XDI Art from Mike Schwartz

Mike Schwartz, CEO of Gluu and one of the hardest working members of the OASIS XDI Technical Committee, has started a series about XDI art on the Gluu blog. It lends gentle and beautiful insight into this new semantic data format and protocol.

Update on Personal Event Networks: The Evented API Spec

Limited Liability Persona · Microtagging · Movies · Open Identity Exchange · OpenID · Other Links · Personal Cloud · Personal Data Ecosystem · Personal Data Server · Personal Data Service · Personal Data Store · Practical I-Names · Privacy

Update on Personal Event Networks: The Evented API Spec

As a follow-on to my post about Personal Event Networks last week, Phil Windley and Sam Curren have published the Evented API Specification. Phil’s blog post about it gives a good summary, but if you’re a developer just go straight to the spec — it’s short and very easy to read.

I expect this will be a major topic at Internet Identity Workshop next week – I plan to be all over it.

Phil Windley on Personal Event Networks

Phil Windley has a new post called Personal Event Networks: Building the Internet of Things. The idea is simple but highly compelling: what if the range of products and services you used could actually talk to each other, over the net, on your behalf? Technically this talking is known as “raising events”, i.e., being able to notify each other that something important has happened.

A simple example is your car telling your calendar that you are due for an oil change. Or your calendar being able to tell your home thermostat that you are going to be away for the weekend — thus saving you from having to manually tell it to save the heat (when was the last time you remembered to do that?)

Many things become possible if your personal network of devices, products, and services can safely talk to each other in ways they can all understand. That’s what Phil is promoting through a simple event interface. It dovetails wonderfully with the two main thrusts of my work over the past several years:

  1. Connect.Me and the Respect Trust Framework is about building a strong, socially-verified web of trust so the different devices, products, and services in your personal event network can trust each other — and even more importantly trust the personal event networks of your family, friends, and co-workers. (The total value of a personal event network goes up exponentially with the number of other personal event networks it can be safely connected to.)
  2. XDI is developing the semantic data sharing protocol that will give all the devices, products, and services on your personal event network a common language in which to speak to each other. XDI is perfect for eventing because, although it works fine for request-response interactions, it does not require them. Instead, XDI messages can also use the publish/subscribe model needed by an event network– and in fact XDI link contracts are ideal for dynamically defining subscriptions and sharing rights.

Phil is writing a book called The Live Web, and I’m hoping that personal event networks will play a key role in explaining the power the Live Web will bring.

Phil Windley on Personal Event Networks | Equals Drummond

Limited Liability Persona · Microtagging · Movies · Open Identity Exchange · OpenID · Other Links · Personal Cloud · Personal Data Ecosystem · Personal Data Server · Personal Data Service · Personal Data Store · Practical I-Names · Privacy

The Height of Insidiousness

On January 19 I did a short post titled I am so ready to get rid of these. It was about blog spammers winning the war against WordPress’s Akismet spam filter. What enraged me most is that if a comment gets pass Akismet, it is clever enough that it requires scrutiny by a real human (me) to determine if it is genuine or not. And even if 9 times out of 10 it’s spam, that 10th time it might be from someone whose comment I really value. I summed up the dilemma this way, “That’s the reason I don’t turn off comments altogether — the value of the real comments outweighs the hassle of the spam.”

Now the spammers have a new tactic that makes me completely blow a gasket. Yesterday I received a comment to the very same I am so ready to get rid of these post that consisted of one line:

That’s also the reason I don’t turn off comments altogether — the value of the real comments outweighs the hassle of the spam.

I literally had my mouse cursor poised over the “Approve” button because my first reaction was, “Right on — I agree with that comment completely!”

And then I had a tiny flicker of deja-vu…

…where had I seen that phrase before…?

DAMN!

I looked closer and saw that in fact I had 3 comments in a row on 3 different posts, all from “Patriots Jersey” and all using this “quote from the post” technique.

It’s so simple and clever I’m surprised I haven’t seen it before (for all I know it’s been around for ages and I’m just seeing it for the first time). But it completely fried my gourd, because thousands of real bloggers might be fooled into approving these comments the same way their blog spam filter was fooled into accepting them.

For me it was even more validation why we need move to higher level reputation systems  based on real people and real trust relationships, not machine algorithms. That, in a nutshell, is why I’ve been working on Connect.Me and the Respect Trust Framework for the past year.

