– or – “Confessions of a Google Wave N00b”
After scrounging myself a B-list Google Wave preview, I’ve been playing around with it for a week or so. Rather than read more and think deeply about it, I thought I’d blurt out my half-formed opinions now. In fact, this is one of those posts I’ll probably regret in a year’s time. It might look as naive as some of my early thoughts on Twitter when I didn’t quite get it, but that’s blogging for you… so here goes.
Two things happened today that inspired me to write this post tonight.
- A brief back-and-forth on Twitter with @kaigani where I outlandishly claimed that Facebook Connect is a phishing scam waiting to happen
- The warning of another Twitter scam that typically exploits the layman‘s inability to spot a fake URL.
Facebook and Twitter both offer authentication services arguably known as “single sign-on”. Facebook Connect is a proprietary system, and Twitter offers a system based on the OAuth standard. These services do something quite marvellous – They allow you to authenticate with a another website without the third party ever seeing your password. What’s makes it even more handy is that you’re probably already signed in to these popular services, so you may not need to enter your password at all. The problem is when you do.
Continue reading…
Tim Whitlock's personal site and blog