Diapositive 1

Total Page:16

File Type:pdf, Size:1020Kb

Diapositive 1 Social networking task force Jeff Jaffe 14 May 2012 1 What we’ve done • Tried to identify specific standards opportunities • Decided we first needed to create an architecture block diagram to show relationships • Made some progress • Liaison calls with Open Social • Initial ideas on next steps 2 Today • Ann Bassetti: Block diagram, scenarios, narrative • Jeff Jaffe: Standardization possibilities • Steve Holbrook: Workshop opportunities • Discussion 3 Desired output • Work plan for block diagram • With specific comments • Guidance on proposed standards activities • Consensus on workshop scoping 4 Ann Bassetti: • Block diagram • Scenarios • Narratives • ... 5 DRAFT Social headlights Teams & Contributorstask force: • Federated Social Web XGDIAGRAMS, / Community Group • Social Business Community Group • Social Headlights Task ForceSCENARIOS, ... Particular thanks to: Lloyd Fassett Virginie Galindo Rich Rogers Stéfane Fermigier David Robinson Evan Prodromou Alberto Manuel Ann SteveBassetti Holbrook Blaine Cook 14 May 2012Harry Halpin Ruinan Sun Jeff Jaffe Laurent Walter Goix ... apologies to anyone overlooked! 6 DRAFT Social headlights What we're askingtask force: & doing Seeking to determine: DIAGRAMS, • Essential components ofSCENARIOS, "social networking" ... • Relationships between parts • Characteristic scenarios and narratives • Basis set and tests • What technologies and standards exist? • Where was that work done?Ann Bassetti • Is more needed? 14 May 2012 • Should W3C play a role? 7 DRAFT Social headlights Essential components?task force: • A question covering suchDIAGRAMS, a large area… • Methodology SCENARIOS, ... • Criss-crossing the social web principles • Listing all the components • Classifying them • Into groups, by standardization body, by technology Ann Bassetti 14 May 2012 Here is the result … 8 What are essential components of "social networking" or "social web"? Harry Halpin, Evan Prodromou based on work in Federated Social Web group 9 David Robinson additions (annotations by Ann Bassetti) " from here from " Stteams moved "Activity "Activity moved *NOTE: needs to be checked to make sure I found all additions and changes 10 Human interactions Ann Bassetti additions Key Sharing Messaging Group Dynamics Newsfeed Reactions (e.g., Community, Standardized at W3C Text E-mail like Data structures Comments Team) W3C Community Group • SMTP • Atom • Salmon Links Create • SIOC Standardized at another body • OExchange Text chat (includes • ActivityStreams Standardization candidate Re-share 1:1 and 1:multiple; Join / Un-join No standards body Images also includes "Live Subscription Known IP issues Chat" such as with End / Close • OStatus Like / rating Video Helpline person) •XMPP Membership list(s) Embedding Recommendations Audio •IRC • oEmbed Group list(s) • Embedded Tasks Voice chat Experience Tags • Jingle Distribution list(s) About the human * Events • STP Alerts / Notifications Identity Social Graph Profile Workflow Video chat •Routing •Given/family Contacts Profile page ?? name •Signatures Forward / reply • Portable Contacts • (might be part of Username(s) • FOAF Profile data Location others or part of •Assigned • vCard •hCard 'Sharing") Ubiquitous attributes number(s) (e.g., • XFN •vCard Bookmarks governmental) •ActivityStrea.ms •Threading Threaded • .... Groups •Portable Contacts Status discussions (e.g., •Sorting (by 'likes', 'most recent',...) •... •Presence bulletin board; •Hyperlinks Addressing Brands •Microblog includes "Idea •Variable device display •snail mail address Presence Generation / Jam") •Variable security settings •email address Access control ?? •... •URI Location *Note: inside corporate firewall one has professional Skills Technical foundations profile, separate from one's personal profile. Client APIs Widgets