Introducing Voltage Security

I have been interested in Identity-based Encryption (IBE) since a VC friend of mine asked me about IdentiCrypt, an attempt to commericalize Stanford IBE project, almost two years ago.  I am not a crypto expert in any sense, but I know how to put together a product, especially easy to use consumer products, and all the pain and mistakes one can make while trying to do so.

I took a look and found a lot of potential in IBE although IdentiCrypt's execution was amateurish at the time.  So I volunteered to help them but got nothing in response.  I guessed they were too busy talking to VCs and continued to monitor the IBE technology.  I knew that they got funded but not much else since they were in stealth mode.  Today, they unveiled themselves as Voltage SecurityCool name, BTW.

Scott Loftesness is one of their advisors.  You can't get a better advisor than Scott IMHO.  Here is Scott's own words on Voltage Security.  Looking at their board, looks like Hummer Winblad, Morgenthaler, and a few well-known individuals invested in the company.  The company is headed by Sathvik Krishnamurthy from ValiCert.  I don't know Sathvik, but I had been impressed in the past with ValiCert's ability to make a big deal out of seemingly nothing.  Since Sathvik was VP of marketing and business development at ValiCert, I have to say Voltage is in good hands.

I haven't looked into their product yet so I can't say much about them yet.  Meanwhile, I would like to welcome Voltage Security to the security market and a hearty congratulations to them for successfully navigating the VC waters.  Good luck to them also.  They will need plenty of it!

If I had an advice to give them, it would be this:

Think of cryptography and security as the engine and chasis of the car you are selling.  While they are both important, rest of the car is what sells the car because people can't buy what they can't see.  Don't make the same mistakes most security companies make by hiring mostly crypto and security experts.

Update 1: Link to Tim Oren's post about Voltage where he mentioned above as a sage advice.  Thanks Tim.  I think the first advice I had given was telling my parents to stop fighting like little children when I was eight or so.  Here is a confession: I gave that advice so I can sleep at night.

My Thoughts on Blog API

First de facto standard Blog API was Blogger API by Evan Williams.  It was naive in design and had some design peculiarities like appkey puzzled others, but it worked.  Evan's "experimental" disclaimer lost its merit when his API was taken up by others without him complaining loudly about it.

Dave Winer then designed MetaWeblog API to supplement Blogger API with some notable overlaps in features.  MetaWeblog API is a classic example of 'embrace and extend' strategy which has many benefits as well as many problems.  One such benefit is taking of initiative which is the opening note of many war songs.

Both Evan and Dave had the opportunity to remove the danger of confrontation when MetaWeblog API was being designed.  Unfortunately, neither did so.  In fact, both aggrevated the situation by Dave not supporting appkey parameter from MetaWeblog API and Evan starting work on Blogger API 2.0.

I think both Dave and Evan are responsible for the mess we have today and I see little chance of a universal Blog API emerging for a while.  If I had the power to dictate things, I would have the Echo project adopt the union of Blogger API 1.0 and MetaWeblog API as Echo API 0.0 and extend it as needed without breaking backward compatibility.

Will everyone involved sacrifice their prides, ideals, and needs for the good of all?  Maybe, just itty bitty miraculous maybe.

Update #1: I thought I should make some of the implications of my proposal clear:

  • Echo API 0.0 will be just as pretty as it is now.  Will you choose beauty and elegance over universal Blog API and continuity?
  • Members of Echo project will control the future of the universal Blog API.  If you want some control, join the project.
  • All the blogging tools will continue to work.
  • XML-RPC binding must be supported.  SOAP and REST binding are up to the Echo project.

Update #2: Since people seem to be still mixed up about what I mean by "just do it", let me list the specific actions that must take place before the miracle can happen.

  • Dave must say "I will support Echo API 1.0 if it is backward compatible with the union of Blogger API 1.0 and MetaWeblog API as it is now."
  • Evan must say "I will support Echo API 1.0 even if it is backward compatible with the union of Blogger API 1.0 and MetaWeblog API as it is now."
  • Echo must say "We will use the union of Blogger API 1.0 and MetaWeblog API as the basis for Echo API 1.0 with the understanding that backward compatibility must not be broken."

