Fixes to the RadioAtomBridge tool for Radio

As of tonight, I have fixed two more issues with the RadioAtomBridge tool.

Last night I was able to get SSL/TLS working to post to Blogger.com …
since they have now started to enforce requiring this.  I also
fixed the links on the events page so that they will now take you to
your Atom feed for the appropriate blog.

Tonight I thought I would do a couple of other tweaks.  First, I
added a quick fix that will include the date and time as a title if you
do not specify one.  Blogger requires a title on every post. 
Second, I did a fix to the prefs page for RadioAtomBridge to account
for category names that might have a ‘.’ in them.  The way the
code had been written it failed on my categories where I used a domain
name for a category.

I also spent some time learning how the prefs page works, and now I
think that I am going to add a new option for SSL/TLS enabled disabled
to keep the tool working with any potential Atom site.  It’s going
to take some time for that fix.

I’m still pushing to get v3.2 out the door in the next few days. 
This prefs page fix is the last one that I want to address for now.

One thing that it fun is that I am still learning more and more about
Usertalk, and the underlying architecture of Radio and tools.  Not
sure its useful in the long run, however its fun to experiment
with!  🙂

RadioAtomBridge update coming

I really have put off working on my RadioAtomBridge for a while
now.  It worked for me, and that’s what counts … right?  🙂

Well, over the last week, it stopped working for me … and I was
frustrated.  I haven’t seen any comments on the blog about it, and
so I figured that it was probably ok, but the more that I looked into
the problem it appears that there were two issues:

  1. It appears that Blogger/Google have lived up to their promise of
    requiring SSL/TLS to secure the ATOM posting.  This really does
    make sense, and I’m not against … I just didn’t want to have to edit
    code again.  But I have, and I am now testing this new version
    that I worked on last night.  If all goes well, I’ll post a new
    version for people in the next day or so.  Oh and another note …
    this is slowly becoming the Radio Blogger Bridge
    again since I am slowly hardcoding some things to work with Blogger,
    and removing some options.  I might see how easy it is to add an
    option for SSL/non-SSL … but don’t count on it.
  2. I also found that Blogger will not allow you to create a post
    that does not include a “title”.  So if you post, and the title is
    empty, it causes a java:Null Pointer Exception on their server. 
    Wonderful.  I haven’t yet fixed this, but am looking at what I
    might do … maybe force a default title of the time and date?

Anyhow … it was fun to get into Radio again … and it was also a
pain.  I hate that I have not yet found a fully supported blogging
tool that really does what I want it to do.  But I am working on
it!

Keep your eyes on the Radio Atom Bridge blog for update news!

Pandora … music by the masses

Ok … this is a cool web site: Pandora

I know that it might be old, but I just found it and it’s pretty
cool. You enter a artist or song and it begins to stream music to
you that they feel fits that “sound”. The best part is that you
can then vote if you feel that a song applies or not … so that your
feedback continues to mold the genre of music.

I’m listening now for a bit. It would be cool if they did a “custom podcast” that I could download.

iPod is an experience, not a product!

I now own an iPod … and I can now understand a lot of the buzz about
them. It really is amazing. Not the product, but the experience
that Apple has created. I have to admit that I underestimated
what Apple has created. I kept thinking “Yeah … another MP3
player, but a little cooler looking.” But after having it and
using it for one week I am thoroughly impressed.

I’m working on ways to integrate the iPod with our product, and so I
got one to begin to do the research. I wasn’t sure if I would use
it much or not, but I am now hooked. It is so well thought
through … again, not the iPod device,
but the entire solution of iTunes and the iPod. I am now using
both of these on a daily basis, and the synergy between the two
products is well thought out and polished. Apple has done a lot
of thinking about all of the details.

I do have a few complaints … but they are very few. What I did
like is that I can now add iCal and vCard objects to my iPod and they
are accessible via the UI. I found a lot of information from this link about iPod synchronization sent to me by a friend.

Anyhow … expect me to post more about my iPod experience … so far it’s amazing!