More on how this can help fight blog spam coming soon.

The Connect.Me Blog

With Connect.Me finally having a public-facing beta signup process, even though we’re otherwise still in stealth, we’ve started a Connect.Me blog to start explaining what Connect.Me the company is about. The first post explains our overall focus on personal data and trust frameworks, an issue highlighted by this week’s TIME Magazine cover article.

Today’s post is a set of Connect.Me stories from SXSW, the Disneyland of social media, which had a strong set of sessions around the personal data issue.

So if you want to follow the progress of Connect.Me , that’s where I’ll be covering it. Equals Drummond will remain focused on my standards work; broader topics in Internet identity, data sharing, and trust; and those personal topics I cover from time to time (like the films I’m crazy about).

Connect.Me

The Incredible Internet Irony Machine strikes again. The stealth startup that’s been my singular focus since stepping down as Executive Director of Open Identity Exchange and the Information Card Foundation last fall, called Respect Network, took one tiny peek above the covers last night — quietly opening the beta invitation signup page for our Connect.Me service before SXSW starts in a couple days.

After internal testing of the signup process we just wanted to do a little bit of live external user testing of the signup before SXSW. So my co-founder Joe Johnston took off the password protection on the page and before going to bed last night we asked a few family and friends to test it.

We woke up this morning to over 10,000 users. And that grew to 20K in a few hours.

But that’s not the ironic part.

While Joe and I were in a meeting with one of our key partners in building this new network, we were barraged with links to a post by Graham Cluley on Naked Security entitled Connect.me rush exposes risky behaviour of social networkers. In it, Graham points out:

Every day we seem to warn the readers of the Naked Security site about the danger of rogue applications and unknown parties gaining access to your social networking accounts.

And so you would think people would be wary of allowing a third-party app, which doesn’t explain its intentions and doesn’t explain who’s behind it, from gaining access to their Facebook or Twitter account.

But that’s exactly what tens of thousands of people are doing right now with Connect.me.

Now we get to the height of irony: the reason this new network is called Connect.Me is to address the privacy and control issues around social login and social data sharing. After spending the last decade building user-centric identity and data sharing infrastructure (just peruse this blog for acres of details), Joe and I and the Connect.Me team, which includes Marc Coluccio and Dean Landsman, were acutely aware that the game had already been won…by the social login services. As of last December, Facebook Connect was being installed on over 10,000 sites per day.

And we are even more acutely aware of how little people understand about the privacy implications, i.e., that Facebook (or Twitter or LinkedIn or whomever you use for social login) has a complete list of all your site relationship information. Not to mention all the data you share via this login.

That’s not a knock on Facebook, Twitter, LinkedIn, or any other social network. They are incredible services that have literally changed the world — far beyond just the social web landscape. But their spectacular success does not mean that the entire future of the social web must be sharing all our data and relationships through centralized social hubs.

Shouldn’t there be an option for you to better control your data, identity, and relationships?

That’s the core premise of a groundbreaking idea called VRM (Vendor Relationship Management). VRM isn’t new — it’s been a project at the Harvard Berkman Institute led by Doc Searls since 2005. Read all about it on the ProjectVRM site. Or look for the Twitter hashtag #vrm.

It’s also the core premise of the Personal Data Ecosystem Consortium and the unflagging leadership of Kaliya Hamlin and Mary Hodder, who have been at this just as long as we have. See especially their responses to the U.S. FTC Do Not Track proposal and the Dept. of Commerce Privacy green paper.

So Joe and I and the rest of the Respect Network team said: let’s build a service that operates by the principles of VRM.

We’ll share more about what we’re building over the next few weeks. It’s a big vision that will take time to fully realize, but we’ve started the ball rolling with Connect.Me. And we’re thrilled that our seemingly quiet launch stirred up controversy about a critical topic: privacy on the social web.

So, thank you, Graham. It’s not what we intended but then the Internet is not what anyone intended either — it’s become the beautiful electronic organism that we are all building together, and with Respect Network and Connect.Me we’re trying to make it better.

If you agree, here’s what you can do to get involved:

  • Sign up for the beta at Connect.Me. Use my personal invite code: http://cxt.me/n62QnQ. Tell ‘em I sent you ;-)
  • Follow @respectconnect on Twitter.
  • If you’re a developer and want to be deeply connected to this effort, drop us a line at jobs@connect.me.
  • If you’re a user who cares deeply about having a personal data trust framework for the Internet, drop us a line at anchors@connect.me. We have a very special role for you.

