TheArchitect.co.uk - Jorgen Thelin's weblog http://www.thearchitect.co.uk/weblog/ Thoughts and experiences from an enterprise software architect. This is a personal weblog by Jorgen Thelin, a Senior Program Manager for Windows Live Identity Services at Microsoft in Redmond. The opinions expressed here represent my own views and not those of my current, prior or future employer(s). webmaster@TheArchitect.co.uk (The Architect) Tue, 19 Aug 2008 17:44:22 GMT Wed, 30 Jul 2008 15:32:48 GMT en-us TheArchitect@TheArchitect.co.uk Copyright 2008 daily 1 2000-01-01T12:00+00:00 http://www.thearchitect.co.uk/weblog/archives/2008/07/000503.html Wed, 30 Jul 2008 15:32:48 GMT http://www.thearchitect.co.uk/weblog/archives/2008/07/000503.html 7 Things CIOs Should Know About Agile Development Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Programming Whether you are a CIO, or need to explain agile development to your IT Manager or CIO, then this article is for you.

Getting Clueful - 7 Things CIOs Should Know About Agile Development

Part of Esther Schindler's "Getting Clueful" series for and about CIOs.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/07/000503.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/07/000502.html Tue, 29 Jul 2008 16:00:32 GMT http://www.thearchitect.co.uk/weblog/archives/2008/07/000502.html Managing and Motivating Developers Here's a nice article by Esther Schindler about managing and motivating developers, which rings true in so many ways!... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Programming Here's a nice article by Esther Schindler about managing and motivating developers, which rings true in so many ways!

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/07/000502.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/07/000501.html Sat, 26 Jul 2008 11:00:00 GMT http://www.thearchitect.co.uk/weblog/archives/2008/07/000501.html The Legacy of Randy Pausch - Really Achieving Your Childhood Dreams Professor Randy Pausch died on Friday July 25th, 2008 of complications from pancreatic cancer. Randy Pausch inspired millions of people worldwide through his highly acclaimed "Last Lecture" at Carnegie Mellon University.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. General Professor Randy Pausch died on Friday July 25th, 2008 of complications from pancreatic cancer. Randy Pausch inspired millions of people worldwide through his highly acclaimed "Last Lecture" at Carnegie Mellon University.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/07/000501.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/07/000500.html Sat, 19 Jul 2008 19:22:49 GMT http://www.thearchitect.co.uk/weblog/archives/2008/07/000500.html Why Photographers Hate Creative Commons I came across this post by Scott Baradell and some great follow-up comments and discussion about the problems of applying the Creative Commons (CC) license to photographs on the Web. If you publish anything under Creative Commons, you really should read that post in its entirety to make sure you completely understand what rights and usage you are really allowing by your published license. http://rising.blackstar.com/why-photographers-hate-creative-commons.html From my experience, very few people who self publishing material on the Web actually understand licensing or usage rights enough to make well fully informed decisions. We always have more to learn from informed discussion like Scott presents here. For example, do you really know what "Non-Commercial Use" means?... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Photography I came across this post by Scott Baradell and some great follow-up comments and discussion about the problems of applying the Creative Commons (CC) license to photographs on the Web.

If you publish anything under Creative Commons, you really should read that post in its entirety to make sure you completely understand what rights and usage you are really allowing by your published license.

http://rising.blackstar.com/why-photographers-hate-creative-commons.html

From my experience, very few people who self publishing material on the Web actually understand licensing or usage rights enough to make well fully informed decisions. We always have more to learn from informed discussion like Scott presents here. For example, do you really know what "Non-Commercial Use" means?

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/07/000500.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/07/000499.html Fri, 11 Jul 2008 10:59:54 GMT http://www.thearchitect.co.uk/weblog/archives/2008/07/000499.html Rumor: Sun Open Sourcing Stock I stumbled across this post today, which is simply hilarious!... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. General I stumbled across this post today, which is simply hilarious!

