<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: MyVidoop Tries to be Everything You Need for Login Security</title>
	<atom:link href="http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/</link>
	<description>Rebooting the workforce</description>
	<lastBuildDate>Thu, 26 Nov 2009 07:28:23 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Jason the Content Librarian &#187; Blog Archive &#187; Exploring OpenID and identity 2.0 resources</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-194100</link>
		<dc:creator>Jason the Content Librarian &#187; Blog Archive &#187; Exploring OpenID and identity 2.0 resources</dc:creator>
		<pubDate>Wed, 10 Oct 2007 21:15:46 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-194100</guid>
		<description>[...] a concept called OpenID. But I had never taken any concrete steps to learn more. But last week Web Worker Daily had a post about a very interesting new OpenID service, called Vidoop. Vidoop is an OpenID provider, so when [...]</description>
		<content:encoded><![CDATA[<p>[...] a concept called OpenID. But I had never taken any concrete steps to learn more. But last week Web Worker Daily had a post about a very interesting new OpenID service, called Vidoop. Vidoop is an OpenID provider, so when [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott Blomquist &#187; Blog Archive &#187; The hard FAQs about Vidoop</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-193615</link>
		<dc:creator>Scott Blomquist &#187; Blog Archive &#187; The hard FAQs about Vidoop</dc:creator>
		<pubDate>Wed, 10 Oct 2007 05:36:52 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-193615</guid>
		<description>[...] have been some good blog conversations lately about myVidoop.com and Vidoop Secure (over at Judi Sohn&#8217;s Web Worker Daily review of myVidoop, or Carleen Hawn&#8217;s write-up over at GigaOM for [...]</description>
		<content:encoded><![CDATA[<p>[...] have been some good blog conversations lately about myVidoop.com and Vidoop Secure (over at Judi Sohn&#8217;s Web Worker Daily review of myVidoop, or Carleen Hawn&#8217;s write-up over at GigaOM for [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Wondering</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-193289</link>
		<dc:creator>Wondering</dc:creator>
		<pubDate>Tue, 09 Oct 2007 20:46:41 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-193289</guid>
		<description>S.W. 

You need to go back to school.  How exactly does a password (no matter how complex) combat simple keystroke logging?  automation?  guessing?

-WONDERING what kind of security related authority you have especially since you sound like you are just hating.</description>
		<content:encoded><![CDATA[<p>S.W. </p>
<p>You need to go back to school.  How exactly does a password (no matter how complex) combat simple keystroke logging?  automation?  guessing?</p>
<p>-WONDERING what kind of security related authority you have especially since you sound like you are just hating.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: S.W.</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192857</link>
		<dc:creator>S.W.</dc:creator>
		<pubDate>Tue, 09 Oct 2007 07:48:35 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192857</guid>
		<description>@Judi

On an authorized computer, the login system is worthless and can be defeated by anyone in seconds. So, the whole hype about their image grid is complete bunk. They&#039;re better off using a plain old password.

The entire security of the system relies on the &quot;software token&quot; (a.k.a. a cookie). Since this token is sitting on a drive and written by a user process, it&#039;s vulnerable to being stolen malware. It&#039;s disingenuous for them to be touting this as a protection against keyloggers when it&#039;s just as easy for malware to grab the activation data.</description>
		<content:encoded><![CDATA[<p>@Judi</p>
<p>On an authorized computer, the login system is worthless and can be defeated by anyone in seconds. So, the whole hype about their image grid is complete bunk. They&#8217;re better off using a plain old password.</p>
<p>The entire security of the system relies on the &#8220;software token&#8221; (a.k.a. a cookie). Since this token is sitting on a drive and written by a user process, it&#8217;s vulnerable to being stolen malware. It&#8217;s disingenuous for them to be touting this as a protection against keyloggers when it&#8217;s just as easy for malware to grab the activation data.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Judi Sohn</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192523</link>
		<dc:creator>Judi Sohn</dc:creator>
		<pubDate>Mon, 08 Oct 2007 22:14:35 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192523</guid>
		<description>@S.W. Perhaps, but you have to be sitting at a computer that MyVidoop has already authorized.</description>
		<content:encoded><![CDATA[<p>@S.W. Perhaps, but you have to be sitting at a computer that MyVidoop has already authorized.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: S.W.</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192466</link>
		<dc:creator>S.W.</dc:creator>
		<pubDate>Mon, 08 Oct 2007 20:19:58 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-192466</guid>
		<description>This login scheme can be defeated by an illiterate person clicking reload a few times. All they need to do is keep track of which image categories are consistently displayed. I broke my own password in 3 reloads.

This can be automated by scraping and classifying Vidoop&#039;s image library.</description>
		<content:encoded><![CDATA[<p>This login scheme can be defeated by an illiterate person clicking reload a few times. All they need to do is keep track of which image categories are consistently displayed. I broke my own password in 3 reloads.</p>
<p>This can be automated by scraping and classifying Vidoop&#8217;s image library.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Judi Sohn</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-191333</link>
		<dc:creator>Judi Sohn</dc:creator>
		<pubDate>Sun, 07 Oct 2007 10:51:56 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-191333</guid>
		<description>Thanks, George. I don&#039;t know why I didn&#039;t notice that before.