Analytics Real-time Login credentials Data structures Notifications • OpenID • JSON (Activity Streams, Portable Contacts) JavaScript Embedded Engagement • OAuth • XML (Atom, XRD) • OpenSocial • OpenSocial Mobile • WebID • RDF (FOAF, SIOC) • WebIntents Scoring • Browser ID External Browser Content 'structures' REST Recommendations • Wiki • OpenSocial Discovery • Blog • ActivityPub Trends •Webfinger, LRDD • HTML+ • Twitter •SWD •Open Graph • Microblog 11 Human interactions All contributions merged; no technologies Sharing / Messaging Group Dynamics Collaboration / Reactions Collaboration (e.g., Community, Newsfeed E-mail like Comments Team) Text Data structures Text chat (includes Create Re-share Document 1:1 and 1:multiple; Subscription also includes "Live Join / Un-join Like / rating Links Chat" such as with Embedding Helpline person) End / Close Recommendations Images Alerts / Voice chat Membership list(s) Notifications Tags Video Video chat Group list(s) Audio Forward / reply Distribution list(s) Tasks (might be part of About the human * others or part of Events 'Sharing") Identity Social Graph Profile •Given/family Contacts Profile page ?? Workflow Connected objects name • Routing •User name(s) Groups Profile data •Signatures Mobile Ubiquitous attributes •Assigned • number(s) (e.g., Brands Presence Location Threading •Sorting (by 'likes', 'most recent',...) governmental) • Access control ?? Location Bookmarks •Hyperlinks .... •Variable device display Skills Status •Variable security settings Addressing •Presence •Search •snail mail address •Microblog •Biz/Mining Intelligence (??) •email address •... •URI * Note: professional profile, inside corporate firewall, Technical foundations is separate from one's personal profile. Client APIs Widgets Analytics Real-time Login credentials Data structures Content Notifications 'structures' JavaScript Embedded Engagement • Wiki Mobile Discovery • Blog REST External Scoring • HTML+ Browser • Microblog Recommendations Trends 12 Adding technologies, standards, and who is doing. (Not complete) Human interactions Key Sharing / Messaging Group Dynamics Collaboration / Reactions Standardized at W3C Collaboration (e.g., Community, Newsfeed E-mail like Comments W3C Community Group Team) Text • SMTP Data structures • Salmon Standardized at another body Create • Atom Standardization candidate Document Text chat (includes • SIOC Re-share Independent standard group • CMIS 1:1 and 1:multiple; Join / Un-join • ActivityStreams also "Live Chat" • JRD (XRD, JSON) Public standard Links such as with End / Close Like / rating No standards body • OExchange Helpline person) Subscription •XMPP Known IP issues Membership list(s) • OStatus Recommendations Images •IRC Group list(s) Embedding Video Voice chat • oEmbed • Jingle Distribution list(s) • Embedded Audio • STP Experience Tasks Video chat Alerts / Notifications Events Forward / reply (might be part of Workflow others or part of •Routing 'Sharing") •Signatures Threaded Location discussions (e.g., bulletin board; Bookmarks includes "Idea Generation / Jam") Status •Presence Connected objects •Microblog •Salmon OMA MobSocNet Mobile •OMA Push 13 Adding technologies, standards, and who is doing. (Not complete) Key Standardized at W3C W3C Community Group Standardized at another body Standardization candidate Independent standard group Public standard No standards body Known IP issues About the human * Identity Social Graph Profile •Given/family Contacts Profile page ?? name • Portable Contacts •User name(s) • FOAF Profile data •Assigned • vCard •hCard number(s) (e.g., • XFN •vCard governmental) •ActivityStreams • .... Groups •Portable Contacts •OpenSocial Addressing Brands •snail mail address Presence •email address Access control ?? •URI Location *Note: inside corporate firewall one has professional Skills profile, separate from one's personal profile. 