lukeh

33 ms·

1. 421.▲
   by lukeh 12y ago

   Wow. A really beautiful article.
2. 422.▲
   by lukeh 12y ago

   Wow. I admire this amount of attention to detail (with the custom USB to AUI interface) for a ”fun” project. Nice work.
3. 423.▲
   by lukeh 12y ago

   FWIW I took a recent look at porting the Apple Objective-C runtime to Linux (with the vague idea that if Apple open source Swift, it might be easier to get it working with their own runtime rather than the GNUstep one). One nice thing about
4. 424.▲
   by lukeh 12y ago

   Also: NEXTSTEP.
5. 425.▲
   by lukeh 13y ago

   http://tools.ietf.org/html/draft-howard-gss-browserid https://github.com/PADL/libbrowserid
6. 426.▲
   by lukeh 13y ago

   s/Service Provider/Identity Provider (IdP)/ Service Provider is usually a synonym for Relying Party (RP), which is the service that's relying on your authenticated identity, typically a web server. The rest, all good poi
7. 427.▲
   by lukeh 13y ago

   Well, we did build a Persona SSP so you could use it with Outlook, Exchange, CIFS. The protocol spec is in draft-howard-gss-browserid. Very little interest though.
8. 428.▲
   by lukeh 13y ago

   I wasn't recommending GSS-API per se, just the message protection services from 3961/4121. It was just a suggestion. Feel free to roll your own!
9. 429.▲
   by lukeh 13y ago

   GSS-API says nothing about any of the things you mention, it's an abstract standard (like SASL) that can be profiled for many different authentication and message integrity/confidentiality systems. The DES-based Kerberos GSS-API m
10. 430.▲
    by lukeh 13y ago

    Or, use RFC 4121. It's not just for Kerberos: GSS EAP (Moonshot), BrowserID (Persona), and SAML EC all use it for message integrity and privacy. And those specifications were all written by smart people (save for myself, at least) who
11. 431.▲
    by lukeh 13y ago

    Agreed. It can be fun and/or sometimes necessary to roll your own, but, at least get it reviewed by someone who knows what they're doing - anyone on the IETF Kitten working group, for example (for a SASL mechanism).
12. 432.▲
    by lukeh 13y ago

    Moreover, Reveal: amazing.
13. 433.▲
    by lukeh 13y ago

    What about We Feel Fine [1], saw a TED talk on this years ago and loved it. [1] http://www.wefeelfine.org
14. 434.▲
    by lukeh 13y ago

    Also, Nico Muhly's Mothertongue. http://nicomuhly.bandcamp.com/album/mothertongue
15. 435.▲
    by lukeh 13y ago

    I met Michael briefly after the gig, lovely chap and keen cyclist. Did you catch the Qatsi trilogy at Hamer Hall last year?
16. 436.▲
    by lukeh 13y ago

    Heh. I just saw Einstein twice in the last week. Great show, and I remember reading this article last year. They are incredible players.
17. 437.▲
    by lukeh 13y ago

    Wow, Jim Allchin, that is pretty funny. Who would have thought? (Here's a shameless plug for my new record, FWIW. http://music.lukehoward.com . I have also worked as a coffee-making intern in a studio. And written some softw
18. 438.▲
    by lukeh 14y ago

    Article author here. Many native apps of course will use HTTPS and will be able to use ordinary Persona. The protocol described in the article is for native applications that need replay detection, key exchange, mutual authentication, etc (
19. 439.▲
    by lukeh 14y ago

    Likewise. We want to extend it to non-web protocols where other attempts such as SPKM and PKU2U have either failed or not got much traction beyond a particular vendor implementation (respectively).
20. 440.▲
    by lukeh 14y ago

    Having a browser native client will help.
21. 441.▲
    by lukeh 14y ago

    We (PADL) have developed a SASL/GSS mechanism for Persona, which you can get here: https://github.com/PADL/gss_browserid Internet Draft here: http://tools.ietf.org/html/draft-howard-gss-browserid-00 This lets you use Persona to authenti
22. 442.▲
    by lukeh 14y ago

    The Open Group's DCOM implementation wasn't open source. Also, MSRPC/DCOM is just an RPC layer, the real value/lock-in was in the protocols built on top of them, such as Active Directory. dcerpc.org has a maintained version of the OSF DCE R
23. 443.▲
    by lukeh 14y ago

    This is probably only of historical interest but: in 2001 I started building a Linux-based Active Directory replacement, XAD. I first demonstrated it in 2003 and I think we shipped around 2005. The underlying technology was OpenLDAP and Hei
24. 444.▲
    by lukeh 14y ago

    And the kernel changed from Mach 2.5 to Mach 3, see http://en.wikipedia.org/wiki/XNU .
25. 445.▲
    by lukeh 14y ago

    Excuse the pedantry, but it was Driver Kit in NEXTSTEP.
26. 446.▲
    by lukeh 15y ago

    It's also a federated authentication project for the non-web: http://project-moonshot.org/
27. 447.▲
    by lukeh 16y ago

    I too have fond memories of Trumpet. I remember even then (I must have been 15 or so) thinking that this software was so important and likely undervalued. Of course, I used it and never donated as I didn't have any money - something I inten