I have not finished blogging about Catalyst last week…(I still have the review of the last night of hospitality suites to do among a few others). Mark has done an astounding job of capturing the content of the conference in these two summary posts.
Day One
Day Two
It is very worth reading.
Publications
Identerati by Mark Dixon
I got to meet Mark for the first time last week at the Burton group. He has totally impressed me with this aggregate list in table form of the identerati. check to see if you are on it – if you are not and want to be just e-mail him. It is an amazing collection of links at www.whodentity.com. He says this a the top of the page.
I find it fascinating to study people who work in the Digital Identity industry – the Identarati. We can learn much from each other as we all seek to advance the state of the art in this industry.
I cannot hope to meet or even read about each of the myriads of people who are contributing to this dynamic industry. However, as a student of Identity Management, I am constantly learning about new people and listening to what they have to say.
I have decided to share my list of the Identarati with you. This isn’t a top ten list. It is simply a compilation of links to many of the interesting people I have discovered in my quest of Discovering Identity. If you would like to nominate yourself or someone else you know for this list, please send me an email via =MarkDixon. I’d be delighted to learn about you and what you have to say. For those of you already on the list, please let me know if I need to update your information.
THE WORD: Managiziation
Mike Neuenschwander gave a GREAT performance this morning. Last year he destroyed a guitar on stage and assured us that it had a good life in guitar heaven. This year he brought us THE WORD: Managization. I captured it using my camera’s video function. You can check it out over on my Vlog.
Technorati Tags: BurtonGroup, Catalyst, identity, nacatalyst06
Let the Vlogging begin
So, I went to VloggerCon and what does one do when one goes to a cutting edge technology conference espousing yet another cutting edge technology – one learns enough to ‘get it’ and dive in. So I began video blogging on Blip.tv I did two posts today on identity. I started out with a minute from Christine (she was at IIW) talking about why identity is critical and what will be its breakthrough moment. This is followed up by Mike from Blip.tv itself talking about why identity would be so useful to the emerging ecology of companies and how it helps them be like swarming smart pebbles.
I plan to vlog at all the conferences coming up. Let the Vlogging begin.
Technorati Tags: conference, identity, unconference, vloggercon, Web2.0, women
VloggerCon reflections on day 1
There was one good talk that I went to at VloggerCon that is worth sharing some information about here… The difference between video blogs and other formats.
- Video get decontextualized – once it is out there it roams around
- The display is smaller
- It is bandwidth dependent
- The audience control – they can decide what to watch and when
- The interaction with the audience is more organic
Christine was at the event and counted how many women were there – 26% – relatively high ‘for a tech conference’ I don’t know if it is the venue or the early stage of this industry niche but it feels very ‘alpha’ – you know – my vlog is bigger then your blog, my vlogging tool is better then your vlogging tool.
I am trying to wrap my head around how to do this vlogging thing. They put the ‘advanced imovie and final cut pro’ in the second slot of the day before there was even a basic tutorial. They did have a story telling workshop that looked like it was good but I didn’t make it to that one.
I was craving more room (the venue was very cramped) and open space methodology. I will be back there today wearing my dabbler shirt – thanks Mary. If you are trying to figure out where there is good video on the web – dabble is the place for you. You can be my “friend” there too.
Technorati Tags: vloggercon
Markets 2.0 – Doc posts.
Doc just posted his Market 2.0 talk from Rebot. It is a great run down of the situation we face in understanding markets.
DRM Elimination Crews will descend on Apple Stores June 10
My Friend Gregory Heller and company founded Defective by Design to ‘fight’ the scourge of DRM plaguing the land. June 10th will be their next ‘day of action’ descending on Apple stors in NYC, Boston, Chicago, San Francisco, Seattle and Plano to warn apple costomers of the dangers of DMR in iTunes Apple Software. If you want to join in you can join the movement here…
Full disclosure – I have an nano ipod. I never buy music on their store because of the DRM (your music is no good in like 5 generations). I don’t really buy music at all or copy it. If I did I would by CDS from Amazon based on my Pandora favorites list and burn the music into my hard-drive DRM free. The one thing I have bought is two Sarah Vowell books 5 hours and 7 hours each. I figured they were worth the cost and hastle of DRM. I am a huge fan of hers. Other then these rare exceptions I have totally avoided DRM.