14 Adding technologies, standards, and who is doing. (Not complete) Key Standardized at W3C W3C Community Group Standardized at another body Standardization candidate Independent standard group Public standard No standards body Known IP issues Technical foundations Client APIs Widgets Analytics Real-time Login credentials Data structures Content Notifications •JSON 'structures' JavaScript Embedded Engagement • OpenID • • Wiki Mobile • OAuth Activity Streams • • Blog REST External Scoring WebID •Portable Contacts • HTML+ Browser • Browser ID •XML • Microblog Recommendations •Atom Discovery •XRD Trends •Webfinger, LRDD •RDF •SWD •FOAF •Open Graph •SIOC •HTML5 15 Adding technologies, standards, and who is doing. (Not complete) Key Standardized at W3C W3C Community Group Standardized at another body Standardization candidate Independent standard group Public standard No standards body Known IP issues Ubiquitous attributes •Threading •Sorting (by 'likes', 'most recent',...) •Hyperlinks •Variable device display •Variable security settings •Search •Biz/Mining Intelligence (??) •... 16 "Mobile" equilibrium of social network specifications Laurent Walter Goix contribution OMA MobSocNet OpenSocial OMA Push OStatus OExchange ActivityStreams WebFinger Portable Contacts OpenID Key Standardized at W3C W3C Community Group Salmon Host-Meta Standardized at another body Standardization candidate Independent standard group Public standard PubSubHubbub No standards body Known IP issues XRD/S 17 Layer view Blaine Cook contribution (Not complete.) 18 Layer view, continued 19 DRAFT Social headlights Additional perspectivestask force: • Having described the social web components by categories, making sureDIAGRAMS, everything is there… • Human interaction SCENARIOS, ... • About the human • Ubiquitous attributes • Technical foundations • We may want to organizeAnn items Bassetti in a different way
Recommended publications
  • Seamless Interoperability and Data Portability in the Social Web for Facilitating an Open and Heterogeneous Online Social Network Federation
    Seamless Interoperability and Data Portability in the Social Web for Facilitating an Open and Heterogeneous Online Social Network Federation vorgelegt von Dipl.-Inform. Sebastian Jürg Göndör geb. in Duisburg von der Fakultät IV – Elektrotechnik und Informatik der Technischen Universität Berlin zur Erlangung des akademischen Grades Doktor der Ingenieurwissenschaften - Dr.-Ing. - genehmigte Dissertation Promotionsausschuss: Vorsitzender: Prof. Dr. Thomas Magedanz Gutachter: Prof. Dr. Axel Küpper Gutachter: Prof. Dr. Ulrik Schroeder Gutachter: Prof. Dr. Maurizio Marchese Tag der wissenschaftlichen Aussprache: 6. Juni 2018 Berlin 2018 iii A Bill of Rights for Users of the Social Web Authored by Joseph Smarr, Marc Canter, Robert Scoble, and Michael Arrington1 September 4, 2007 Preamble: There are already many who support the ideas laid out in this Bill of Rights, but we are actively seeking to grow the roster of those publicly backing the principles and approaches it outlines. That said, this Bill of Rights is not a document “carved in stone” (or written on paper). It is a blog post, and it is intended to spur conversation and debate, which will naturally lead to tweaks of the language. So, let’s get the dialogue going and get as many of the major stakeholders on board as we can! A Bill of Rights for Users of the Social Web We publicly assert that all users of the social web are entitled to certain fundamental rights, specifically: Ownership of their own personal information, including: • their own profile data • the list of people they are connected to • the activity stream of content they create; • Control of whether and how such personal information is shared with others; and • Freedom to grant persistent access to their personal information to trusted external sites.