The Personal Cloud, Take 3: Thomas Vander Wal’s Personal InfoCloud

When I first heard the term “personal cloud” from Mark Plakias at C3, I knew it sounded vaguely familiar, but it wasn’t until I started this series of blog posts that Kaliya Hamlin (Identitywoman) reminded me that Thomas Vander Wal named his blog Personal InfoCloud some years ago. Instantly I recalled the dinner that Kaliya and Thomas and I had in Washington D.C. a few years ago wheree he explained his vision for a personal information cloud, and how it was a superset of what the VRM community has been calling a personal data store.

In retrospect, I am quite sure this was one reason a subconscious bell rang for me when the term “personal cloud” came up again. And, reading recent posts from Thomas’ blog, including one about lessons to be learned from Yahoo’s threat to close Delicious, I point to it as even more evidence that the term works well for expressing what we all mean by this collection of personal data and relationships that will become the hub of your digital life.

Speaking of hubs, that reminds me of yet another pioneer thinker in this space: Jon Udell and his concept of hosted lifebits. As Jon puts it in a 2007 blog post:

Today my digital assets are spread out all over the place. Some are on various websites that I control, and a lot more that I don’t. Others are on various local hard disks that I control, and a lot more that I don’t. It’s become really clear to me that I’d be willing to pay for the service of consolidating all this stuff, syndicating it to wherever it’s needed, and guaranteeing its availability throughout — and indeed beyond — my lifetime.

Jon also recognized that in 2007 the idea was still before its time:

Although this notion of a hosted lifebits service seems inevitable in the long run, it’s not at all clear how we’ll get there. The need is not yet apparent to most people, though it will increasingly become apparent. The technical aspects are somewhat challenging, but the social and business aspects are even more challenging.

I strongly agree with Jon that it’s the social and business aspects that are the most challenging. I think the breakthrough success of social networking and messaging services like Facebook and Twitter have made the social half of the challenge tractable. Which leaves the business challenge: one that I (and many others) are hard at work on right now.

The Personal Cloud, Take 2

There’s been a wonderful discussion of “personal cloud” on the VRM mailing list this week. So far feedback is running about 80% positive on the term. But if there’s one point on which everyone has consensus, it’s that our collective “inside baseball” opinions really don’t matter. What counts is how the average Internet citizen reacts to it.

So let me tell you this story.

Last night I had dinner with a friend, Claude Golden, an attorney at Boeing and husband of my oldest son’s Seattle Waldorf School teacher. We got to talking about personal finance programs, and I explained why, after more than a decade of using Quicken, I had switched to Mint.

When I explained to him that you actually give Mint all your personal banking usernames and passwords, Claude was stunned — as most people usually are (I certainly was when I first heard about Mint). But when I told him that Intuit, the company behind Quicken, turned around and bought Mint for $170 million less than two years after it was founded, Claude understood why I had decided that I could trust Mint with my personal banking credentials. (I’ve never looked back, by the way — Mint is saving me at least a few hours each month in personal financial management time, and in my time-choked life, that’s priceless.)

When looked at in that light, suddenly it was obvious to Claude why people would want to do their personal financial management “in the cloud”. It eliminates the whole hassle of downloading all the data to a personal computer, doing the “management”, then uploading right back up to the cloud for backup because the data is too valuable to just keep locally anyway. (I explained to Claude that when Intuit first came out with an online backup service for Quicken data, I never purchased anything so fast in my life. It cost a whopping $9.99 a year — I would have paid ten times that to rid myself of the hassle of constantly backing up a decade’s worth of Quicken data.)

With Mint, the data never needs to come “down from the cloud” at all. In fact, with the right trustee, it’s actually safer in the cloud than it ever was on my hard drive. When you think about it, that’s been true of money for decades. Be reasonably diligent in choosing a bank, and your personal funds will be far safer there than under your mattress.

And infinitely more useful.

So, as the light bulb went on for Claude about why he might want to be using Mint, I took the opportunity and just casually slipped in: “Yeah, Mint is just the first step. Pretty soon you’ll have your own personal cloud.”

Claude shot me a look. “Oh, sure, I get it. A place for all my data. Stored safely in the cloud. Where all my devices can get it. Is that what you’re building?”

Bingo.

