Re: [Opensim-dev] New Web Services Front End to link to Opensimusing ROBUST
Not to get off track, but as an old Drupal hack, who has also worked on Joomla sites, I find Drupal much more user and administrator friendly than Joomla, but everyone has different experiences. As to the the d4os project, I'm very interested in participating when I get a chance and look forward to following this project closely. People working on the project that want to brainstorm, etc., feel free to contact me directly. Aldon http://www.orient-lodge.com -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of ssm2017 Sent: Wednesday, March 10, 2010 11:48 PM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] New Web Services Front End to link to Opensimusing ROBUST another point about drupal everyone knows that it is not user friendly but this is a good cms for common uses the next version (7) should be easier to manage this is not the goal of an opensim dev to explain to other people how to install and use an external program to use d4os, people should already know how to use drupal if you would like to use a full mvc / object oriented php code with easy install, you can maybe try to use joomla the actual version is poor with acl and some other things compared to drupal but the next version (1.6) looks very fine 2010/3/11 ssm2017 ssm2...@gmail.com: this message took 4 days to come to my mail box :) we had a little discution about drupal with diva diva is right when saying that a lot of php cms are layers above layers etc the drupal modules i am trying to build are targeting the drupal community actually, i have created a branch in the git repository to match OpenSim 0.6.8 when i will fix some missing options, i will come back to the master branch to use OpenSim 0.7 (if i will be able to run it on my machine :)) then i will try to build some webservices connectors oustside of this, there is a very promising solution powered by openmetaverse that is a set of php classes and front end using code igniter php framework that is using full obect oriented code and mvc architecture. http://code.google.com/p/openmetaverse/wiki/SimianGrid i think that jhurliman had speak about this to diva and i am mostly sure that diva will be satisfied with this solution 2010/3/7 Ai Austin ai.ai.aus...@googlemail.com: Starting a new thread on this, as its likely to be a long running thread of discussion I would imagine. Here is a summary of some web interfaces in use or under development that are known about... and what I hope are useful entry points into the Opensim Wiki. http://opensimulator.org/wiki/Webinterface http://opensimulator.org/wiki/Known_Web_Interfaces_within_OpenSim http://d4os.isgreat.org/doc/dev/existing-solutions We tried (three times) to get OpensimWI going in our setup, and each time it corrupted some elements of our data bases, losing some aspects of users and their setup. But with help form New World Grid folks, we did extract elements related to groups and offline IM and use those in a very simple web environment for opensim 0.6.6 on to 0.6.8 successfully. We have also been watching and commenting on Opensim web iterfaces in use or now under development for a) The web front end for New World Grid at http://www.newwqridgrid.com b) the Drupal for Opensim (d4os) new web interface using Drupal modules under development at http://drupal.org/project/d4os There are also new developments by various teams such as GridMix and HWIOS by folks active in the Opensim development coommunity. What is needed is simple web modules that can be re purposed easily and included in any sort of content management and hosting environment (basically any web server/Apache, MySQL, PHP environment, including Drupal, Joomla, etc too) At 20:16 05/03/2010, d...@metaverseink.com wrote: This troubles me too, as I have a couple of small grids that need a web front end. I've been looking at Drupal this morning, but I was discouraged by how horribly complicated it is to install. Even if I can eventually make it to work, I will never be able to teach people how to make it work. It's really horrible! I took a look at OSWiredux and I was also discouraged. It seems too complicated. But that doesn't mean that OSWiredux is dead. Someone with enough PHP knowledge should be able to fix it to work with the new DB schema -- just a few table/field name changes, and it should be salvageable. ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list
Re: [Opensim-dev] Naali UI research