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/07/000499.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/05/000498.html Fri, 30 May 2008 18:00:56 GMT http://www.thearchitect.co.uk/weblog/archives/2008/05/000498.html Delegated Authentication or Delegated Authorization? Some people think that the Live ID Team accidentally chose the wrong name when we released the Windows Live ID Delegated Authentication (DelAuth) SDK back in February, but in actuality a lot of thought and consideration went into that choice of name.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Live ID Some people think that the Live ID Team accidentally chose the wrong name when we released the Windows Live ID Delegated Authentication (DelAuth) SDK back in February, but in actuality a lot of thought and consideration went into that choice of name.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/05/000498.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/05/000497.html Sun, 04 May 2008 16:40:19 GMT http://www.thearchitect.co.uk/weblog/archives/2008/05/000497.html reCAPTCHA With the increasing encroachment of spam bots and other automated programs written to generate spam on the Internet, there are a growing number of occasions when a web site needs a CAPTCHA.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Web Services With the increasing encroachment of spam bots and other automated programs written to generate spam on the Internet, there are a growing number of occasions when a web site needs a CAPTCHA.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/05/000497.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/04/000496.html Thu, 24 Apr 2008 08:00:07 GMT http://www.thearchitect.co.uk/weblog/archives/2008/04/000496.html Live Mesh - Technology Preview Microsoft's new Live Mesh (available as a limited technology preview) combines hosted services for storage, sharing files and peer-to-peer connections to allow multiple different devices to work together and users to access updated applications from anywhere.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Live Mesh Microsoft's new Live Mesh (available as a limited technology preview) combines hosted services for storage, sharing files and peer-to-peer connections to allow multiple different devices to work together and users to access updated applications from anywhere.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/04/000496.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/04/000495.html Fri, 18 Apr 2008 10:41:27 GMT http://www.thearchitect.co.uk/weblog/archives/2008/04/000495.html PayPal to Ban Browsers without Anti-phishing Technology This is another step in the right direction to make the web a safer place........ Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Security This is another step in the right direction to make the web a safer place.....

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/04/000495.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/04/000494.html Thu, 17 Apr 2008 22:09:50 GMT http://www.thearchitect.co.uk/weblog/archives/2008/04/000494.html Sorry, No Talkback After a lot of effort trying to fight comment and traceback spam, I'm afraid I've finally had enough and decided to turn off all the comment and traceback features on this weblog. Sorry, but some bad guys are ruining everything for the rest of us in the blogosphere.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Weblog After a lot of effort trying to fight comment and traceback spam, I'm afraid I've finally had enough and decided to turn off all the comment and traceback features on this weblog. Sorry, but some bad guys are ruining everything for the rest of us in the blogosphere.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/04/000494.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/03/000493.html Tue, 25 Mar 2008 01:00:00 GMT http://www.thearchitect.co.uk/weblog/archives/2008/03/000493.html Delivering Data Portability (Part 2) - Sharing Contacts Between Social Networks Today sees another a huge step forward for the social networking world by enabling sharing of contacts and friends lists BETWEEN different social networks - yet in a safe and secure way that firmly gives users the choice of how to use and control their information.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Social Networks Today sees another a huge step forward for the social networking world by enabling sharing of contacts and friends lists BETWEEN different social networks - yet in a safe and secure way that firmly gives users the choice of how to use and control their information.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/03/000493.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/03/000492.html Sun, 16 Mar 2008 15:49:32 GMT http://www.thearchitect.co.uk/weblog/archives/2008/03/000492.html First Law of Password Hygiene Since moving to a team that handles the user accounts for everyone who uses any of Microsoft's web property, I've started to take a much more informed look at how I use my own account credentials and which web sites and applications I hand over those credentials to. Angus Logan posted a great summary of the way Microsoft and Windows Live handles credential capture, which is worth a detailed read by everyone... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Live ID http://www.thearchitect.co.uk/cgi-bin/mt/mt-comments.cgi?entry_id=492 Since moving to a team that handles the user accounts for everyone who uses any of Microsoft's web property, I've started to take a much more informed look at how I use my own account credentials and which web sites and applications I hand over those credentials to.