InfoCard Insights

While at Internet Identity Workshop 2005 I really enjoyed meeting Kim Cameron in person, along with Mike Jones … both from Microsoft.  They seem to be the current human-side of InfoCards.

I was really waiting to see a good demo of what they are up to, and I
have to say that I like the overall solution.  It’s a very well
thought through solution, and I can see why Microsoft is going to move
forward with it.  I’m not going to get into the good vs. bad
debates … and I’m not going to argue about the evil empire wanting to
own all of our identities.  Its not about that, and I can see all
sorts of places where my companies can participate, and where even
those in the Open Source world could jump in if they felt like doing so.

There was one interesting place where I felt that InfoCards is lacking
… and that is removing the tedious re-typing of identity information
from the user.  I hate entering data into forms.  This is why
I really like the possible Firefox/IE enhanced form-fill
solution.  The browser can start to enter information for me …
and only require my approval before posting.

Why I believe that InfoCards is lacking here is the example that I
asked Kim about during his demonstration.  I wanted to write about
it here, hoping that he might offer a different perspective, or explain
how I missed something.

Kim explained how I can create new “self issued” identity cards, or can
have a card issued to me by a web site or other entity.  What was
interesting to me was that if the site wanted to issue a card to me,
InfoCards would not provide any assistance in providing my information
to the issuer about my identity.  I understand the security
choices here, however this is what I see coming …

I go to Domino’s web site … they offer to issue me a card.  I
get a form and hand enter all of my information:  my name, phone
number, address, favorite toppings, favorite drink.  I get a
InfoCard from Dominos.

I then go to Wells Fargo’s web site … they offer to issue me a
card.  I get a form and hand enter all of my information …
again: my name, phone number, address, employment info, etc.

I then go to E*Trade’s web site … they offer to issue me a card. 
I get a form and hand enter all of my information … again: my name,
phone number, address, SS#, employment info, etc.

I then go to Delta Airlines web site … they offer to issue me a card. 
I get a form and hand enter all of my information … again: my name,
phone number, address, seat preferences, etc.

I then go to JetBlue Airlines web site … they offer to issue me a card. 
I get a form and hand enter all of my information … again: my name,
phone number, address, seat preferences, etc.

Great … I get all these cards that are later useful … but I have
had to enter my info over and over and over again.  Yes … I hear
the Liberty Alliance folks out there yelling “But we’ll federate all of
these companies behind the scenes so that they’ll all know you!” 
But I DON’T WANT THAT!

Maybe it’s going to take the full combination of technologies to solve
this … I use the Firefox solution (Mike … hurry up and write that
thing!) which actually fetches the form-fill values from a LID or SXIP
Identity Store, and then auto-fills the form that gives me an
InfoCard.  Uh … it’s sounding complex … but maybe that’s it.

Oh … sorry Drummond … I’ll have to think about where I used the i-Name in there.  😉

Internet Infrastructure Ignorance

While at Internet Identity Workshop 2005 this past week, one of the interesting issues that
came up several times related to name spaces.  Specifically, there
were numerous times where people voiced their opinions about how name
spaces “should” map onto the Internet, and they used DNS as an example
of how things “should” be.  The problem is that they demonstrated,
by their words and arguments, that they were ignorant of how DNS
works.  The infrastructure of the Internet has become so
transparent, that it seems to me people have begun to make gross
assumptions about it’s architecture, and this is what is the root of
many of the security and privacy issues that we are seeing today.

I was looking forward to the presentation by Drummond Reed about XRI/XDI.  One of my concerns in any solid digital identity solution is the freedom to choose. 
I am not a big believer in compulsory community membership, but instead
believe that true freedom is represented by our ability to move in and
out of various communities at will, and to create new communities as we
want.  I really like this thought from “The Meaning of Life – Part II“:

There are millions of different social groups in the world, political, economic,
religious, philosophical, and cultural. These groups are all trying to bring
their particular vision into focus and build a life that is related to the
central principles of the group. Each of these groups is an experiment in
progress. As time passes, the ideas that are developed within these groups
either spread to the society as a whole or are abandoned as unworkable. This is
a Darwinian process that develops better ideas in the same way that evolution is
supposed to develop better animals. You can find more information about this
notion of “idea evolution” at the Memes: Introduction site. Even
groups that you personally dislike are working in your behalf, attempting to
build visions of the world that might allow you to interact with the world more
creatively and successfully.

