter + Command and control
Every sensor talks to every sensor…avaliable to all guns… put stress on net and information assurance.
We have been in the static mindest of control we are moving to dynamic mindset of enabling.
Global information environment is managed as a whole and develed.
Identity and access management are big topics here…
Entities dynamically discover adn freely interact with each other. They seamlessly acess everything they needs and concentrate ‘entities’ are a single device or person. Push envelope on identity and demands on this space for the global informaiton grid. Entities dynamically discover one another and interact. Set of objects and transactions. Information Assurance must get down to both level. Risk Adaptive – Dynamic Policy. Enforce confidentiality – through network boundaries. Manage by role or policy.
Aircraft carrier – 23 major networks. most driven by separation. We must
change the way we provision IT.
Capabilities based planning – enterprise IT portfolio Management.
Natioanl security strategy. USCOD 44 DoD Directive 8110.1
Enterprise IT. Investment management…
[my comment – Barfy graphics]. We buy information assurance.
Evaluation and prefformance management and outcomes based measurement…. this is going to be a huge growth area.
How do you judge different ways.
Informatoin Assurance becomes Information Technology.
Netcentric architechure – and war reference model.
Information assurance. SOA. Conforming to same rules everything else conforming to.
Dana Boyde is working on her PhD at at UC Berkeley. She is about to move to LA to do field research with youth. I read her blog regularly and a lot of what is happening is that youth, there use of technology and exploration of identity. I wanted to share this highlight from her post yesturday and if you are interested in these things you might want to subscribe to her blog.
I am currently more interested in understanding the theoretical and historical underpinnings of youth and identity. That said, what i am doing is not removed from social software. Most youth today use social technologies as part of their coming of age processes. They have far richer social lives than most adults. What they are doing with technology is far more complex. Furthermore, they are really focused on the act of socializing, not collaboration or any other work-centric model. Youth have a lot to teach us about social software – about its strengths, weaknesses and where innovation should go. Obviously, i’m biased – this is the root of how my research is applicable to technologists.
I hope those of you building technology will enjoy my journey to the depths of youth. I certainly am. If not, i’m sorry.
I have been reading Sherry Turkles book Life on the Screen: Identity in the Age of the Internet. The ironic thing is that it was written in 1995 before the Web really took off and became mainstream. I am going to finish it over my retreat. So far she has gotten me to reflect on the nature of our relationship to machines and how children growing up relate to machines. She has been studying their interaction with them over several decades and in different cultural contexts. I am reminded her work when reading Internet 2.0: the economic, social and cultural consequences of the new Internet
There are 4 levels to this model.
Disintermediation, Long Tail – which are concepts in wide circulation already. When it gets interesting is around Reformation and Continuous Presence.
The Internet is a reformation machine. It will create new fundamentals of and for our world. It change the units of analysis and the relationships between them
I think it does a good job of articulating the challenge to the ‘shape’ of our cultural dynamic.
The reformation model says fundamental categories of our culture (particularly the self and the group and the terms with which we think about them) are changing…. This is a change in the basic terms of reference, the very internal blue print with which we understand and construct the world.
Continuous Presence
One way to assess innovations is to make a guess about where we are headed. I think our economic, social and cultural destination might be this: we will be continuously connected to all knowledge and all people with a minimum of friction, and priviledge will be measured, in part, by how good are the filters with which we make contact with all but only the people and knowledge we care about.
The lawyers have learnt their lesson now…When the next disruptive communications technology – the next worldwide web – is thought up, the lawyers and the logic of control will be much more evident. That is not a happy thought.
From Slashdot. More from the article it refers to
Why is the web unlikely? Prepare for a moment of geek-speak. For most of us, the web is reached by generalÂpurpose computers that use open protocols – standards and languages that are owned by no one – to communicate with a network (there is no central point from which all data comes) whose mechanisms for transferring data are also open.
Takeaways – Open and Free.
