Cheap secure authentication

Verisign OTP from PayPal

These things can be had from Pay­Pal for about five bucks. Or $7.50 if you’re an Aussie. Verisign will flog them off to you for $30, if you’d like, but basi­cally Pay­Pal rocks for this kinda stuff. It’s a one-time pass­word token that effec­tively enhances your authen­ti­ca­tion by a mas­sive degree. It’s cool because it works with Pay­Pal and eBay. It’s cooler (and worth­while) because you can poten­tially use it with OpenID.

Essen­tially, it’s a ran­dom num­ber seeded with a unique key that gets appended to your reg­u­lar pass­word. This defeats key­log­gers and pretty much all kinds of phish­ing cur­rently out there. These kinds of devices have been used in cor­po­rate VPN/dial-in sce­nar­ios for years now (pre­dom­i­nantly, in the sit­u­a­tions I’m aware of, with tech­nol­ogy by RSA SecureID), but this is the first I’ve seen of it from Verisign.

And, sure, it’s only as secure as phys­i­cal secu­rity or the end­points them­selves are, but it’s a mas­sive step up from “what’s your cat’s name?” two-factor auth (though, unfor­tu­nately, I think PayPal/eBay offer that as a backup).

I’ve ordered mine and will prob­a­bly be hav­ing a play with OpenID imple­men­ta­tions of it (backed by Verisign’s PIP ser­vice, but not overly tied to it because of OpenID’s identity-delegation abil­ity) once it arrives (10 busi­ness days).

Can’t help but won­der what Verisign’s rates for these things are in a stand­alone sense. Nor­mally on 5 year con­tracts, but in terms of cost-per-token. Seems like a great way to defeat the idiot users who insist on hav­ing pass­words that are bla­tantly obvi­ous (argue all you like about strength poli­cies: it’s often not fea­si­ble when bal­anced against sup­port load for resul­tant for­got­ten passwords).

Also, to those who argue Pay­Pal = evil, if you’re in Aus­tralia then please… don’t. Unlike in the US, here they’ve basi­cally got the same finan­cial report­ing oblig­a­tions as any bank does, and cus­tomer ser­vice nec­es­sar­ily to match it. All the hor­ror sto­ries from the ‘States (not that I think them uni­ver­sally untrue!) pretty much couldn’t hap­pen here or they’d be chucked out of the coun­try. And, whilst they’re so heav­ily sub­si­dis­ing (or at least obtain­ing bulk dis­counts for) this kinda tech, that’s cool with me.

# by Josh on February 8th, 2008 Tags: , , , , , , ,
| 1 Comment »

I hate academic snobbery

Oh my good­ness. Why didn’t I go to Google sooner? All that time trawl­ing through books and ERIC and Gale DBs, wasted!

I could have even hit I’m feel­ing lucky. I’M FEELING FREAKIN’ UNLUCKY! Num­ber 1 match for “ado­les­cent emo­tional devel­op­ment” (entered not out of despa­ra­tion but sim­ply on a whim this evening to see what it turned up! I’ll con­fess I was expect­ing angsty blog entries from some more-erudite teenagers rather than actual research.) unveils a bril­liant overview page from an Assoc. Prof. at Queen’s Uni (Canada)‘s devel­op­men­tal psy­chol­ogy depart­ment, which is incred­i­bly well sup­ported with cita­tions, etc.

I should quit this whole uni/vocational dealing-with-people-and-books gig right now and go back to my lit­tle geek world in which Google knows all and Wikipedia can be read with­out fear of vio­lent reprisals from the fac­ulty thought-police. The two are con­verg­ing! It’s like those cheesy rooms in movies with spikes on the walls that couldn’t real­is­ti­cally kill you prop­erly because of the ridicu­lously large space between spikes that makes scal­ing the wall pos­si­ble! And now I’ve stopped whin­ing and am just procrastinating.

# by Josh on September 5th, 2006 Tags: , ,
| 2 Comments »

Plagiarism in secondary education: re-evaluating collaboration

David Hawkes writes from Canada of an encounter with Stephen Downes:

Stephen is a philoso­pher who is deeply inter­ested in the free­dom of infor­ma­tion and the free­dom of learn­ing. He is also inter­ested in the notion of dig­i­tal rights expres­sion as opposed to dig­i­tal rights man­age­ment, by which we mean that it is more impor­tant to focus on the pur­pose of the dig­i­tal shar­ing than it is to focus on the profit motive asso­ci­ated with such endeav­ours. His take on pla­gia­rism is that peo­ple almost never present things that are totally orig­i­nal and that they are always using a vari­ety of sources to achieve an objec­tive, so what is really needed is a rede­f­i­n­i­tion of pla­gia­rism.

The notion of ‘expres­sion’ is an inter­est­ing one! That is, I take it, per­tain­ing to free­dom of mate­r­ial in a broader sense? Or did he speak of this in the con­text of acad­e­mia alone?

Increas­ingly, I am becom­ing aware of the accusative approach taken to the issue of pla­gia­rism — at a ter­tiary level it is par­tic­u­larly appar­ent. By this I mean that legit­i­mate col­lab­o­ra­tion is being sti­fled; dis­cus­sions are being cut short. This is of par­tic­u­lar con­cern as, whilst there is a clear need for such col­lab­o­ra­tion in higher edu­ca­tion, the spec­tre of ‘pla­gia­rism’ (that is, accu­sa­tions of such a thing) is dimin­ish­ing oth­er­wise quite-fruitful discussions.

At a sec­ondary level this is per­haps of lesser con­se­quence — Internet-based pla­gia­rism would be (I imag­ine) the great­est of sev­eral con­cerns in this field. In fact, from what I recall of school, things would do well to go in the other direc­tion. It is not that no effort has been made in this field — far from it. I think par­tic­u­larly of the tar­get­ted ini­tia­tives steered by Simon Break­s­pear, and recall some idea that col­lab­o­ra­tive efforts were to ben­e­fit a group of stu­dents col­lec­tively. There is, how­ever, so much more that can be done here. Per­haps iron­i­cally, elec­tronic col­lab­o­ra­tion (‘pla­gia­rism’) tools realise just that. Cre­at­ing a space in which stu­dents can actively engage with ideas (as opposed to pas­sive, top-down envi­ron­ments that offer no impe­tus to cre­ate con­tent) is para­mount to re-aligning ‘pla­gia­rism’ with pos­i­tive con­cep­tions. It is, for obvi­ous rea­sons, ludi­crous to sug­gest to a stu­dent that ideas should be attrib­uted to their peers in writ­ten work. Yet, for the pur­poses of edu­ca­tion (which is, by my reck­on­ing, dis­tinct from those of assess­ment!), a col­lab­o­ra­tive envi­ron­ment that allows trac­ing the ori­gin of ideas in a local con­text is a great thing.

Per­haps that ‘ludi­crous’ idea of inter­nal attri­bu­tion should even be applied, as a way of instill­ing a habit of this kind.

There is so much that can be done here. It is pio­neer­ing, new ter­ri­tory; char­ac­terised by increas­ing engage­ment. “Expres­sion” is a great word for how we should envis­age re-use of dig­i­tal ‘property’ — growth of expres­sion and crit­i­cal capac­ity can only be a pos­i­tive thing.