I'm pretty excited about the Naali work. I've got a Nokia N900 cellphone. The screen is 800x480 pixels on a 3.5 inch screen. It has touch and an accelorameter. More importantly, it is a pretty nice unix development environment. I hope to try a port soon, and I'm interested in efforts that anyone else might be doing with porting Naali to work on mobile devices. Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Rich White Sent: Saturday, February 13, 2010 3:16 PM To: opensim-dev@lists.berlios.de Cc: realxt...@googlegroups.com Subject: Re: [Opensim-dev] Naali UI research For more touch screen and 3D virtual environment UI see the Edusim project at HTTP://edusim3d.com Ala Immersive touch On Feb 13, 2010 2:12 PM, Mark Malewski mark.malew...@gmail.com wrote: I really do love the idea of having a nice navigation UI that can either be used with a touchscreen computer, and/or a wireless XBOX 360 remote. Apple has always done a great job with UI's, and it looks like Naali is doing an excellent job of bringing a great new UI to OpenSim/RealXtend. Could we add a toolbar option (that can be enabled/disabled under the options menu? and also have a enable toolbar checkbox, and also a hide toolbar checkbox so it will turn the toolbar on, but hide it unless you move the mouse over the top portion of the screen and then the old legacy toolbar will 'drop down' for those users that still want an old legacy-type toolbar navigate). Me personally, I love icon-based navigation (and touchscreen-type navigation). I think it's the wave of the future, but some older people (like my mom have a hard time with newer UI's and she still likes having that old legacy toolbar available). So it would be good to have both. Have the new UI (as the default) but have a classic view and/or enable toolbar. I'd like to have the new UI look, plus have the old legacy toolbar (in a drop-down fashion) turned on. That way I can use the newer UI, and my mom or family can use the drop down toolbar (at least until they can learn or get used to using a newer UI). It took my mom 4 years just to get used to using an iPod UI (and I had to buy her an old shuffle without the touchscreen with just a next track, previous track, and volume buttons because she couldn't figure out how to use the UI on the newer iPods). So I'd vote for both (an old legacy toolbar that can be enabled/disabled so it can be ALWAYS ON toolbar at the top, and it can have the enable or disable checkbox, and also have a hide toolbar checkbox so it can be enabled, but also with a hidden drop down type appearance). Mark On Fri, Feb 12, 2010 at 3:31 AM, Ryan McDougall sempu...@gmail.com wrote: We made a blog pos... ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev
Re: [Opensim-dev] Opensim Wave?
So far, I know of three Open Source OpenWave servers. FedOne http://code.google.com/p/wave-protocol This is the Google version, available under Apache License 2.0. There are a lot of us running these servers. I have one up and running that any of you are free to use. Being the standard reference server, lots of people are developing around it. It is still very primative, but has some neat stuff. Key features: It federates with other FedOne servers, including the Google Sandbox. I've successfully federated with Google Sandbox and other FedOne servers in the past, but recently have been having problems federating. The production Google Server does not yet support Federation. It also supports not only the simple console client that comes with it, but QWaveClient, a nice little client written in QT. I've used the QWaveClient to connect to my server. The other thing that I find most annoying about FedOne is that currently waves are not persistent between server sessions. Ruby on Sails http://github.com/danopia/ruby-on-sails This is written by a young man named Dan. I don't think he's thought much about the licensing issues. I've run this on my server, although I don't usually have it running. It looks really nice. I'm told that it now supports Federation with FedOne servers, but I haven't tested it yet. There is not a standard client/server protocol defined yet, but the folks working on FedOne appear to be evolving one and the Dan at Ruby on Sails is working on getting his code to with the emerging client server protocol. I hope and expect to be able to use a Ruby on Sails Client with a FedOne server soon, as well as using a QWaveClient or the FedOne Console Client to connect to Ruby on Sails Server. I believe waves are persistent on this server. PyGoWave http://pygowave.net This was an early effort to build a Wave Server in Python. Last I knew PyGoWave did not Federate or talk with other clients. I believe the waves are persistent. Both FedOne and Ruby on Sails require that you have an XMPP server up and running. I've been using the OpenFire XMPP server, although I've heard others have had success with jabberd and Prosody. Hope this helps. I'd love to chat about collaborating. Adding Wave capabilities to Naali sounds especially interesting. Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Jeroen van Veen Sent: Saturday, December 05, 2009 8:20 AM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] Opensim Wave? Hello, Is the google wave server component open sourced as well? I read somewhere that only the wave protocol is open, and that google will be the only service provider for now. Concerning functionality, i personally like the idea of a realtime collaborative text editor for the web. When it comes to this functionality, the libinfinote library(lgpl) from the gobby project may be interesting. It's then just a matter of creating a js-client with orbited as comet server, and later switch to websockets when they are supported by the main browsers. With ogre as the renderer in Naali, it may be not so much work to integrate an in-world awesomium browser that uses this technology. Jeroen Op zaterdag 05 december 2009 02:21:43 schreef Rich White: XMPP/Jabber are also supported by OpenCobalt so further support of XMPP by Opensim could prove to be a starting point to virtual world convergence with regard to platforms. A bit more here - http://roots.greenbush.us/?p=867 Cheers, Rich == On Fri, Dec 4, 2009 at 5:33 PM, Aldon Hynes aldon.hy...