Condi Returns to D.C. After Bloggers and ‘Post’ Expose Vacation
This story is an interesting one because it shows what a citizenry empowered with almost omni-present communication tools can do to share information and build a coherent picture of one person’s movement over time creating the participatory panopticon. I wonder how much citizen surveillance of government officials and their actions will become the norm. Here is the original Gawker page – where all the intelligence was gathered.
Hopefully as CatherineAustinFitts has said again and again..
Our democracy depends on honest leaders who promote transparency and accountability in the management of our resources. How do we protect such leaders from being terrorized by corrupt special interests that play dirty?
The only way is with real accountability of the action of government officials and transparency of where money and rescues flow.
Just in case Condi was wondering if her help would be needed. This disaster is WAS NOT UNPREDICTABLE – in-fact it was anticipated and she would likely be needed in her role as secretary of state to get help from other countries.
On Thursday, September 1 on Good Morning America George W. Bush said, “I don’t think anyone anticipated the breach of the levees.†This is a flat, baldfaced lie. In early 2001 the Federal Emergency Management Agency (FEMA) identified the three most likely megadisasters that would strain the country’s ability to respond: a terrorist attack in New York City, an earthquake in Southern California, and a hurricane hitting New Orleans. The levees in New Orleans have been breached before. The Mississippi River flood of 1927 did so. Every disaster planning exercise involving New Orleans has assumed that part of the tragedy would be breached levees, a flooded city, and human beings trapped with no food, water, or sanitary facilities. A few minutes of searching the Internet will turn up literally dozens of studies showing that a hurricane of category 3 or more hitting the lower Mississippi would breach the flood protection levees. Breached levees were no surprise and to say that they were is a lie
Ms. Rice should have been on the phone to countries who’s help we could well use not to cope with the situation faced by the south. This references the letter from my last post.
The Mississippi Delta region is the natural ecological home of a long list of infectious microbial diseases. It is America’s tropical region, more akin ecologically to Haiti or parts of Africa than to Boston or Los Angeles. The most massive Yellow Fever epidemics in the Americas all swept, in the 19th Century, up the Mississippi from the delta region.
It is perhaps ironic that the only real experience with this scale of insect control for the last two decades has been in developing countries: the CDC and State health folks should be reaching out to PAHO and the insect control expertises of Africa and the Caribbean right now. If we cannot manage to get ahead of the insects, there could very well be a disease crisis ahead.
Can open sourceintelligence and societal information sharing help us as a society get around the need to have ‘government officials’ who are responsible but instead give us the power collectively organize ourselves.
The first day of OSCON05 was great.
I had a meeting with a potential client for Integrative Activism in the morning went to downtown and picked up more business cards and headed to the Airport.
I had an identity ‘incident’ after making it through security. I went to add minutes to my phone and some how got popped out to a personal operated. She REQUIRED the last four digits of my SSN so they could ‘verify’ my identity by pulling information for the cloud to determine I am me. They would have the service that does this call me within the hour to ask me questions. This happened the last time I went to put money on this phone. It is quite disconcerting. Luckly this time I canceled the order and managed to make it through just ‘touch’ tone and get it minuets on my phone.
I took a cab from the airport to Drupal Con and make a great short presentation about i-names It was a big moment- I got to show it really working with the Identity Commons News Blog and Planetwork. I also showed my Integrative Activism’s first CS/Drupal – for spiritual activist leaders. I also showed them some of the most graphically stunning Drupal sites ever build byCivicActions – Open Network.TV and Shift in Action for IONS.
Then I headed over to the Flocking Party. Flock is a new Mozilla based social web browser. Hopefully the identity stuff we have been working on is applicable.
Technorati Tags: Billing, community, drupal, Drupal, Flock, identity, IdentityIncident, IntegrativeActivism, Mozilla, OSCON05, Party, Demo, puppy
I recently got an e-mail with this at the bottom – a low tech way to assert privacy and ownership. This email is: [ ] blogable [ ] ask first [X] private
Jerry Michalskiis going to be doing an experiment tomorrow – Monday night at the Hillside club.
