Anil John: Why I Will Not Ride The (Trust) Elevator "I believe there is a place for the use of compensating controls when it comes to identity assurance, but am ambivalent about the approach that is referred to as "trust elevation". This blog post describes my understanding of the two approaches and why I believe the former is a more valid and realistic approach in the current time frame."
Craig Burton: Another Case for IDMaaS "Here is my point, a uniform cloud-based identity management system could be used to prevent this kind of thing. As it stands, every single web site has its own set of code used to prevent inappropriate access. A scenario bound to create the blatant hole I ran into."
Schnucks: Millions of Cards Exposed "Grocery story chain Schnuck Markets Inc. now says about 2.4 million debit and credit cards were likely compromised as a result of a breach of its point-of-sale network back in December (see Retailer Says 'Code' Compromised Cards)."
Vittorio Bertocci: The Windows Azure AD Application Model "In the various announcements and walkthroughs you had the chance to experience the changes in Windows Azure AD's product surface. In this (hopefully not too long, it's midnight already) post I am going to touch on some of the deeper changes that took place beneath the surface. Albeit less evident at first, some of those have far-reaching consequences you should be aware of - especially if you plan to write multitenant applications."
Mike Small: THE DIMINISHING NETWORK PERIMETER "I just returned from NISC - the National Information Security Conference - held this year in Cumbernauld in Scotland. The theme of this event was "the diminishing network perimeter." With the advent of smart phones, tablets, Kindles and BYOD, the boundaries between the work and home environment have dissolved so how do you maintain the security of your corporate network? How does this impact on the corporate network, and how much can you put into the cloud?"
Happy NSTIC-iversary! "The release of the National Strategy for Trusted Identities in Cyberspace (NSTIC) by the White House in April 2011 put forth a monumental challenge: a call for a new private-public sector partnership to create an Identity Ecosystem, where all consumers could choose from a variety of credentials that would enable more secure, convenient and privacy-enhancing transactions everyplace they go online. "
Paul Krugman Says Bitcoin is Based on Misconceptions "Economist Paul Krugman says bitcoin is an unnecessary tool for commerce that is based on the misconceptions that central banks are printing too much money and that money is a tool that can be created free from messy human complications. "
Identity Woman: Interesting events in 2013 "This is a calendar of events that I know in 2013 (and beyond). I think their interesting, I'm currently planning attending all the events in BLACK, I'm helping co-organize all the events with RED headlines. Some events will change from "interesting" to "attending" as they approach."
Identity Woman: She's Geeky Seattle: April 26-27 "She's Geeky is a kind of magical event where women geeks of all kinds, gaming geeks, linux geeks, fandom geeks, crafting geeks, beekeeping geeks, drupal geeks, raspberry pi geeks, Arduino geeks, geeks in training, come together and hang out learning from each other."
Coming to the IDESG Plenary in Santa Clara May 9-10: Identity Ecosystem Use Case Workshop "The Identity Ecosystem Steering Group (IDESG) is shifting into high gear to develop the policies, standards, and accreditation processes for the Identity Ecosystem Framework. The upcoming May 9-10 Santa Clara, Calif., plenary will feature the Management Council discussing the IDESG's work plan for the months ahead, reports by the NSTIC pilot projects on their progress in catalyzing the marketplace in key sectors, and, very important, a workshop that will identify a consensus set of use cases - specific examples of the Identity Ecosystem in use in real world applications."
Identity Woman: Online Community Unconference "Its BACK!" "May 21st at the Computer History Museum I am really excited to be working with a super awesome crew of leaders of the Online Community Manager Tribe - or OCTribe. We have been considering reviving the event and the pieces have finally come together to do it."
Federating Communities, Nations and Markets in a Big-Data Economy: Lessons learned from Academia to Governments and Enterprise... "European Identity & Cloud Conference 2013 16.05.2013 10:30-11:30 Track: Trust Frameworks Combined Session Joni Brennan, Kantara Initiative, Dave Kearns, KuppingerCole, Aljosa Pasic, Atos Research & Innovation, Colin Wallis, New Zealand Government The great thing about NSTIC, EUSTIC and other cyber focused identity strategies is that they attract more people and communities to the discussion. The not so great thing is that discussions have to start over and take everyone through the history and journey. What early adopters know and have practiced for some time only becomes common knowledge when the last person understands the concepts. To be clear, this is not a workshop. This is where Kantara Initiative brings together experienced Federation practitioners from around the world to answer questions like: Why do some federations succeed while others fail? What does the business of federation look like? What is inter-federation and how far are we from it?"
SAML, OAuth, SCIM, XACML "European Identity & Cloud Conference 2013 15.05.2013 14:00-15:00 Track: How to Build your IAM/IAG Infrastructure the Right Way - and Support Business Today Combined Session OASIS Panel: ID Protocols - Out with the Old and in with the New? Craig Burton, KuppingerCole, Peter Cummings, KuppingerCole, David Brossard, Axiomatics AB, Dr. Michael B. Jones, Microsoft, Dr. Paul Madsen, Ping Identity, Darran Rolls, SailPoint Each speaker will cover the pros and cons of one protocol and take questions from the audience. "
Call For Papers - Open Identity Summit 2013 "September 10th - 11th 2013, Kloster Banz, Germany Deadline for electronic submissions: May 15th, 2013 The aim of Open Identity Summit 2013 is to link practical experiences and requirements with academic innovations. Focus areas will be Research and Applications in the area of Identity Management and Open Source with a special focus on Cloud Computing."
eID & ePass 5th edition "National eID & ePassport Conference - the Global Forum on the drivers behind the digitalization of citizen ID documents proudly announce the 5th edition in BERLIN 2013, 28th & 29th of October @Intercontinental Berlin."