virtualsoul.org
A familiar hacker visits my home network | dale olds' virtualsoul
http://virtualsoul.org/blog/2008/02/14/a-familiar-hacker-visits-my-home-network
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. A familiar hacker visits my home network. And this little Internet startup named Google. During the school year, he works on Linux boxes for the astronomy department at his school. His jobs sound like a huge amount of fun to me, and I think he has enjoyed them, but he takes things so seriously sometimes. Sigh. At that age, I did too. Talk to you soon -jt. February 14, 2008. JT Ol...
virtualsoul.org
Password anti-pattern alive and well at a financial institution | dale olds' virtualsoul
http://virtualsoul.org/blog/2012/10/11/password-anti-pattern-alive-and-well-at-a-financial-institution
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. Password anti-pattern alive and well at a financial institution. Wow I would have thought that after the years of publicity describing the evils. Of the password anti-pattern. It would not be seen in any current web site that is serious about security. Today, I tried to link an etrade account to a checking account at another institution. Here is part of the screen I got:. It stat...
virtualsoul.org
Harmonizing OAuth2, OIDC and SCIM | dale olds' virtualsoul
http://virtualsoul.org/blog/2013/03/08/harmonizing-oauth2-oidc-and-scim
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. Harmonizing OAuth2, OIDC and SCIM. Blog recently published my post. About how we combined OAuth2. In the User Account and Authentication (UAA) service. The UAA and those three protocols are now woven into the Cloud Foundry platform on many levels:. Authentication and authorization of developers managing applications on the platform. With OIDC preferred username. PhoneNumbers and ...
virtualsoul.org
Identity and Security on the Cloud Train | dale olds' virtualsoul
http://virtualsoul.org/blog/2010/06/08/identity-and-security-on-the-cloud-train
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. Identity and Security on the Cloud Train. I’ve had many conversations with Dave Kearns. Over the years in hallways, a few beer halls, and conference panel discussions at events like the Internet Identity Workshop. And the European Identity Conference. In a recent newsletter Dave riffs on my presentation. At the European Identity Conference and then concludes with this paragraph:.
virtualsoul.org
Turtles all the way down | dale olds' virtualsoul
http://virtualsoul.org/blog/2012/10/15/turtles-all-the-way-down
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. Turtles all the way down. Photo of turtles on the VMware campus courtesy of Yvonne Wong. Most of us on the Cloud Foundry identity team have been working together for just over a year. We work with a rather interesting group. That leads the larger open source community that builds Cloud Foundry. In the UK, with Joel D’sa. Vidya Valmikinathan and me in Palo Alto. Next week. I s...
virtualsoul.org
Issues with Multi-tenant Cloud Services and Corporate Identity Providers | dale olds' virtualsoul
http://virtualsoul.org/blog/2011/01/10/issues-with-multi-tenant-cloud-services-and-corporate-identity-providers
Dale olds' virtualsoul. I've proven who I am so many times the magnetic strip's worn thin — Pacing the Cage by Bruce Cockburn. Issues with Multi-tenant Cloud Services and Corporate Identity Providers. Updated 21 Jan 2011 to fix two broken links. Recently I have been trying, yet again, to understand social networking and its tools. I figure that, if people like Ben Goodman. The use cases are some that we have encountered while developing and deploying Novell’s Cloud Security Service. A tenant can quickly ...
eternallyoptimistic.com
Enterprise Identity |
http://eternallyoptimistic.com/category/enterprise-identity
Adventures of an Eternal Optimist. Skip to primary content. Skip to secondary content. Information Card Documentation List. Category Archives: Enterprise Identity. The next conversation to be had. August 13, 2014. Ok, now that CIS and Catalyst conferences are (almost) out of the way, we need to rally the identity geeks and start talking about OAuth and OpenID Connect design patterns. We need to get some public discourse going about token architectures for various real world business access scenarios.
eternallyoptimistic.com
ssl hell |
http://eternallyoptimistic.com/category/ssl-hell
Adventures of an Eternal Optimist. Skip to primary content. Skip to secondary content. Information Card Documentation List. Category Archives: ssl hell. January 9, 2013. I’m writing an iOS app. Loving it too, learning a lot. More on that in a bit. That is theoretically the worst, laziest, most insecure answer in the world and we as an industry should be castigating such a brutal security recommendation, right? But before casting stones, what *should* be done? It was issued Nov 9 2006, expiring Nov 9 2021.
eternallyoptimistic.com
Uncategorized |
http://eternallyoptimistic.com/category/uncategorized
Adventures of an Eternal Optimist. Skip to primary content. Skip to secondary content. Information Card Documentation List. When your Empire has no Clothes. July 8, 2015. How many data points does it take to call something a trend? With the hack and subsequent data dump of the internal files of Hacking Team. In the case of Sony Pictures, the effect was acutely embarrassing. Scores of Excel spreadsheets, detailing personal, business, and IT system passwords, with filenames like “website password...In the ...