Technorati Tags: apple, community, defectivebydesign, DRM, NoDRM, Freedom, Reputation, Web2.0
Publish all SSN eliminate the 'secret'
A radical identity solution – publish all SSN eliminate the ‘secret’:
It’s time to eliminate the SSN façade. The solution to the problem of identity theft is a “cold turkey” one: publish all SSNs to ensure that no organization has the opportunity to suggest that their secrecy can be maintained. The Social Security Administration should pick a date 2-3 years in the future and announce that on that day it will publish the SSNs to the world.
The most obvious objection here is also the point: What about all the companies, and perhaps most importantly the Social Security Administration, that rely on the SSN as a secret? Won’t that really change the way they do business today? I sincerely hope not (because they should have stronger controls today), but I suspect so (because they don’t). There is a big difference (in controls) between the initial use of the SSN as validation of identity for a financial transaction (say, to get a credit card or purchase a car) and the ongoing relationship between an individual and an organization that retains the SSN.
The organizations currently using SSNs have other information available to them from their existing customer base – mutually-agreed upon “secrets” and transaction histories among others – and methods of “out-of-band” verification like sending verifying mail to the address-of-record. These techniques are more useful with the history of a relationship; often, setting up an account relies on information being provided by the consumer (or prospective fraudster).
A government mandate is the only way to build out a much stronger program for identity protection – one built on mathematics rather than on 150 thousand people keeping a secret. Otherwise, the laws for protecting the SSN will continue to grow in volume and complexity, organizations will continue to build in more controls, and we will continue to have our identities compromised.
What’s your social?” How many times have you heard that question, from credit card companies, doctors’ offices, and just about every other type of organization? Perhaps you were confident that all these organizations are keeping your “social” completely confidential.
Security experts held a contest this month to show just how quick and effective Google hacking can be. During a technology security-industry meeting in Seattle, contestants using only Google for less than an hour turned up sensitive information — potentially useful for financial fraud — on about 25 million people. They dug up various combinations of people’s names, dates of birth, Social Security numbers, and credit-card information, including some card numbers apparently left exposed by the U.S. Department of Justice.
The big problem is that so many organizations collect too much such information and then don’t bother to secure it.
I think it would be most useful if some organization were to organize a reputation system that made it its business to discover which entities had the most such information visible via the Internet and findable via google or Yahoo! Such an organization could report first to the affected entities, with a time limit before it would make the information public. I don’t know how potential liability would be handled in such a case, but once over that little hurdle, such an organization would be doing a great public service and could probably make a bundle advising organizations on what not to publish.
And of course the biggest identity leaks don’t come through web search engines, anyway. They come through companies mailing unencrypted tapes or keeping back data on disks that are then stolen.
Reputation Gang mentioned at OCC
For all the folks at the Online Community Camp here is the information about the Reputaiton gang (sorry some how I can’t get onto the closed wiki to share there).
Meng Wong is the lead instigator….
- We’re forming a Reputation Working Group under the Identity Commons umbrella.
- A wiki and mailing list for the working group have been established; you are invited to get involved.
- We are aiming to build in reputation capabilities in time for a September “release”.
- There will be a BoF / WG meeting at Berkman sometime June 19-21.
NEXT STEPS
The next phone meeting will be on June 6, probably at 11am PDT as usual unless anyone would prefer a different time.
REPUTATION WORKING GROUP
Drummond has created the page…
…which is listed on the page…
…which is linked from theIdentity Commons wiki home page at…
The mailing list for the Working Group is called “identity-reputation”, and is being hosted at mailchannels.com; if you ever run into Ken Simpson, say hi and thanks.
Technorati Tags: Collaboration, community, Identitycommons, occ2006, Reputation, ReputationGang, usability
Canadian Identity Crisis
There is nothing like ego searching to get you back into blogging (I have take over a week off). I just found this post that points to my page on Canadian Identity Crisis because of the Bruce Mau Essay that I have up on a page at Identity Woman. It also points to the Molson – “I AM CANADIAN” television advertisement (I had never seen it until today). and makes an allusion that it is similar to another Canadian identity presentation we are all familiar with.