    [Show full text]
  • Bibliography of Erik Wilde
    dretbiblio dretbiblio Erik Wilde's Bibliography References [1] AFIPS Fall Joint Computer Conference, San Francisco, California, December 1968. [2] Seventeenth IEEE Conference on Computer Communication Networks, Washington, D.C., 1978. [3] ACM SIGACT-SIGMOD Symposium on Principles of Database Systems, Los Angeles, Cal- ifornia, March 1982. ACM Press. [4] First Conference on Computer-Supported Cooperative Work, 1986. [5] 1987 ACM Conference on Hypertext, Chapel Hill, North Carolina, November 1987. ACM Press. [6] 18th IEEE International Symposium on Fault-Tolerant Computing, Tokyo, Japan, 1988. IEEE Computer Society Press. [7] Conference on Computer-Supported Cooperative Work, Portland, Oregon, 1988. ACM Press. [8] Conference on Office Information Systems, Palo Alto, California, March 1988. [9] 1989 ACM Conference on Hypertext, Pittsburgh, Pennsylvania, November 1989. ACM Press. [10] UNIX | The Legend Evolves. Summer 1990 UKUUG Conference, Buntingford, UK, 1990. UKUUG. [11] Fourth ACM Symposium on User Interface Software and Technology, Hilton Head, South Carolina, November 1991. [12] GLOBECOM'91 Conference, Phoenix, Arizona, 1991. IEEE Computer Society Press. [13] IEEE INFOCOM '91 Conference on Computer Communications, Bal Harbour, Florida, 1991. IEEE Computer Society Press. [14] IEEE International Conference on Communications, Denver, Colorado, June 1991. [15] International Workshop on CSCW, Berlin, Germany, April 1991. [16] Third ACM Conference on Hypertext, San Antonio, Texas, December 1991. ACM Press. [17] 11th Symposium on Reliable Distributed Systems, Houston, Texas, 1992. IEEE Computer Society Press. [18] 3rd Joint European Networking Conference, Innsbruck, Austria, May 1992. [19] Fourth ACM Conference on Hypertext, Milano, Italy, November 1992. ACM Press. [20] GLOBECOM'92 Conference, Orlando, Florida, December 1992. IEEE Computer Society Press. http://github.com/dret/biblio (August 29, 2018) 1 dretbiblio [21] IEEE INFOCOM '92 Conference on Computer Communications, Florence, Italy, 1992.
    [Show full text]
  • North Korea Purloins Russian Technology to Add Teeth to Its Military Caliber
    NEW DELHI TIMES R.N.I. No 53449/91 DL-SW-01/4124/17-19 (Monday/Tuesday same week) (Published Every Monday) New Delhi Page 16 Rs. 7.00 22 - 28 July 2019 Vol - 29 No. 25 Email : [email protected] Founder : Dr. Govind Narain Srivastava ISSN -2349-1221 Modi irradiates Christian victims of loopholed Defence Muslim oppression Procurement rot in Thailand With the world at large progressing with positive The country code of 66 on the incoming call speed and the concept of globalization seeing was unfamiliar, as was the number. its frutation with the spread of co-operative Usually I ignore such calls as they invariably and collaborative networks worldwide; among are threats from the worldwide network of the civic, economic and political spheres, the my fans or duct-cleaning companies worried defence sector of any nation in the modern about the air I breathe. But on that day, I took era becomes the top-priority... a chance. The other option... By Dr. Ankit Srivastava Page 3 By Tarek Fatah Page 2 North Korea purloins Russian technology to add teeth to its Military Caliber By NDT Special Bureau Page 2 Babies growing up with animals, Belief aids to climb the ladder Iran and its prospects for build stronger immune system of Success Democracy I meet so many mothers who won’t let their children walk All of us are on a daily struggle to be successful so as to be More than 80 million Iranians at home or living across the barefoot in the house or the park, won’t let them touch able to establish ourselves in society.