Groups also serve as symbols in the social world. Groups with different
beliefs than your group provide you with viewpoints you wouldn’t have otherwise
considered. They also represent parts of your own mind that you are not focusing
on. However, if you fear those parts of your mind, this representation can
degenerate into projection, which is a bad thing.

What does this have to do with DNS and digital identity?  It is that I want the freedom to NOT
have one name, one identity, or one reference across all
communities.  Yes, there might be some places where I would
benefit from some level of federation.  At Internet Identity Workshop 2005 I actually
saw where OpenID is intended to not only provide Single Sign-On, but
also is specifically designed to cause a level of federation across web
sites.  I DO NOT
want this to be a requirement.  I am ok with it being an option.  It is this flexibility that I
believe will allow a particular solution to become successful and
ubiquitous.

So … I really wanted to hear more about XRI/XDI and i-Names
because I specifically wanted to learn if they were going to try to
“root” the entire name space into one fixed community.  My real
question was:  “Is XRI/XDI yet another Internet ‘tax’ like Domain
Names (DNS), where you have to pay some entity on an annual basis to
use the value of the technology?”  Or, was XRI/XDI simply one
solution that could be “rooted” anywhere, and allow for the emergence
of various communites to use the technology, and have the naming
relative to the community.  To my relief, the latter was
true.  XRI/XDI is based on specified root servers, and so naming
resolution is based on what root servers you choose.  In the end,
what this means is that my i-Name is only relative to the community.  It is not necessarily a globally unique identifier
for me.  It also means that any community can set up their own
root servers, and create name spaces of their own.  In the end
this means that =drummond.reed only refers to Drummond within the context of a particular community!  Bingo!  I like it!

What shocked me was the almost immediate upset expressed by numerous
people at the conference.  They wanted these names to be
absolutely globally unique . .. so that no one would ever be able to
get “my” name, and there would never be any ambiguity about who was
being referred to by an i-Name.  I fully understand the desire,
however what shocked me was the references to DNS as having this
characteristic!  People actually believe that DNS provides an
absolute unique identifier in any context!  The DNS system has
become so transparent, and ubiquitous that people no longer realize
that it is simply one community for naming on the Internet … and
there is nothing locking people into using it.  These people do
not seem to realize that I can set up my own root servers, and resolve
and DNS name to any IP address that I like!  In fact, I’m quite
surprised that the Open Source community has not stepped up to revolt
against the “Intenet tax” imposed by ICANN and re-ignited the efforts
of OpenNIC, AlterNIC, and many of the other early pioneers in creating
a truly free naming system on the Internet.

DNS naming only works because
our servers, workstations and laptops all obey the rules, and the
default configurations imposed on us by our Operating Systems, ISPs,
and DHCP servers.  Anyone who has installed a DNS server could
easily find the default InterNIC root server list in one of the files
on their system …  /var/named/named.ca
on my Fedora Core 4 install.  I could go into my DNS server and
define “www.amazon.com” to be any IP address that I want.  If you
then happened to route through my DNS server (by being on my network)
then you would get *my* name resolution … not InterNICs.  If I
was an ISP, or even an Internet Cafe, there is little that you could
do, and in fact you would most likely just trust
that the DNS server you were using was trustworthy.  Another
common hack used by trojan horses on the net is to modify your local hosts file.  Most all systems have a hosts file that will resolve naming on your local machine without requiring DNS at all!  If I put an entry in your hosts file for “www.amazon.com” then it will never even use DNS to attempt to resolve the name correctly.

There is nothing in DNS that stops me from adding other root servers, and creating my own free
Top Level Domains (TLDs).  It is only because people just fall in
line with the DNS configuration that it works.  It is only because
we allow our machines to automatically join the ICANN community. 
It is only because of our ignorance and lack of education about how all
of this works that we think that DNS names are globally unique in all
situations.  DNS names, and all naming, are the products of
specific communities or contexts.  Although these communities
might grow to be so large that we can’t seem to see anything else,
there still is the something else.  I actually like it that way.

