Security on the Loosely Coupled Web

There is a growing trend in consumer web applications in which one site will ask users for their usernames and passwords on other sites. Using these credentials, a site will log onto the other sites to carry out actions on behalf of, and hopefully with the informed consent of, the user.
‘On behalf of’ logins
LinkedIn and […]

Rumpelstiltskin’s reporting interface

If Rumpelstiltskin sold a product to enterprise customers, he would quickly learn a lesson that we learned at my last company: no matter how fantastically his product could spin straw into gold, his sales would also depend on his product’s ability to display and report on every aspect of the spinning process. It doesn’t […]