At this Fireside Meeting, Jerry will blend a performance piece that involves the audience and a piece of concept-mapping software called TheBrain with a thesis he’s developing that will either have you grinning enthusiastically or throwing spoiled vegetables. It’s an experiment, and whoever shows up will help shape it.
This is an interesting fact I didn’t know Marc Finnern posted on the Future Salon.
At AlwaysOn a week ago I talked to Doc Searls and he told me that the original idea for the Cluetrain Manifesto was born 10 years ago at one of Jerry’s retreats. There are many events in the Bay Area, but this one you shouldn’t miss.
As a forward looking thinker Jerry has a lot of good things to say about identity and we often chat about the field. I am looking forward to going to the next (my first) “Jerry’s retreat.” Hopefully he can come to the Identity Event in Berkeley in October details to follow this week.
This article was Slashdotted…
Tourists visiting Disney theme parks in Central Florida must now provide their index and middle fingers to be scanned before entering the front gates.
The scans were formerly for season pass holders but now everyone must provide their fingers, Local 6 News reported. They have reportedly been phased in for all ticket holders during the past six months, according to a report.
I think it’s a step in the wrong direction,” Civil Liberties Union spokesman George Crossley said. “I think it is a step toward collection personal information on people regardless of what Disney says.
I think this is self explanatory in terms of why it is concerning. It seems to goes along with what is now happening with FastTrack passes (automatic toll readers) that I heard about last night at the Hillside Club CyberSalon where Esther Dyson was speaking. I googled the phenomena and here are some excerpts of what I found.
In New York State, readers have been multiplying ever since September 1997, when the New York Police Department (NYPD) used E-Z Pass toll records to locate and track the movements of a car owned by Nelson G. Gross, a New Jersey millionaire who had been abducted and murdered. The NYPD had neither a subpoena nor a warrant to obtain those records; the police simply asked the Metropolitan Transportation Authority (MTA), and the MTA complied. This set a very bad precedent. Though Gross wasn’t alive to complain about it, his privacy had been violated. Access to those toll records also permitted access to all sorts of sensitive information, including his billing address, his credit card number, his license plate number and his Social Security number.
In February 1998, the MTA announced that — near the Tappan Zee Bridge (the site of the first reader in New York State, installed in 1993) — it had just concluded a successful “experiment” with readers that could detect and extract information from transponders even though the cars to which they were attached didn’t slow down. These “high-speed readers” were only three-feet tall and could be placed just about anywhere. As a result, they permitted the ETC system to do something it was never intended to do: namely, collect truly huge amounts of information about such non-toll related phenomena as traffic flows, speeds, densities and delays (all of which, incidentally, can be videotaped by either flow monitoring or security cameras that have been automatically activated by the readers).
Since then, high-speed readers have been installed along a great many State-owned roads and highways; they’ve also been installed atop many residential buildings in New York City.
Dick – had a 580 slide deck done Lessig Style
This is a summary of his talk:
We found out about Dick’s Identity
We learned a about what Identity is
What I say about me
What other say about me (others trust this)
So,
identity=reputaiton
What others say about you
We learned about Identity Transactions:
Verbal in person (with visual cues)
Talk on phone (loss of visual cues)
Job Application (fill out form)
We learned about data verification using drivers licenses in the real world and how the process reduces Identity Friction.
Identity Transactions are Asymmetrical
There is separation of the acquisition and presentation of credential
The credential is reusable
Trust is social
What is digital identity?
Identity 1.0 Today
Today it is the hassel of filling out the same information again and again.
Basically today authentication is that you get to prove you are an entry in a directory entry. single authority on one credential – not portable – in silo.
Verified digital Identity is not what you give a site today.
e-bay -/-> Craigslist
We have walled gardens
Identity 2.0 is where the user can move it to any site.
