Blog

NSTIC and banking don’t speak the same language

I first blogged about this over at Finextra in January, asking if banks and their...

Identity Evolves [AusCERT Conference Presentation Abstract]

This is the abstract for my paper that has been accepted in the main program...

Identity is dead! Long live identity!

While the post mortems of Cardspace and OpenID continue, surely the elephant in the room...

Programming is like playwriting

The software-as-a-profession debate continues largely untouched by each generation’s innovations in production methods. Most of...

Identities are brittle but crystal clear

This blog was updated and re-posted on 12 June 2012. I have been blogging and...

Simplifying assumptions for digital identity

I have criticised federated identity for being over-engineered, and described the Laws of Identity as...

An improved frame for understanding Digital Identity

I’ve always been uneasy about the term “ecosystem” being coopted when what is really meant...

Total cost of ownership of Multiple Identities

Federated Identity and before that, Single Sign On (SSO), are responses to the password plague....

Policy fads and policy failures

In cyber security, user awareness, education and training have long gone past their Use By...

What’s the point of astronomy?

Astronomy is the archetypal pure science. It can seem frankly pointless, especially when the projects...