Post-IIW2005 Client-side Identity Management

After getting home from Internet Identity Workshop 2005 there are a number of thoughts on my
mind. Probably the best conversation that I had was with the
group around Mike Shaver from Mozilla.org. He suggested a conversation about what client solutions could be developed to enhance digital identity … and I love client solutions.

The value of a client solution, and the core of this conversation, is
that client solutions can often be created without having to touch the
server! Mike wanted to hear what might be done in the browser –
Firefox – that could enhance digital identity, without any server
integration. My suggestion was – enhance the form filling!

Today we are all familiar with the “form fill” capabilities in the
browsers. They keep track of previous entries in text fields, and
also in username/password fields, on the various web pages and web
forms that we use. The browser is in a unique position to truly
add value to everything that I do … this is greasemonkey++ for digital identity. The browser could begin to keep a local or remote (e.g. LID, LDAP, etc.) store – that I can edit and alter – of all of the bits of my identity that are asked for by web sites. It could allow me to alter the values – on a per site basis
– to custom tailor what I give out to anyone. It would keep track
of what I gave to who. It could even incorporate functionality to
automatically post to web sites when I change my local information …
like when I move to a new home, or job. Mike suggested that a
repository of web forms could emerge as users develop and document the
multitude of sites and their forms and how to interact with them.
That is a grass-roots digital identity solution.

It seems to me that Firefox and Internet Explorer are best positioned
to take on this challenge, and to begin to incorporate truly useful
functionality that would remove much of the tedium of entering personal
information. In addition, they could allow me to stay “in
control” of what I am
giving to web sites and automating much of what I do today when filling
out forms. What is cool is that if Firefox did it, it would have
a huge leg up even if IE failed to adopt and implement the
capabilities. It could really become a killer app for Firefox.

The current implimentations are far too limited. Some of the issues that I have thought of so far are:

  1. There is no easy way to view the information that was stored, to edit these values, and to manage how they are used. I want to delete a mis-typed autofill value, or change a password.
  2. I am not prompted, on a per site basis, if I might want to use a
    previously entered value – even if the form uses a different field
    name. I want to associate a field named “phone” with the values that I have entered for “phone number”
  3. When filling in a value, I want to enter a “lie” for that particular site. Hey … I’m just being honest that I lie to some sites!
  4. I want a full audit of where I have given out my information, when, what information, etc. This allows me to review what I have provided to which sites and when.
  5. I want to specify where the browser gets and stores the information used in form filling. I want to use LID! I want to use a LDAP directory!
  6. I want assistance in accumulating my digital identity over time. Bit by bit as I am asked for my identity I want it kept so that I don’t have to keep typing the same info over and over again.

In my opinion, this type of enhancement could truly alter how we
interact with web forms, and share our personal identity
information. What is really cool is that this can be done today
… on the client … without requiring any server changes, and without
requiring sites to adopt new servers or technologies. Users
benefit regardless of what the web sites and servers do … imagine
that!

Internet Identity Workshop 2005

I’m sitting here today thinking through all of the various posts that I
want to write coming from Internet Identity Workshop 2005.  It was a great workshop,
arranged by some great people, and attended by some amazing
people.  It was fun to meet – face to face – some of the people
that I have read on-line and e-mailed with.

I’ve got thoughts on LID, OpenID, Sxip, and InfoCards … all of which
I’ll write about in the upcoming days.  I also was glad to meet
other people there and engage in conversations about other software
solutions, hosted services, and open source projects.

If only I had a lot more time to focus on this space … I’m committed
to add some very cool identity management and social networking to our
GoBinder products …

Accelerando … Science Future

If you have not yet read Accelerando I suggest that you purchase or
download (Yes! He has a free version that you can download!) a
copy.  I am a big fan of Neal Stephenson’s SnowCrash and Diamond
Age, and this is yet another a fun book to read.  Charles Stross
has done an awesome job of extrapolating today’s technology and
research into a great possible future.

Go get it … read it.  Welcome to the future …