But the story’s not over. After dinner we drove to where our mutual friend, Alex LaVilla, was having an art opening at the Nalanda West Center for American Buddhism in Fremont (the wonderfully funky Seattle neighborhood just north of the ship canal between Lake Union and Puget Sound). Alex was the inaugural artist for a new series of spiritual art shows at Nalanda West.

As I walked in, I spotted Alex talking with a Buddhist monk who I assumed worked with Nalanda. As I came over to say hi, Alex introduced me to Dzogchen Ponlop Rinpoche. Since Alex knows I’m in the Internet industry, by way of introduction he said, “Dzogchen tweets all the time. Sometimes he sends entire poems.” Dzogchen smiled as my eyes went wide — my image of a modern Buddhist monk doing cartwheels in my head. Alex then turned to Dzogchen and said, “Drummond works on all kinds of cool Internet stuff.” Which of course caused Dzogchen to turn to me with a warm smile and look of great anticipation. “Yes?”

Now here was the real litmus test. I decide to take it head on. I answered in just two words:

“Personal clouds.”

He face lit up like a candle. “Really?” But it was what happened next that really floored me.

Alex — who had never heard those words out of my mouth — immediately turned to Dzogchen and said, “Yeah — you know how those Microsoft commercials are always saying, ‘Take it to the cloud’?” Dzogchen nodded. “It’s just like that, only it’s all your stuff. Your files, your photos, your credit card records, your tweets — all your personal information — you can have it in your own cloud. And you control who gets what.”

Now it was Dzogchen’s turn for his eyes to go wide. “Wow. When can I get one?”

Bingo.

*****

Okay, so it’s only incidental evidence from an audience sample of two, but so far field testing of “personal cloud” is showing a light-bulb velocity I rarely see in tech marketing. Even “desktop publishing” didn’t register this fast when Aldus first started using it in 1984.

So I did a little further digging and found this August 6 2009 blog post from Chuck Hollis, VP Global Marketing CTO at EMC, called I Want My Personal Cloud. Excerpt:

So much of the cloud discussion is pointed at businesses — what about us as individuals?

And — yes — there’s a potential type of cloud that I think we’ll all want.

A personal information cloud.

He goes on to explain:

We’re all pretty comfortable using cloud-like services in our personal lives.  Google, Facebook, Twitter, Flickr — the list goes on and on.

But I’d offer that there’s a better potential model out there — and someone is going to get to it sooner than later.

As a simple example, imagine I have 1,000 personal photographs.  There are a few that I don’t mind sharing publicly, others that I want to restrict to different categories of people I know (of course, my relationship with these people change over time), and — of course — a few photographs that I really don’t want floating around anywhere, period.

He then dives into what he believes are the three essential features of personal clouds: 1) control, 2) convenience, 3) permanent archive. Compare that to this list of the essential features of personal data stores that was compiled at the last Internet Identity Workshop.

Chuck’s post acknowledges that the idea started with Storagezilla’s August 4 2009 post entitled The Personal Cloud, which in turn quotes Decho Veep of Product Management Charles Fitzgerald at BusinessCloud9 saying:

…there’s no reason why every device can’t be backed up automatically to the Cloud. The Cloud world will start to refine and segment itself and one of the segments will be the Personal Cloud. This will be a repository for personal information that enables you to organise and access. It’s inevitable that we will reach the point where we move our personal information away from a device and out into the Cloud.

But as we look five years out, we need to be able to manage that Cloud. We have information scattered on a increasingly large number of sources. Facebook is now the biggest photo hosting service in the world, but they throw away the originals you upload. Having a Personal Cloud will allow you to keep the originals, but share them out.  The most important thing about the Personal Cloud is that it will be personal.  Fundamentally the data is your data and you need to be in control of it.

So neither the idea nor the term “personal cloud” is really new — all of this was 18 months ago. And the VRM community has been talking about personal data stores since 2004.

But, as with almost everything in tech, it’s all about timing. The Personal Data Ecosystem hadn’t formed yet. And, in my personal opinion, the technologies that can actually implement the personal control that all these authors agree will be necessary for personal clouds wasn’t there yet (hint: Internet identity is only the start). For example, Jeremie Miller hadn’t created the Locker Project or Telehash protocol yet, nor his new company Sing.ly based on it, which just won best-in-show at the O’Reilly Strata Conference Startup Showcase.

So maybe it’s finally time to seed personal clouds for real.