Simple and open has a history of winning in new standards look at:
WHAT DOES IT LOOK LIKE?
Identity Credential exchange is transparent transaction that is scalable.
WHO WILL DRIVE THIS?
users? – to many user names and passwords
won’t pay – little influence
enterprise? – partners, contracts, agents
but risky to lead… can’t get there
Identity 1.5
e-government?
maybe
but localized
Banks?
motivated to solve
theoretical trust relationship
Identity Ecosystem will emerge where
users are loosely coupled
share user identity
We are in a new era
Webservices – Flickr, Mappr, SalesForce
Web 2.0 will drive identity 2.0
It will happen on the edge of the Internet (not the edge of the enterprise).
XRI/XDI no web-service apps
SXIP
name/value pairs
DIGS XML
The goal is to mimic photo ID
With Sxip Network
SXIP 1.0 has had a few tire kickers
SXORE Blog comment spam solution
SXIP 2.0 support web services
SXIP ACCESS
SSO – Simple Secure and Open
Jamie Lewis –
Q: So will this go into a STANDARDS PROCESS?
A: We are working on it. We want to get it very close to right then put it into standards body. I like IETF. Our goal is to be open
This is drawn from David Temoshok’s Talk. He is the Director of Identity Policy and Management GSA Office of Government Policy
Homeland security directive 12
“Policy for Common Identification Standard For Federal Employees and Contractors” – August 2004
HSPD 12 Requirements
1. Secure and reliable forms of personal identification that are:
2. Applicable to all government organizations and contractors except National Security Systems
3. Used for access to federally-controlled facilities and logical access to federally-controlled information systems
4. Flexible in selecting appropriate security level – includes graduated criteria from least secure to most secure
5. Implemented in a manner that protects citizens’ privacy
Expanding Electronic Government
Needing Common Authentication Services for
You can learn more on the GSA website – http://www.gsa.gov/aces
A while back there was the DIY RFID that I blogged about. Today there is this story in the Financial Times about exclusive clubs offering their most prestigious patrons embedded chips the size of a rice grain to give them privileged access to their clubs. It has a whole history of this technology.
One night in Barcelona last year, a young Dutchman named Antoine Hazelaar received a strange proposition from the owner of a local nightspot, the Baja Beach Club. The club had just started a new programme called VipChip, he was told, and for E125, a qualified nurse could inject a device the size of a grain of rice, a VeriChip, into his upper arm. Once implanted, it would transmit an ID number to a scanner that would recognise Hazelaar as a special customer, so he wouldn’t have to wait in line and would get access to a private lounge. Since he would be one of the first people to be injected, the nightclub’s management would waive the initiation fee.
ADVERTISEMENT
Hazelaar agreed. At about 8pm one spring evening, in front of a throng of journalists, he sat down on a sofa in the cavernous Baja with another Dutch expat and a Spanish woman, ready to be injected. Bandages, needles and syringes were ceremoniously laid out on a cocktail table. Thanks to a local anaesthetic, Hazelaar didn’t feel the long shaft, about the size of a large sewing needle, as it entered his flesh. He didn’t feel the chip either, and a year later, he still doesn’t. “I forgot that I had it until you called,” he said.
Now, every time Hazelaar visits the Baja, he strides past the queue outside and goes straight to the doorman, who scans his arm until his name and photograph pop up on a computer screen. When he goes through another checkpoint at the special VipChip lounge, the number under his flesh becomes a payment instrument, like a loyalty card at Starbucks.
A waitress runs a scanner over his right bicep and the cost of a drink is deducted from his account.
As it turns out, Hazelaar became one of the world’s first human debit cards. But he wasn’t the last. The Baja now has 90 implanted VIPs; there are 70 at its sister club in Rotterdam, which opened last November. Even though the injection now costs E1,500 per person – including a E500 drinks credit – both establishments have waiting lists. Club co-owner Conrad Chase, a former star of the Spanish version of Big Brother, says his group might expand to Valencia and Hamburg, where they will also offer VipChip membership.