    [Show full text]
  • Protokolle Im Fediverse
    Protokolle im Fediverse Jens Lechtenbörger Oktober 2018 1 Einleitung Wie bereits diskutiert setzen Dezentralisierung und Föderation gemeinsame Standards voraus. Während das Fediverse als Federated Universe im engeren Sinne Funktionalitäten von Social Media basierend auf freier Software und föderierten Servern umfasst, gehören im weiteren Sinne auch andere Formen von Kommunikation dazu. Zu Protokollen, die mir besonders vielversprechend erscheinen, geben die folgenden Abschnitte weitere Informationen bzw. führen zu externen Quellen. 2 ActivityPub Als prominenter Vertreter von Fediverse-Protokollen im engeren Sinne wurde im Januar 2018 ActivityPub vom World Wide Web Consortium (W3C) stan- dardisiert. Der Implementation Report dokumentiert den Stand der Umset- zung von ActivityPub durch diverse Anwendungen. Lesen Sie die ActivityPub-Spezikation so weit, dass Sie folgende Fragen beantworten können: Was sind Actors, Objects und Activities? Welche Rollen spielen Inbox und Outbox für die Kommunikation? 3 XMPP Das klassische Beispiel föderierter Internet-Dienste ist die E-Mail für asyn- chrone Kommunikation (auch für Gruppenkommunikation, mit Anhängen aller Art). Für synchrone Echtzeit-Chats bietet das Extensible Messaging and Pres- ence Protocol (XMPP) einen auf dem Austausch von XML-Nachrichten basierenden oenen Standard, der aus dem um die Jahrtausendwende en- twickelten Jabber hervorgegangen ist. Heute wird XMPP nicht nur in 1 Messengern genutzt, sondern auch als Middleware im Internet der Dinge. XMPP-Server bilden analog zu E-Mail-Servern eine Föderation, so dass Be- nutzer unterschiedlicher, dezentral administrierter Server miteinander kom- munizieren können. Die Kommunikation setzt sogenannte Jabber IDs (JIDs) voraus, die zunächst wie E-Mail-Adressen aussehen ([email protected]), aber darüber hinaus auch Client-Anwendungen auf unterschiedlichen Geräten identi- zieren können ([email protected]/work-pc).
    [Show full text]
  • 2.3 Blockchain
    POLITECNICO DI TORINO Corso di Laurea Magistrale in Ingegneria Informatica - Data Science Tesi di Laurea Magistrale Supporting the portability of profiles using the blockchain in the Mastodon social network Relatore Candidato prof. Giovanni Squillero Alessandra Rossaro Anno Accademico 2018-2019 École polytechnique de Louvain Supporting the portability of profiles using the blockchain in the Mastodon social network Authors: Alessandra ROSSARO, Corentin SURQUIN Supervisors: Etienne RIVIERE, Ramin SADRE Readers: Lionel DRICOT, Axel LEGAY, Giovanni SQUILLERO Academic year 2018–2019 Master [120] in Computer Science Acknowledgements We would like to thank anyone who made the writing of this thesis possible, directly or indirectly. First of all, we would like to thank our supervisors, Prof. Etienne Riviere and Prof. Ramin Sadre for their continous support and advice during the year. We would never have gone this far without them. Secondly, we thank Lionel Dricot, Prof. Axel Legay and Prof. Giovanni Squillero for accepting to be the readers of this thesis. Alessandra First of all, I would like to thank my family, my parents Claudia and Alberto, my brother Stefano and my sister Eleonora, that from the beginning of my studies believed in me, every time urging me to give more and sustaining me each time that I had difficulties. They are my strength and I feel really lucky to have them in my life. Another thanks is to my friends, to Soraya, Beatrice, Sinto and Stefano and especially to Matteo and Edoardo that each time that I needed, remember me to believe in myself and don’t give up. Thank you, sincerely! I would like to thank also my partner, Corentin, because we were a great team, sometimes with some misunderstandings, but I appreciated to work at this project with him! Corentin I must express my deep gratitude to my family and friends for their moral support.
