Burton Group: is this thing on?
Is it just me, or has the Burton Group gone dark? Outside of twitter, I haven’t heard anything from anybody on anything. Are they publishing somewhere else now and just haven’t bothered to update their old blogs to help existing followers to make the move? Or maybe now that they are part of Gartner, we...
XAuth: First Take
XAuth has had me fascinated since it was announced yesterday. If you haven’t heard of it yet, I think Dare Obasanjo’s summary is one of the better descriptions, although his site seems to be having issues this morning. What is XAuth? It appears to be one service, running on one domain, that will maintain the...
Privacy vs. Profiling
This raised the hairs on the back of my neck: How Visa Predicts Divorce Imagine the scenario. You’re in a bad relationship. You want out. Suddenly, magically, targeted ads start showing up all around you — ads for lawyers, counsellors, mid-life-crisis objects of desire. Your credit card company has sold your profile, and everyone is...
My Friend Steven
A few years ago, I met Steven Bender at the Burton Group Catalyst Conference in San Francisco. Steven’s company, iMagic Software, had a product that did keyboard biometrics, and I was immediately fascinated. I thought that their product had a ton of potential that wasn’t being recognized – everyone was pigeon-holing it as strong authentication,...
Can’t wait for TEC
The Experts Conference is in Los Angeles this year.
I can’t wait — and if this picture makes no sense, you will just have to ask an Active Directory MVP.
Commercial Phishing
Twitter broke a very interesting story this week about a hacker who bulk-harvested account details by installing backdoors in a popular torrent hosting solution. Users registered for a valid service, and received value in return, but all the while, their details were being stolen.
This would be a pretty boring phish, except for the part where...
Oracle Waveset
Acquisitions! Can’t live with ‘em, can’t wait until they stop holding up progress. At least now we have new fodder for speculation.
What’s great about the Snoracle merger finalizing: already I’ve seen more blogs from more people in “the know” who are reaching out than I can recall ever seeing from the Identity team at Oracle. ...
Brace Yourself
I believe that what Apple releases next week will herald the end of broad adoption of general computing devices. The introduction of their tablet will begin in earnest a trend towards tightly integrated, tightly controlled sealed-hardware computer devices that allow the majority of the population to accomplish the most popular computing tasks without doing anything...
OpenID Bound
I’m really happy to report that today I join the board of directors of the OpenID Foundation, representing Ping Identity. This is a big decision for us! It reflects not only our strategic conclusion that OpenID is a critical part of the ecosystem that will evolve in this new decade, but also our tactical roadmap,...
“Kick Me” for Cloud
Patrick just posted to the Ping CTO blog some of our combined thoughts about what a terrible idea it is to synchronize Enterprise passwords to the cloud: Grounding Enterprise Passwords.
The ctotalk blog post is much more detailed so make sure to read it, but let me sum up in somewhat stronger terms: Giving away the...
New Gig!
I am so tardy in writing this, tsk tsk…
I am now officially a Senior Technical Architect at Ping Identity. All of you who know the Ping folks know that this will be an exhilarating ride. I work for Patrick Harding in the Office of the CTO, and I can honestly say that this is...
Axel’s Challenge
Axel says he’ll fetch you a beer at IIW if you can decrypt the token he has made publicly available on his blog: crypto doubters in the crowd, this is your big chance! As someone who was recently burned while copying and pasting encrypted tokens off of a web page and trying to decrypt, I...