Three seemingly simple but courageous actions are the key ingredients for the miracle.  And PLEASE don't say it any differently, add other conditions, recount the past, or even make apologies.  Just do it.

Lastly, I don't want people to send me their opinions, questions, nor criticisms.  Time for discussion is over.  If you want it to happen, just do your part without worrying about others doing their part.  Trust me, you have everything to lose by doing it, so mine as well do it without thinking about it.

Freaky Inventions out of Korea

I often tell my friends that I am too inventive for my own good.  Here are some too inventive ideas from Xeno Freaks, Inc in Korea [via Suman Park via Cyflux].  These webpages are in Korean language, but pictures are sufficient to communicate the freaky ideas being presented.

Xeno Freaks ARS (Anus Recognition System)

Biometric authentication technology of a different kind.  You can find more pictures at the ARS web page, but don't go there just before or after a meal.

Could be a brisk seller if it checked health-related problems as well.  Probably not appropriate where there are many absent-minded professor types.

Xeno Freaks Self-Rechargeable Mobile Phone

Every time you dial, you are charging your phone's battery.  I love rotary phones!

Textile: Wiki-style Moblog Editor?

Suman Park [Korean] wrote today that Wiki-style editing used in Textile might be a great way to write blogs, particularly for moblogging.  While I am too lazy to remember or look up those Wiki-style formatting special characters, I think it does make good sense for moblogging.  Now mobloggers can be really boldMaybe they are doing this already.  By the way, Texism blog looks good.  Classic use of whitespace.

On Adding Bullsh*t

Dave had this to say about me this evening:

"There are very few people in the world who I trust to add none of their own bullshit.  [snip]  People sometimes bend over backwards to appear to be fair and say things that are wrong. I think I caught Don Park doing that. Hey Don, is <dc:date> really better than <pubDate>? That sounds like bullshit to me. Sounds like you're trying to get someone to think you're reasonable. Weren't you the one who told me to never be reasonable? That was good advice."

Dave was referring to this bit in my Watch Your Six post:

"Ben of Six Apart explains why Six Apart has pledged support for Echo.  Unfortunately, his list of reasons are mostly resolvable technical complaints against RSS.  For example, Ben writes that Dublin Core elements are technically superior.  I'll agree with that."

Just before getting married, I told my wife of my Selfish Pig Rage Rule which is:

  • Wait your turn

For eleven good years, that rule worked well for us.  I also use the rule with friends.  So Dave, I apologize for upsetting you and how I will upset you when my turn comes unless I forget to.  Chances are, I'll just forget to get pissed off since that is why the Rule really works.

Now, I will say these "designed to make you feel guilty" words though.  Dave, the operative word was 'technically.'  That word may be interpreted in many ways, some bad, some good.  Frankly, I am surprised that you, a friend, chose to interpret it in a way that leads you to sum it up as bullsh*t.

Also, my advice to be unreasonable was my attempt to address your habit of bending over at the wrong time and getting shafted badly, which just builds up emotional stress in you until you blow up seemingly for no reason, catching most people unaware and upset at you.  Since you obviously missed what I was trying to point out to you, here it is:

If you can't handle the big waves of emotional ups and downs, make the waves smaller.  I have similar problems so I made the waves smaller by being unreasonable more regularly and in smaller magnitudes.  I also use humor to minimize stress on people around me.

<

p dir=”ltr”>What I wrote above is not some attempt to be reasonable or clever.  This is how I survive being me day to day, Dave.  You can find your own solutions if this doesn't fit you.

Funky Defined

Dave sent me a link to what he means by funky.

"A feed is funky if it uses extensions to provide information that can be expressed by core elements.

"If everyone strives to not be funky, then it becomes trivially easy to write aggregators, and new entrants to the market can get in quickly and at low cost, and users get more choice.

If we were to go the opposite way, with every source of feeds inventing their own replacements for core RSS 2.0 elements, the cost to enter would become increasingly high, and it becomes more likely that programs will express compatibility in terms of products, not formats. So "funky" is anti-interop; and "not funky" is pro-interop." – Dave Winer

He also adds:

"I never wanted to have to define this, because I hoped the issue would go away, quickly. But the people who could have done something about it refused to, so the wound festered. The problem, imho, isn't the term, but the practice. People should try to follow the spec, and if they don't we should ask them to explain why.