Some might say that this technology was inevitable, but how has this slightly creepy device become even remotely popular? And will it one day become part of everyday life?
…..
Ultimately, the choice is fear versus fear. What makes people feel most vulnerable? A hacker running up to them with a scanner, or news stories of rampant ID theft, infant abductions, botched surgeries, convicts on the run and terrorists among us? The VeriChip may be an extreme solution for extreme times, but the days when it could be dismissed as futuristic fancy are clearly long past.
Doc is an endless source of amazement and wisdom. He has been communicating about this stuff so clearly for so long one wonders why they are not listening. At least the identity gang is.
The Net is a World
Craig Burton:
Think of the Net as a hollow sphere made entirely of people and resources it connects.
– It is the first world made by people for people.
We’ve only begun to terraform it
One of its virtues is the emptiness in the middle.
The Net is a World with Three Virtues
1. Nobody Owns it
2. Everybody can use it
3. Anybody can improve it
Notice the use of the word – body in these sentences not noone, everyone and anyone.
The history of the net is the history of its protocols.
Civilization doesn’t move all at the same speed.
mmm… this explains why marc is frustated with us meeting so much we are building infrastructure not buildings it takes a bit of time. Now that the infrastructure is there for real open standards for digital identity lets see what we can build with them.
Between two perspectives… Commerce and Governace lies infrastructure…
Here is a talk by Buzz Bruggeman about the power of blogging. I hope that those in the identity commons network/community can come to understand more about why I think our blogging and presence at key events and conversations is vital to our success. Our success will be determined by the power of our market conversation. He goes out of his way to attend “World Class Events” where they see each other annually. He is seeking to identify the real time, real world high value customers. He also has a presence that is as a real person. This is why he blogs and why we should blog.
A four star review in USA Today read by more than 2.3 million people got ActiveWords all of 32 downloads. But a blog post by popular blogger Robert Scoble resulted in more than ten times that number. Buzz Bruggeman, the founder and EVP of ActiveWords Inc., speaks about his experiences in marketing and selling his company’s software, and the networking tools he uses. He discusses how a huge advertising budget may no longer be the only way to reach people.
How does a small company overcome the problem of distribution of software and get people in the target market to use it? Are huge advertising budgets the only way to reach the target audience? Listen to this show to learn about the benefits of using blogging and podcasting as effective networking tools, and how they can be a low cost, highly effective marketing tool at a global level. Buzz discusses his personal experience of how ActiveWords has received good exposure by using the right tools and networks, with a very small marketing budget.
is is a great measurable success for organization like Foundation for a Free Information Infrastructure whose members, supporters and sympathizers have fought against the insane idea of software patent for more then four years (more info on euro software patents on the organization site).
FAQ’s about LID from Johannes Ernst’s Blog – I think they apply to the work happening around XRI/XDI and Identity Commons stuff. I am going to do my part by working on doing some essays with lots of simple diagrams to explain the ecology of organizations and roles. Hopefully we can also do a short video about it too.
What’s your measure of how complex a single-sign-on technology can be so it can be adopted broadly?
A weekend of implementation effort, maximum. Here’s why: SSO only makes sense if basically everybody can implement it. That includes a lot of players, from your 401k plan (who could probably afford a lot more than that) down to the message board of the parent-teacher assocation that’s run by Joey’s dad on his home Linux server. Joey’s dad is not going to spend more than a weekend of his time to make it work. He’s also not going to go out and buy expensive software. He might download some Perl, but that’s about it. Ergo: one weekend, no more.
This is an exciting development that happened a few months ago. ooTao has done an inter-op of XDI and LID demo along with a few others:
So I am about to head into NYC to meet with Susan Crawford. I am exited. hopefully I will remember to actually take a photo so that I can use flickr.