The saddest part is that Molson is no longer a canadian owned company.
Identity For Dolphins
This came up on the identity list:
Bottlenose dolphins appear to whistle their “names” to each other, according to a new study. Researchers say that this type of referential communication is extremely rare in nature, and until now had not been clearly shown in a non-human animal.
Identity Map Developing
I mentioned this earlier in my reflections about the conference. I had seeded a map that outlined the history of our community, gatherings, protocols, blogs, papers, podcasts, wikis, mailinglists. One of the participants took a very high resolution picture of the finished map. Phil has a picture of the initial map. On my original Omnigraffle version I have Kim’s Laws of Identity but on this one I didn’t get them up and Kim just pinged me to let me know it needed to be added. If there are things you think need to be added feel free to let me know.
I hope to bring the big map or another version to the conference at Berkman and DIDW for others to add more information to it.
Where is the video???? Colbert is vanished from webosphere
So one of the funniest and serious things to appear on the web this week was the AP Dinner where they ‘roast’ the president. This year Colbert was the roaster. The mainstream press basically ignored the roast but…it took off in the blogosphere. Now the video has been disappeared from youtube. I never did see the third part.
New Hampshire to stand up against REAL ID
GovExec.com’s Daily Briefing REports this:
New Hampshire lawmakers are considering a proposal to reject a federal mandate for national identification standards.
The state House last month passed a measure, H.B. 1582, to refuse participation in a program created under a 2005 law that requires state-issued IDs to meet national standards by 2008. The New Hampshire proposal has been forwarded to the Senate for further consideration. ….
In written testimony submitted to the committee, Jim Harper, the director of information policy studies at the Cato Institute, said it would be a grave mistake for New Hampshire lawmakers to stick with the REAL ID program out of fear that they would lose $3 million in federal grant money to comply with the law.
Harper cited a report released last year by a Virginia task force that estimated full compliance with REAL ID in the Old Dominion State would cost as much as $63 million per year. He also noted an estimate from the National Conference of State Legislatures that it would cost $9 billion for states to implement REAL ID nationally.
It seems that this is a topic that we should talk about at IIW next week. I titled the session “The Current Political Climate.”
Cashless French Town
The tourist city of Caen in Normandy is hosting a major European trial of the use of NFC (near field communication) – a mobile technology that can be used for anything from paying for groceries to finding out about your home town.
By placing an NFC chip near a reader, up to a distance of a centimetre or two away, data can be transmitted to and from the chip. But the Caen project has a more far-reaching use of NFC in mind, with residents now packing NFC-enabled mobiles to see if using the technology could catch on beyond public transport.
In an experiment involving companies including Orange and Philips and the town’s mayor’s office, Caen’s citizens have been road testing the technology since late last year at a number of locations.
What I wonder about is who keeps all the data? How is privacy protected?
When Will they EVER LEARN
Reading articles like this makes me not want to trust Microsoft.
72 different colleges to use Windows Live for their email services. The problem with this is that Windows Live does not support any browsers besides IE 6, does not support POP or IMAP, and does not support email forwarding.” From the article: “The Redmond company believes that catching the students early on will turn them into life-long users of Windows Live. They would likely create a Windows Live Messenger account, start a blog and organize their favorites under this e-mail account — especially if they plan to continue using it, Microsoft says.”
WHY SHOULD WE TRUST THEM!!!!
They keep doing lockin things like this. From the original article..
But although there has been a rapid uptake of the service, the company says it still meets resistance and skepticism. In return, Microsoft has been assuring education institutions that its only motivation is to get students using Windows Live, promising there are no ulterior plans.
Google is doing similar things….
Google recently announced a similar program for its Gmail service, serving students of San Jose City College in California.
Phishing is a problem improved 'experience' needed
This article on Network world highlights how even those alert phishing are fooled. It speaks to the need that a better ceremonial experience to sign into sites and do mutual authentication that Kim Cameron has proposed become standard.
A new study by reseachers at Harvard and Berkeley showed that 90% of participants were fooled by a clever phish — and this was while the participants were actively on alert for phishes.
