Browse by Tags

• Blog
• CardSpace
• hacking
• Privacy
• Research

• Kim Cameron’s excellent adventure

  The admission system was based on what is technically called “bearer” tokens (wristbands). Such tokens are NOT actually personalized in any way, or tied to the identity of the person they are given to through some kind of proof. If you “have” the token, you ARE the bearer of the token. Read More... Posted Thursday, October 30, 2008 2:13 PM from Kim Cameron's Identity Weblog | 1 Comments Filed under: Blog, hacking, Believe it or not, Attacks

• Hole in Google SSO service

  The "do-it-yourself" protocol was a red carpet for "inside jobs"... under the guise of being SAML Read More... Posted Monday, September 15, 2008 1:16 AM from Kim Cameron's Identity Weblog | 2 Comments Filed under: Privacy, hacking, Believe it or not, Attacks

• How to set up your computer so people can attack it

  A tutorial on configuring your computer so it can be taken over by students from Ruhr Universitat Read More... Posted Sunday, June 01, 2008 12:29 PM from Kim Cameron's Identity Weblog | 1 Comments Filed under: CardSpace, hacking, Believe it or not, Attacks, Research