3 ms·

For the "stay on top of patches" thing, that's why I'm a fan of sandstorm.io. It makes a bunch of sense to me. And, no, I don't want to broadcast info the eve

For the "stay on top of patches" thing, that's why I'm a fan of sandstorm.io. It makes a bunch of sense to me. And, no, I don't want to broadcast info the everyone. A blog won't cut it. I want to restrict content to some people with authorization.

LinuxBender 9y ago
For those cases, I have used software such as phpBB. Getting people to create a login is unpopular however. Some friends and I shared things similar to what one might find on FB. The distinct advantage was that our photos belonged to us and FB did not have access. The advantage and disadvantage is that my friends had to create accounts on my server. Centralized authentication services are low friction and high risk. If we move such things to another centralized service, it will just become the next target for snooping.
- VikingCoder 9y ago
  I think OAuth makes some sense. So, use your Google or Facebook account to log in, but that's it. They don't get more access to our data.
  - beagle3 9y ago
    ... until they want it. And then they just give themselves an auth token and access the data. "Unfortunately, ", said Facebook's spokesman, "we had a bug in our system that authorized our webcrawler to login and crawl every single phpBB or other OAuth site. We will surely delete the data within the next year", he added while winking at the intelligence community representatives in the crowd. -- a few years from now.
    - VikingCoder 9y ago
      Ugh, that's evil. Yeah, that makes sense. Good thing to think about.
  - LinuxBender 9y ago
    I suppose one sensible way to handle this would be if a group of technical friends ran a distributed group of OpenLDAP servers with OAuth and SAML2 providers in front of them. That way, if whomever was running the master could not maintain it any more, another friend could convert their replica to master and people opt out of the defunct auth provider. The collective group of friends could then host services that use the common authentication framework. Between OpenLDAP, OAuth and SAML2, that should cover most self hosted applications.

LinuxBender 9y ago

For those cases, I have used software such as phpBB. Getting people to create a login is unpopular however. Some friends and I shared things similar to what one might find on FB. The distinct advantage was that our photos belonged to us and FB did not have access. The advantage and disadvantage is that my friends had to create accounts on my server. Centralized authentication services are low friction and high risk. If we move such things to another centralized service, it will just become the next target for snooping.

VikingCoder 9y ago
I think OAuth makes some sense. So, use your Google or Facebook account to log in, but that's it. They don't get more access to our data.
- beagle3 9y ago
  ... until they want it. And then they just give themselves an auth token and access the data. "Unfortunately, ", said Facebook's spokesman, "we had a bug in our system that authorized our webcrawler to login and crawl every single phpBB or other OAuth site. We will surely delete the data within the next year", he added while winking at the intelligence community representatives in the crowd. -- a few years from now.
  - VikingCoder 9y ago
    Ugh, that's evil. Yeah, that makes sense. Good thing to think about.
- LinuxBender 9y ago
  I suppose one sensible way to handle this would be if a group of technical friends ran a distributed group of OpenLDAP servers with OAuth and SAML2 providers in front of them. That way, if whomever was running the master could not maintain it any more, another friend could convert their replica to master and people opt out of the defunct auth provider. The collective group of friends could then host services that use the common authentication framework. Between OpenLDAP, OAuth and SAML2, that should cover most self hosted applications.