@orient-lodge.com wrote: Okay, I must admit I've mostly been sitting on the sidelines recently. I still have OpenSim 0.5 installed on a computer or two... Anyway, there have been some interesting discussions recently about Second Life - Google Wave integration. Much of it is focused on the fact that Google Wave runs as a XMPP component (XEP-114). I seem to recall there had been some work with OpenSim/XMPP. Looking at it, it looks like OpenSim/XMPP is focused on OpenSim as an XMPP client instead of an XMPP component. Are there people around interested in OpenSim/Wave connectivity? Thoughts about what that might look like? Drop me a note if your interested. I do have a FedOne Wave server running and have been testing different clients and would love to share ideas. Aldon ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev
Re: [Opensim-dev] Currency
Melanie, Fly Man, et al., It is good to hear that a sample currency module is available on forge and that there are people interested in working on developing it. On Wednesday, I sent an email, offering to help with a currency project and asked if anyone knew where the sample currency module was. No one stepped forward to help, or to tell me where I could find any exisiting implementation. I searched around and couldn't find anything. On the OpenSim Wiki there is the http://opensimulator.org/wiki/Money which is intended as an open discussion board for ideas regarding an in-world financial system. Unfortunately, it does not provide any links to sample implementations. It does seem like this may primarily be a documentation problem. After reading your emails today and doing a bit of searching, I did find http://forge.opensimulator.org/gf/project/currency/ In searching through the repository, I did find Currency_DesignDocument.doc which provides information about doing an installation of the module. (Installation information can currently be found in section 2.2.1.1.2 ) It does appear as if it depends on having a ASP.NET enabled webserver, which rules me out from being able to do testing at this time. It would be interesting to see if a LAMP based server could be developed, or perhaps a lighter weight service that simply uses the existing databases in a standard OpenSim installation. With that, I am willing to set up an OpenSimCurrency Wiki and help document this project. I can help with a LAMP money server that could potentially be integrated with other interfaces. (For example, Jeroen was asking about a WiXTD interface). All of that said, I am heading off on vacation for the next two weeks. I will have spotty access here and there and can't really focus on this substantially until August. However, I would love to get some responses now and see what we can do to get currency much more usable for anyone that wants it. Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Melanie Sent: Saturday, July 11, 2009 7:12 AM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] Currency Well, I am maintaining the sample currency module on forge now and keeping it available. I believe you are aware that I have a commercial RMT module, and had it for more than a year. We have simply decided it can't be in core, but we are still making it as easy to access and integrate it as we can. We're not against people having money. If we were, we would have remove the interfaces. We just can't risk it in core. Melanie Fly Man wrote: Well, what a long discussion about something that was already decided long ago There is the OpenCurrency module for those that want to play around with it and there are some other ppl working on Money related things. The removal of the SampleMoney module was 1 of the things that I left the OpenSim development scene, as the name of the module said: It's SAMPLE money I know there 3 people working on a real currency module as we speak and 1 of them has succesfully integrated it into the OpenSim now. The story continues ... 2009/7/8 Snowdrop Short snowdrop.sh...