BTW, I don't think it's cool to repeat information two or more times in a feed. That makes it more complicated to understand. Keep it simple. That's the value of RSS. Anyone who can understand a little HTML can understand RSS. That's important!" – Dave Winer

I still like my Funkyness Illustrated post better.  Words are so…tiring.  I wonder how much exercise value Playboy foldouts have on its readers.  FYI, I am talking about neck tilting and stretching in case you were thinking other things.

<

p dir=”ltr”>UPDATE: Unless I misunderstood his words, Dave and I disagree on whether an RSS feed can have both <pubDate> and <dc:date>.  I think it's harmless.  Dave don't think it's cool.

Comments and Replies on RSS

These are some of the comments and replies which I thought deserve being hoisted up into a post.

Optional Core Elements

"Don: Those "core" elements are *optional*. There's not anything wrong with not using them and the spec says absolutely nothing about it being wrong. Using Dublin Core — the ISO-Standard which is *not* related to RSS 1.0 — in RSS 2.0 is perfectly valid usage, as any RSS validator will tell you." – Tomas
"Tomas, have you wondered *why* those elements were made *optional*? Anyone who browsed through the RSS discussions will know that those elements were made *optional* for user's convenience, and not for RSS 1.0 crowd to lay Cuckoo's Eggs within RSS 2.0." – Don Park

Frozen means Unmeltable?

"Don, none of the specific 5 points Ben mentions are resolvable because they would all need changes to the spec, and that's frozen.  In an ideal world perhaps these and other changes could be included in an RSS 2.1, but this isn't an option." – Danny

"Danny, the spec is not frozen even if Dave say it is because he is not really in full control of it. If he was, we wouldn't have all this argument.  [snip]  If you think you can change the world as a person, changing a spec should be easier than changing the world. If you really want something wholeheartedly, you shouldn't know how to stop going after it nor stop short of begging for it. If Dave seems like an unstoppable force, it is because he throws his whole being into it and not like some intellectual college debate." – Don Park

"The spec can be changed, and even rewritten. I think that's what Rogers Cadenhead's group is doing. The people who want to see theselves stopped by the spec are lawyers not developers. If they were writing apps they would have been done with this kvetching a long time ago." – Dave Winer

"My understanding of the situation is that Dave will not prevent people from refining the spec itself for clarity and encourages people to add namespace-based extensions to RSS 2.0 that *supplements* without *replacing" the core elements.  Knowing Dave, I will even go further and guess that Dave will embrace good ideas and incorporate them into the core spec.

What was done can be undone. The man who wrote the word 'frozen' is still around, thankfully, so taking that word and using as an absolute truth against the man who wrote it originally makes zero sense to me." – Don Park

<

p dir=”ltr”>Thanks to Danny, Tomas, and Dave for the guest appearance.  The star of the show is, of course, yours truely.  I particularly like the Cuckoo's Egg bit.  Joy of writing is appreciating one's own words like a baby without a diaper discovering a new toy, warm and soft, when he turns around.  Until the next episode of "As the Bowel Churns", goodbye.

Wes Felter on Funky RSS

Finally, someone who echoes the point I was making with my Funkyness Illustrated and Watch Your Six posts:

"I didn't want to dirty my hands with the RSS/Echo controversy (since I don't use an aggregator and I don't have any control over my RSS feed), but eventually my curiosity overcame me. I tracked the RSS funk to its source and I have to wonder what these people were thinking. Extensions are great, but it's a well-known principle that extensions are for adding new features, not replacing features that already exist in the base spec. If you think RSS has bugs, you can't make them go away by adding more." – Wes Felter in Hack the Planet

<

p dir=”ltr”>I don't really care who originally made the booboo, who forgot to complain timely, nor listen to embarrassing apologies.  I am bad with names anyway.  But I do care when the booboo starts copulating and evolving in my living room.  Now let's just fix this damn problem (it is braindead simple to fix technically) and move on to something new to pour our hearts out over.  This Selfish Pig is getting bored.