Angus Logan posted a great summary of the way Microsoft and Windows Live handles credential capture, which is worth a detailed read by everyone

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/03/000492.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/03/000491.html Tue, 11 Mar 2008 09:00:00 GMT http://www.thearchitect.co.uk/weblog/archives/2008/03/000491.html 10 Immutable Laws of Security After yesterday's net-buzz about a rogue mailbox archive application it's worth reminding ourselves about a classic security article: 10 Immutable Laws of Security Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore Law #2: If a bad guy can alter the operating system on your computer, it's not your computer anymore Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore Law #4: If you allow a bad guy to upload programs to your website, it's not your website any more Law #5: Weak passwords trump strong security Law #6: A computer is only as secure as the administrator is trustworthy Law #7: Encrypted data is only as secure as the decryption key Law #8: An out of date virus scanner is only marginally better than no virus scanner at all Law #9: Absolute anonymity isn't practical, in real life or on the Web Law #10: Technology is not a panacea Item #1 is particularly important in relation to yesterday's news! If you install an application on your machine, you are implicitly granting it a certain level of trusted access -- so you better be sure you know and trust the source of that application.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Security After yesterday's net-buzz about a rogue mailbox archive application it's worth reminding ourselves about a classic security article: 10 Immutable Laws of Security

  • Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore
  • Law #2: If a bad guy can alter the operating system on your computer, it's not your computer anymore
  • Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore
  • Law #4: If you allow a bad guy to upload programs to your website, it's not your website any more
  • Law #5: Weak passwords trump strong security
  • Law #6: A computer is only as secure as the administrator is trustworthy
  • Law #7: Encrypted data is only as secure as the decryption key
  • Law #8: An out of date virus scanner is only marginally better than no virus scanner at all
  • Law #9: Absolute anonymity isn't practical, in real life or on the Web
  • Law #10: Technology is not a panacea

Item #1 is particularly important in relation to yesterday's news!
If you install an application on your machine, you are implicitly granting it a certain level of trusted access -- so you better be sure you know and trust the source of that application.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/03/000491.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/03/000490.html Mon, 10 Mar 2008 11:52:47 GMT http://www.thearchitect.co.uk/weblog/archives/2008/03/000490.html The Need for Delegated Authentication The net is abuzz today about a scam application that is stealing people's G-mail account credentials. Or rather, the app is mis-using those account credentials when people hand them over to the application. Sound familiar? Yes, that's exactly the sort of issue that Windows Live ID Delegated Authentication is intending to combat.... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Live ID The net is abuzz today about a scam application that is stealing people's G-mail account credentials.
Or rather, the app is mis-using those account credentials when people hand them over to the application.

Sound familiar? Yes, that's exactly the sort of issue that Windows Live ID Delegated Authentication is intending to combat.

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/03/000490.html

]]> Jorgen Thelin http://www.thearchitect.co.uk/weblog/archives/2008/03/000489.html Sat, 08 Mar 2008 10:00:13 GMT http://www.thearchitect.co.uk/weblog/archives/2008/03/000489.html Windows Live ID at MIX08 After the announcement of the launch of the new Windows Live Platform enhancements, the new technology got lots of coverage in sessions at MIX08 last week. Here's the MIX08 presentation from Angus Logan covering the overall Windows Live Platform developer functionality, and heavily emphasizing lots of great Live ID technology. Windows Live ID Web Authentication is covered from 24:18 through 35:21 Windows Live ID Delegated Authentication is covered from 35:30 through 46:43 The 3D Virtual Earth geo-coding example around 59:00 through 1:00:29 is really cool too! Developing with Windows Live Platform http://sessions.visitmix.com/?selectedSearch=T29... Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved. Live ID After the announcement of the launch of the new Windows Live Platform enhancements, the new technology got lots of coverage in sessions at MIX08 last week.

Here's the MIX08 presentation from Angus Logan covering the overall Windows Live Platform developer functionality, and heavily emphasizing lots of great Live ID technology.

The 3D Virtual Earth geo-coding example around 59:00 through 1:00:29 is really cool too!

Developing with Windows Live Platform
http://sessions.visitmix.com/?selectedSearch=T29

Copyright (c) 2003-2008 Jorgen Thelin. All rights reserved.

Original article location: http://www.thearchitect.co.uk/weblog/archives/2008/03/000489.html

]]> Jorgen Thelin