@gmail.com: The core developers have for valid reasons (whatever others may think and argue, they are - at least - subjectively valid) for not including a money module. I think it would be best to let this debate rest. I believe continuing to argue for a money module to be part of the core, is showing ingratitude to the core developers who has put in such a great effort on the project and completely needless. OpenSim is licensed via BSD, one of the most liberate licenses currently in common use, nothing prevents a money module from being implemented, either in close or open source. Furthermore I am convinced that the core will accept patches for hooks, if the current hooks prove in-adequate. (This has been done for other out-of-core modules). Even if the core team should decide a money module was within the scope of the project, it would still require volunteers to implement the module, so I fail to see the real difference between an out-of-core module for handling money and an in-core one. If all the passion thrown into this debate was directed towards creating an out-of-core module, it would spring into existence quite rapidly. /Snowcrash On Wed, 2009-07-08 at 17:17 +0200, Colin B. Withers wrote: Hi Neb, No, I do get the point, but I am simply not convinced of the arguments. Opensim is unsafe, understandably so. Right now, it is in the alpha stage, but that is no reason not to pursue code from alpha, through beta, and onto release. Let me put it this way, quite clearly.. If I, or anyone else, wanted to to use Opensim as a platform for a virtual world, (not during alpha, or beta, but after it is released) and that virtual would was to have commerce,
Re: [Opensim-dev] Currency
Melanie, et al., Thanks for the update. I've joined the opencurrency project and have put in a request to join the currency project as well. Is there any documentation on how to install this? I've added links to both projects to the bottom of the Money page in the OpenSim wiki. Is the OpenSim Wiki sufficient for handling this project, or is there need and interest in a parallel Wiki specific to currency implementations for OpenSim? Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Melanie Sent: Saturday, July 11, 2009 9:17 AM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] Currency The project is opencurrency on OpenSim forge. It uses a LAMP server. The ASP.NET is a different implementation. Melanie Aldon Hynes wrote: Melanie, Fly Man, et al., It is good to hear that a sample currency module is available on forge and that there are people interested in working on developing it. On Wednesday, I sent an email, offering to help with a currency project and asked if anyone knew where the sample currency module was. No one stepped forward to help, or to tell me where I could find any exisiting implementation. I searched around and couldn't find anything. On the OpenSim Wiki there is the http://opensimulator.org/wiki/Money which is intended as an open discussion board for ideas regarding an in-world financial system. Unfortunately, it does not provide any links to sample implementations. It does seem like this may primarily be a documentation problem. After reading your emails today and doing a bit of searching, I did find http://forge.opensimulator.org/gf/project/currency/ In searching through the repository, I did find Currency_DesignDocument.doc which provides information about doing an installation of the module. (Installation information can currently be found in section 2.2.1.1.2 ) It does appear as if it depends on having a ASP.NET enabled webserver, which rules me out from being able to do testing at this time. It would be interesting to see if a LAMP based server could be developed, or perhaps a lighter weight service that simply uses the existing databases in a standard OpenSim installation. With that, I am willing to set up an OpenSimCurrency Wiki and help document this project. I can help with a LAMP money server that could potentially be integrated with other interfaces. (For example, Jeroen was asking about a WiXTD interface). All of that said, I am heading off on vacation for the next two weeks. I will have spotty access here and there and can't really focus on this substantially until August. However, I would love to get some responses now and see what we can do to get currency much more usable for anyone that wants it. Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Melanie Sent: Saturday, July 11, 2009 7:12 AM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] Currency Well, I am maintaining the sample currency module on forge now and keeping it available. I believe you are aware that I have a commercial RMT module, and had it for more than a year. We have simply decided it can't be in core, but we are still making it as easy to access and integrate it as we can. We're not against people having money. If we were, we would have remove the interfaces. We just can't risk it in core. Melanie Fly Man wrote: Well, what a long discussion about something that was already decided long ago There is the OpenCurrency module for those that want to play around with it and there are some other ppl working on Money related things. The removal of the SampleMoney module was 1 of the things that I left the OpenSim development scene, as the name of the module said: It's SAMPLE money I know there 3 people working on a real currency module as we speak and 1 of them has succesfully integrated it into the OpenSim now. The story continues ... 2009/7/8 Snowdrop Short snowdrop.sh...