    [Show full text]
  • Challenges in the Decentralised Web: the Mastodon Case∗
    Challenges in the Decentralised Web: The Mastodon Case∗ Aravindh Raman1, Sagar Joglekar1, Emiliano De Cristofaro2;3, Nishanth Sastry1, and Gareth Tyson3;4 1King’s College London, 2University College London, 3Alan Turing Institute, 4Queen Mary University of London faravindh.raman,sagar.joglekar,[email protected], [email protected], [email protected] Abstract cols to let instances interact and aggregate their users to offer a globally integrated service. The Decentralised Web (DW) has recently seen a renewed mo- DW platforms intend to offer a number of benefits. For ex- mentum, with a number of DW platforms like Mastodon, Peer- ample, data is spread among many independent instances, thus Tube, and Hubzilla gaining increasing traction. These offer al- possibly making privacy-intrusive data mining more difficult. ternatives to traditional social networks like Twitter, YouTube, Data ownership is more transparent, and the lack of centralisa- and Facebook, by enabling the operation of web infrastruc- tion could make the overall system more robust against techni- ture and services without centralised ownership or control. cal, legal or regulatory attacks. Although their services differ greatly, modern DW platforms mostly rely on two key innovations: first, their open source However, these properties may also bring inherent chal- software allows anybody to setup independent servers (“in- lenges that are difficult to avoid, particularly when consid- stances”) that people can sign-up to and use within a local ering the natural pressures towards centralisation in both so- community; and second, they build on top of federation pro- cial [12, 49] and economic [42] systems.
    [Show full text]
  • Funkwhale (Semblable À : Soundcloud Et Grooveshark) Copie D’Écran, Funkwhale
    La Fée diverse déploie ses ailes Il n’est pas si fréquent que l’équipe Framalang traduise un article depuis la langue italienne, mais la récapitulation bien documentée de Cagizero était une bonne occasion de faire le point sur l’expansion de la Fediverse, un phénomène dont nous nous réjouissons et que nous souhaitons voir gagner plus d’amplitude encore, tant mieux si l’article ci-dessous est très lacunaire dans un an ! Article original : Mastodon, il Fediverso ed il futuro decentrato delle reti sociali Traduction Framalang : alainmi, Ezelty, goofy, MO Mastodon, la Fediverse et l’avenir des réseaux décentralisés par Cagizero Peu de temps après une première vue d’ensemble de Mastodon il est déjà possible d’ajouter quelques observations nouvelles. Tout d’abord, il faut noter que plusieurs personnes familières de l’usage des principaux médias sociaux commerciaux (Facebook, Twitter, Instagram…) sont d’abord désorientées par les concepts de « décentralisation » et de « réseau fédéré ». En effet, l’idée des médias sociaux qui est répandue et bien ancrée dans les esprits est celle d’un lieu unique, indifférencié, monolithique, avec des règles et des mécanismes strictement identiques pour tous. Essentiellement, le fait même de pouvoir concevoir un univers d’instances séparées et indépendantes représente pour beaucoup de gens un changement de paradigme qui n’est pas immédiatement compréhensible. Dans un article précédent où était décrit le média social Mastodon, le concept d’instance fédérée était comparé à un réseau de clubs ou cercles privés associés entre eux. Certains aspects exposés dans l’article précédent demandent peut-être quelques éclaircissements supplémentaires pour celles et ceux qui abordent tout juste le concept de réseau fédéré.
