Humans are notoriously poor at weighing risk. We use emotion, rather than reason, to judge what’s truly dangerous, which is why most Americans being afraid of handguns in the home more than swimming pools when it comes to child safety. And it’s the same with online security. People worry about scary hackers penetrating through firewalls and stealing passwords…
From Password Reset Mechanisms to OpenID: A Brief Discussion of Online Password Security
For those not familiar, OpenID is a system that allows you to sign in to multiple websites using one identity. So, rather than have a different username and password for each site, you would just sign into each one using your OpenID credentials. In addition to the convenience this offers, there’s a security benefit in that the websites…
How to Sign In to Facebook Using Google
So you have a Facebook account, right? And you use Google Mail, right? Good, then this is for you. It’s just recently become possible for you to sign into Facebook automagically, i.e. without entering your Facebook username and password, just because you’re already signed into GMail. It’s full of win. The wholesomeness that allows this to happen is…
Verisign PIP OpenID Delegation Code
So I just started using the PIP service from Verisign to handle my OpenID. It’s a pretty solid OpenID implementation from what I’ve seen and has the added bonus of supporting two-factor authentication via the token seen above. But I was having a problem with delegation, which is where you can enter your own URL for your identifier…