By simply changing the spelling of Bank of the West from www.bankofthewest to www.bankofthevvest, people were fooled into thinking they were on a real site. The researchers say Web site designers need to come up with a better way to help customers determine when a site is a phish.
Security and Password Myths
I found this article at the Center for Education and Research in Information Assurance and Security about Security Myths and Passwords. It articulates why forcing users to change there password every month is not an effective security measure.
This is DESPITE the fact that any reasonable analysis shows that a monthly password change has little or no end impact on improving security! It is a “best practice†based on experience 30 years ago with non-networked mainframes in a DoD environment — hardly a match for today’s systems, especially in academia!
Jigsaw aggregating everyone…
I have had a challenge with my RSS reader. Making things slow as molasses. So I have not really be reading to much. I decided to do some surfing around and likely will abandon readers all together except for maybe 20 core blogs. The rest I will do by surfing and searching.
Today I found this by surfing through TechCruhch. Jigsaw I quoted it extensively because it was so startling and relevant for the identity community to consider.
Jigsaw is a marketplace for contact information, and it is very efficient. It boasts detailed personal contact information for 2.5 million people, and 7,000 new people are added every day. If you want the name, title, email address, direct phone line and/or address of any executive of any company, there is a very good chance Jigsaw will already have it in its database and will sell it to you. And if you are a sales guy and have no ethical concerns about where you get your contact information, you probably already know all about Jigsaw.
Unlike competitors like Hoovers and InfoUSA, which gather company information by semi-legitimate means such as scouring SEC filings, cold calling companies and asking for information, and reviewing other public documents, Jigsaw simply pays people to upload other people’s contact information. Users are paid $1 for every contact they upload, and some users have uploaded information on tens of thousands of people. See the demo (and note the other demos on that page as well). Jigsaw is also self correcting, and incentivizes people to also correct bad contact information.
That’s right, the next time you hand out a business card to someone or otherwise divulge your contact information, you may be handing it out to the entire world.
Here’s how it works: Sign up and start downloading contact information. This includes name, title, company, address, email and direct phone line. For example, a quick search brought up all of this personal.
But wait, it gets much worse.
Anyone can find out if Jigsaw has their contact information via a link on the home page, but amending or trying to delete that information simply puts a flag on the data with the changes noted – but the original information also remains.There appears to be no way to remove your own contact information from Jigsaw once someone has entered it into their database. There is no method that I was able to find on the website to do this (including in the privacy policy), and an email to the company asking about this went unanswered (its been three business days now).
Jigsaw has a carefully worded privacy policy to deal with the fact that they are the antithesis of privacy. They say “This privacy policy covers how, when and why we collect, use and share information about our users…This policy does not apply to our collection and use of data about companies and contacts contained in our database system.”
Is Jigsaw legal? Maybe in the U.S., although I’d love to see a class action case brought against them. Is it ethical? Absolutely not. Every Jigsaw employee and investor has dirty hands and they should be ashamed of themselves.
Like Plaxo, Jigsaw makes money while pushing costs to other people. In Plaxo’s case, its spam. In Jigsaw’s case, its making private contact information public. The problem here is that Jigsaw’s actions aren’t easily found out by people getting constant cold calls and emails – it’s very unlikely they’ll know that these people got this contact information at Jigsaw in the first place.
If they wanted to do this right, they’d set up a marketplace where individuals could choose to sell (or give away) their contact information. The owner of the data could set the price, and Jigsaw could take a cut. Would this model work? Perhaps not, but that just proves my point. The only reason Jigsaw does work is because they don’t have to bear the costs that they push to third parties – all of the people who are in their database.
dealing with Identity silos today.
I was talking to a colleague in the tech industry who shared with me a story of how they coped with the silos of identity.
They get e-mail sent to the corporation machine and forward it to their real machine outside the ‘silo’ to actually read it and respond. What are we doing to people these days? Silos create fragmentation that does not seem healthy or whole.
People Tracking for Advertising goes high Tech
This head line explains it all. they’re-in-the-phone dept. the WSJ is reporting that Integrated Media Measurement Inc. is creating a device that will sample peoples environment every 30 seconds for sounds to determine what ‘messages’ and ads they are being exposed to.
Just wait until it isn’t just that they are tracking.