    [Show full text]
  • Decentralized Identifier WG F2F Sessions
    Decentralized Identifier WG F2F Sessions Day 1: January 29, 2020 Chairs: Brent Zundel, Dan Burnett Location: Microsoft Schiphol 1 Welcome! ● Logistics ● W3C WG IPR Policy ● Agenda ● IRC and Scribes ● Introductions & Dinner 2 Logistics ● Location: “Spaces”, 6th floor of Microsoft Schiphol ● WiFi: SSID Publiek_theOutlook, pwd Hello2020 ● Dial-in information: +1-617-324-0000, Meeting ID ● Restrooms: End of the hall, turn right ● Meeting time: 8 am - 5 pm, Jan. 29-31 ● Breaks: 10:30-11 am, 12:30-1:30 pm, 2:30-3 pm ● DID WG Agenda: https://tinyurl.com/didwg-ams2020-agenda (HTML) ● Live slides: https://tinyurl.com/didwg-ams2020-slides (Google Slides) ● Dinner Details: See the “Dinner Tonight” slide at the end of each day 3 W3C WG IPR Policy ● This group abides by the W3C patent policy https://www.w3.org/Consortium/Patent-Policy-20040205 ● Only people and companies listed at https://www.w3.org/2004/01/pp-impl/117488/status are allowed to make substantive contributions to the specs ● Code of Conduct https://www.w3.org/Consortium/cepc/ 4 Today’s agenda 8:00 Breakfast 8:30 Welcome, Introductions, and Logistics Chairs 9:00 Level setting Chairs 9:30 Security issues Brent 10:15 DID and IoT Sam Smith 10:45 Break 11:00 Multiple Encodings/Different Syntaxes: what might we want to support Markus 11:30 Different encodings: model incompatibilities Manu 12:00 Abstract data modeling options Dan Burnett 12:30 Lunch (brief “Why Are We Here?” presentation) Christopher Allen 13:30 DID Doc Extensibility via Registries Mike 14:00 DID Doc Extensibility via JSON-LD Manu
    [Show full text]
  • On the Security of Single Sign-On
    On the Security of Single Sign-On Vladislav Mladenov (Place of birth: Pleven/Bulgaria) [email protected] 30th June 2017 Ruhr-University Bochum Horst G¨ortz Institute for IT-Security Chair for Network and Data Security Dissertation zur Erlangung des Grades eines Doktor-Ingenieurs der Fakult¨atf¨urElektrotechnik und Informationstechnik an der Ruhr-Universit¨atBochum First Supervisor: Prof. Dr. rer. nat. J¨org Schwenk Second Supervisor: Prof. Dr.-Ing. Felix Freiling www.nds.rub.de Abstract Single Sign-On (SSO) is a concept of delegated authentication, where an End- User authenticates only once at a central entity called Identity Provider (IdP) and afterwards logs in at multiple Service Providers (SPs) without reauthenti- cation. For this purpose, the IdP issues an authentication token, which is sent to the SP and must be verified. There exist different SSO protocols, which are implemented as open source libraries or integrated in commercial products. Google, Facebook, Microsoft and PayPal belong to the most popular SSO IdPs. This thesis provides a comprehensive security evaluation of the most popular and widely deployed SSO protocols: OpenID Connect, OpenID, and SAML. A starting point for this research is the development of a new concept called malicious IdP, where a maliciously acting IdP is used to attack SSO. Generic attack classes are developed and categorized according to the requirements, goals, and impact. These attack classes are adapted to different SSO proto- cols, which lead to the discovery of security critical vulnerabilities in Software- as-a-Service Cloud Providers, eCommerce products, web-based news portals, Content-Management systems, and open source implementations.