@gmail.com: The core developers have for valid reasons (whatever others may think and argue, they are - at least - subjectively valid) for not including a money module. I think it would be best to let this debate rest. I believe continuing to argue for a money module to be part of the core, is showing ingratitude to the core developers who has put in such a great effort on the project and completely needless. OpenSim is licensed via BSD, one of the most liberate licenses currently in common use, nothing prevents a money module from being implemented, either in close or open source. Furthermore I am convinced that the core will accept patches for hooks, if the current hooks prove in-adequate. (This has been done for other out-of-core modules). Even if the core team should decide a money module was within
Re: [Opensim-dev] Currency
Random thoughts: I've always thought that the decision to not include currency in OpenSim was an ill thought out decision for many reasons. As people have noted, the liability issue is a red herring. I believe there are much greater liability issues in the areas of intellectual property, copyright and so on in the asset system than there would be in a currency system. (I should note that this comes, in part, after talking with retired U.S. Treasury special agents). Clearly, there are issues about people not understanding what it means to use alpha code, as we learned last April, but that is also not a reasonable excuse for not producing code. All code is alpha at some stage. As Jeroen noted, there are other aspects of how currency could be used such as a karma system, that are well worth exploring. All of that said, I have no expectation that the powers that be will ever rethink their positions and so other alternatives should be pursued. Perhaps the best would be for people committed to OpenSimCurrency to start a seperate project where they can collaborate on building a strong and robust currency system. Currency doesn't need to be part of the core to be part of many worlds. Instead, SampleMoney and OpenCurrency could be used as the starting point for an OpenSimCurrency Project. The project could be expanded to provide much more information about the pros and cons of connecting a currency system to external currency systems, and perhaps even mechanisms to make such connections. Likewise, code could be created to take currency and embed it in objects using financial cryptography which could be used to transport currency between worlds and for that matter between out of world systems. (Side note to skeptics: I am well aware of the issues with many existing implementations of financial cryptography. I'm not saying this would be easy.) So, for any of you that are really interested in OpenSimCurrency, what do you say to starting a parallel project that provides a third party currency framework that can run in OpenSim? Aldon ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev
Re: [Opensim-dev] Currency
Stefan, et al., I'm glad you think this is a good idea. I'm heading on vacation for a couple weeks leaving this weekend, so I'll be hard to reach. However, if we can get the project up and going before I go, that would be great. Questions I have: Who wrote and/or has copies of the SampleMoney and OpenCurrency code? Who has any design documents are would be willing to create some design documents? If you want to help, please contact me directly. I can set up a Wiki on one of my hosting accounts and try to get the ball rolling, but I'll need help. Aldon -Original Message- So, for any of you that are really interested in OpenSimCurrency, what do you say to starting a parallel project that provides a third party currency framework that can run in OpenSim? Go for it. Host it on the forge, create a wiki for it. Can't wait to see the first release. Also, I believe there is still an Freenode IRC channel called #opensim-money. /Stefan ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev
Re: [Opensim-dev] OpenID
Can someone point me to an authentication system that isn't susceptible to being phished? Aldon -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Mike Mazur Sent: Tuesday, March 03, 2009 2:53 AM To: opensim-dev@lists.berlios.de Cc: r...@ralf-haifisch.biz Subject: Re: [Opensim-dev] OpenID Hi, On Tue, 3 Mar 2009 08:40:03 +0100 Ralf Haifisch r...@ralf-haifisch.biz wrote: beiing pished - you are talking about getting the users token ? The expected scenario is this: 1. Log into travel.com using OpenID 2. travel.com redirects you to myopenid.com for you to enter your pwd 3. You enter your valid OpenID password 4. myopenid.com redirects you back to travel.com, you are now authed 5. You book your ticket safely The phishing scenario is this: 1. Log into travol.com using OpenID 2. travol.com redirects you to BADopenid.com for you to enter your pwd. BADopenid.com looks just like myopenid.com, you don't notice the different URL and the lack of SSL session 3. You enter your valid OpenID password 4. Now the bad guys have access to your OpenID account, and all the services you use OpenID to authenticate with Mike ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev ___ Opensim-dev mailing list Opensim-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/opensim-dev