    [Show full text]
  • Inscribing the Blockchain with Digital Signatures of Signed RDF Graphs. a Worked Example of a Thought Experiment
    Inscribing the blockchain with digital signatures of signed RDF graphs. A worked example of a thought experiment. The thing is, ad hoc hash signatures on the blockchain carry no information linking the hash to the resource for which the hash is acting as a digital signature. The onus is on the inscriber to associate the hash with the resource via a separate communications channel, either by publishing the association directly or making use of one of the third-party inscription services that also offer a resource persistence facility – you get to describe what is signed by the hash and they store the description in a database, usually for a fee, or you can upload the resource for storage, definitely for a fee. Riccardo Cassata has a couple of technical articles that expose more of the practical details: https://blog.eternitywall.it/2016/02/16/how-to-verify-notarization/ So what's published is a hexadecimal string indistinguishable from all the others which purportedly matches the hash of Riccardo's mugshot. But which? https://tineye.com/search/ed9f8022c9af413a350ec5758cda520937feab21 What’s needed is a means of creating an inscription that is not only a signature but also a resovable reference to the resource for which it acts as a digital signature. It would be even better if it were possible to create a signature of structured information, such as that describing a social media post – especially if we could leverage off’ve the W3’s recent Activity Streams standard: https://www.w3.org/TR/activitystreams-core/ An example taken from the
    [Show full text]
  • Federation Documentation Release 0.22.0
    Federation Documentation Release 0.22.0 Jason Robinson Aug 15, 2021 Contents 1 Introduction 3 1.1 Status...................................................4 1.2 Additional information..........................................4 2 Install 7 2.1 Dependencies...............................................7 2.2 Installation................................................7 3 Protocols 9 3.1 Diaspora.................................................9 3.2 ActivityPub................................................ 10 3.3 Matrix.................................................. 11 4 Usage 13 4.1 Entities.................................................. 13 4.2 Discovery................................................. 15 4.3 Fetchers.................................................. 18 4.4 Inbound.................................................. 19 4.5 Outbound................................................. 19 4.6 Django.................................................. 19 4.7 Protocols................................................. 21 4.8 Utils................................................... 21 4.9 Exceptions................................................ 23 5 Development 25 5.1 Environment setup............................................ 25 5.2 Running tests............................................... 25 5.3 Building local documentation...................................... 25 5.4 Contact for help............................................. 26 6 Projects using federation 27 7 Changelog 29 7.1 [0.22.0] - 2021-08-15.........................................
    [Show full text]
  • K-ICT · Ver.2017 –
    http://www.tta.or.kr K-ICT Ver.2017 – /SW/ SW· - ( / , / , ), SW( , SW ), SW· ( / , ) TTA - 16142 - SD Service offering ( | ) ~'19, JTC1 SC34, IDPF, W3C ( | ) ~'19, JTC1 SC29 WG11 AR/VR App. AV App. ( ) KS X 6070-1~5 (EPUB) 3.0 , (EPUB) 3.0, (EPUB) 3.0, e-Learning App. (TTA) TTA.KO-10.0611 - Digital Signage App. Web App. , 2016-118 ( | ) ~'18, JTC1 SC29 WG11, SC24 ( | ) ~'18, JTC1 SC29 WG11 (EPUB) 3.0, (EPUB) 3.0 / SNS App. (HMD) (TTA) TTAK.OT-10.0337 - EPUB 2 , .0338 - EPUB 3.0, .0339 - EPUB , 2016-119 PC (TTA) TTAK.KO-10.0874 – (TTA) TTAK.KO-10.0317- 3.0, .0340 - EPUB 3 , .0341 - EPUB 3.0, .0342 - EPUB A/V/Data Terminal Control, (HMD) / 3.0, .0727 - EPUB , KR04-1 - EPUB3 EDUPUB , -2 - EPUB Service Info. Management (JTC1) Exploration Part # 12(Free-viewpoint TV) 1.0, -3 - EPUB 1.0, -4 - EPUB 1.0 DRM Service (JTC1) ISO/IEC 23000-13 Information technology - Call for Evidence on Free-Viewpoint Television: (JTC1) ISO/IEC 14496-10:2012 , NTP/ (ODPF) KR03-1 - EPUB 3.0.1 , -2 - EPUB 3.0.1, -3 - EPUB 3.0.1, -4 - EPUB Discovery ID Network DHCP DNS IGMP - Multimedia application format (MPEG-A) -- Part Super-Multiview and Free Navigation – update, Information technology -- Coding of 3.0.1, -5 - EPUB 3.0.1, -6 - EPUB 3.0.1 ( | ) ~'19, Web3D, JTC1 SC24 WG6/WG9, JTC1 SC29, JTC1 SC35, JTC1 SC36 MPEG / H.264, 265 audio-visual objects -- Part 10: Advanced agent Provisioning SNTP 13: Augmented reality application format, ISO/IEC Exploration Part # 12(Free-viewpoint TV) - FTV HDR (ISO TC171 SC2) ISO 32000-1 - PDF(portable document format) 23005-5 Information
    [Show full text]