Re: [Opensim-dev] OpenID
It is worth noting that Microsoft is now adopting OpenID as well. A while ago it went into testing, The idea is that you can use Microsoft Live as your OpenID provider. I've tested it and it works fairly well. In fact, I think it works better than the Google implementation. However, I still prefer XRI based OpenID =aldon.hynes @ahynes1 -Original Message- From: opensim-dev-boun...@lists.berlios.de [mailto:opensim-dev-boun...@lists.berlios.de]on Behalf Of Ralf Haifisch Sent: Monday, March 02, 2009 6:39 PM To: opensim-dev@lists.berlios.de Subject: Re: [Opensim-dev] OpenID Crista, this is a upcomming standard and common sense. If I do an audit based in ISO 27.001, this is a perfect thing and would get some applause if implementet, generally speaking. It is based on the established ideas from LPAD+Kerberos combining systems, that use this triangle of user/workstation - auth-provider and auth-subscriber in principle , as well. Microsoft did try to run this with .Net Passport (uhm... maybe they even had a name before that) and had a set of criteria you have to fulfill before joining the system. People did not like this closed source big brother - alike system. openID and SAML are major topics for those devs, that are into security systems right now. Claim based systems and rights management are often based on this. It is all about a secure stack. - hopefully, you did write your operating system - why could it be trusted otherwise ? - what about the keyboard ? easy going to implement what I need - is there a nuble on your monitors video cord ? is this for antiference reasons... hmmm.. - you print out strategic papers or sources on the big laserpinter in the floor (sure, only you in the building).. I did fetch interesting stuff unencrypted from these devices - you had this all new USB harddisc for backups that came with some new drivers ? Unless the whole stack from hardware to service is secure and trusts are build and verified against each other what you see is the best that is realistic achievable: -- warn the user, if something is maybe wrong. Its you, chooses the opened provider (I guess verisign is somewhat secure for me) It´s you who uses a service - and would have done even without opened. Its you who gets a warning about possible fraud, you would not have been getting without opened. Instead of opened the usual user has 2000 passwords and requests new passwords via clear text email over the web, regularly. So - in total a regular user gets more security. Thats the basic idea. In some years we will use at least 2-factor authentification. E.g. the Netherlands did start giving out passports with a digital ID (certificate). Cheap reader will spread. There is a common sense that, exo-technical means will better serve security needs in future. The more business driven standards like ISO 27.001 and 38.500 repect this. Technical means will fulfill a task assingned exo-technical. Let say - this is a new and upcoming system. Its not worse than what we have. It has many option got get better on a standard architecture. It´s a little bit like the 3D web story... Cheers, Ralf -- Message: 6 Date: Mon, 02 Mar 2009 14:44:46 -0800 From: Diva Canto d...@metaverseink.com Subject: Re: [Opensim-dev] OpenID To: opensim-dev@lists.berlios.de Message-ID: 49ac615e.5010...@metaverseink.com Content-Type: text/plain; charset=ISO-8859-1; format=flowed OMG! Sorry for insisting on this, but I tend to get obsessive when I'm trying to figure things out :-) I just tried login to some random Brazilian site using my OpenID-ed Yahoo account. Indeed, it... works... i guess. I seem to have been redirected to a yahoo openid login page, which, after I entered my password, proceeded to warn me that Warning: this web site has not confirmed its identity with Yahoo! and might be fraudulent. I have no idea/guarantees that this site that the Brazilian site redirected me that looks like Yahoo, where I entered my password, and that is warning me of danger, is, indeed, a legitimate Yahoo site. It might not be. And I have no idea what that potentially fraudulent Brazilian site might do with the info it gets from Yahoo (assuming this is Yahoo and not a phishing scam). Sorry, this defies all common sense... I can see the *mechanism* of OpenID working among a group of organizations that trust each other by exo-technical means (read lawyers). But this mechanism in decentralized, world-wide open systems?! That's insane! Crista Diva Canto wrote: The more I read about OpenID the more concerns I have that it's unsafe -- not just for OpenSim but in general. It seems that OpenID is a wonderful opportunity for phishing sites to get access to people's passwords directly. The flaw is that it assumes that the initial site is trustworthy. That's a huge assumption! Try to use your OSGrid OpenID-ed account in a future version of DNCH... it will direct you to a page