I&#039;m still enjoying MyVidoop, but one thing about the Firefox plugin is driving me crazy: The timeout is way too short. I can be reading a long article or writing an email, and MyVidoop will log me out. I understand that it can only monitor browser activity, so if I&#039;m working in email or Word the plugin thinks I&#039;ve left the computer. But the time has to be longer than it is.</description>
		<content:encoded><![CDATA[<p>Thanks, George. I don&#8217;t know why I didn&#8217;t notice that before.</p>
<p>I&#8217;m still enjoying MyVidoop, but one thing about the Firefox plugin is driving me crazy: The timeout is way too short. I can be reading a long article or writing an email, and MyVidoop will log me out. I understand that it can only monitor browser activity, so if I&#8217;m working in email or Word the plugin thinks I&#8217;ve left the computer. But the time has to be longer than it is.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: links for 2007-10-06 &#171; Zero influence</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-190151</link>
		<dc:creator>links for 2007-10-06 &#171; Zero influence</dc:creator>
		<pubDate>Sat, 06 Oct 2007 00:38:32 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-190151</guid>
		<description>[...] MyVidoop Tries to be Everything You Need for Login Security « Web Worker Daily Short review on Vidoop. I so love this platform. (tags: login authentication advertising transaction SSO Token) [...]</description>
		<content:encoded><![CDATA[<p>[...] MyVidoop Tries to be Everything You Need for Login Security « Web Worker Daily Short review on Vidoop. I so love this platform. (tags: login authentication advertising transaction SSO Token) [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: George Louthan</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-189932</link>
		<dc:creator>George Louthan</dc:creator>
		<pubDate>Fri, 05 Oct 2007 18:20:42 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-189932</guid>
		<description>Thanks for the write-up! And, speaking as the person attached to the hand in that video, I always get a kick out of seeing that around.

One thing that I&#039;d like to add is that, though only one username will autofill, changing it to a different saved account is just a matter of clicking the &quot;username&quot; field and selecting the one you want to use, if that makes sense.

Again, all this attention we&#039;re getting is so exciting, and I want to thank everyone for being interested.</description>
		<content:encoded><![CDATA[<p>Thanks for the write-up! And, speaking as the person attached to the hand in that video, I always get a kick out of seeing that around.</p>
<p>One thing that I&#8217;d like to add is that, though only one username will autofill, changing it to a different saved account is just a matter of clicking the &#8220;username&#8221; field and selecting the one you want to use, if that makes sense.</p>
<p>Again, all this attention we&#8217;re getting is so exciting, and I want to thank everyone for being interested.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott Blomquist&#8217;s Online Identity, 2.0 &#187; Blog Archive &#187; Every week should be like this one!</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-189472</link>
		<dc:creator>Scott Blomquist&#8217;s Online Identity, 2.0 &#187; Blog Archive &#187; Every week should be like this one!</dc:creator>
		<pubDate>Fri, 05 Oct 2007 03:53:14 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-189472</guid>
		<description>[...] We&#8217;ve had a few good write-ups this week. Especially an article in Financial Week and a review of myVidoop in Web Worker Daily. [...]</description>
		<content:encoded><![CDATA[<p>[...] We&#8217;ve had a few good write-ups this week. Especially an article in Financial Week and a review of myVidoop in Web Worker Daily. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: tyler</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187450</link>
		<dc:creator>tyler</dc:creator>
		<pubDate>Tue, 02 Oct 2007 01:58:37 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187450</guid>
		<description>rymes with poop?!</description>
		<content:encoded><![CDATA[<p>rymes with poop?!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Carsten Pötter</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187264</link>
		<dc:creator>Carsten Pötter</dc:creator>
		<pubDate>Mon, 01 Oct 2007 20:26:01 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187264</guid>
		<description>I haven&#039;t tried MyVidoop yet, though it seems to have similar features (OpenID/password management) as Sxipper. BTW, there are two really good online password management services which should be interesting to people who don&#039;t need an OpenID provider or who have one already: PassPack and Clipperz.

@Vincent404: Currently there is no way to port OpenID&#039;s from one provider to another. Though if you have a blog or website you should consider delegation which means that your blog&#039;s URL works as an OpenID while delegating the authentication process to an OpenID provider. This way you can always change the provider while using the same URL as an OpenID: your blog&#039;s URL.
Some relying parties (=websites that let you log in with OpenID) let you associate multiple OpenID&#039;s with your account. So it&#039;s possible to use different OpenID&#039;s for login.
Anyway don&#039; worry, MyOpenID is one of the best providers out there, IMHO.</description>
		<content:encoded><![CDATA[<p>I haven&#8217;t tried MyVidoop yet, though it seems to have similar features (OpenID/password management) as Sxipper. BTW, there are two really good online password management services which should be interesting to people who don&#8217;t need an OpenID provider or who have one already: PassPack and Clipperz.</p>
<p>@Vincent404: Currently there is no way to port OpenID&#8217;s from one provider to another. Though if you have a blog or website you should consider delegation which means that your blog&#8217;s URL works as an OpenID while delegating the authentication process to an OpenID provider. This way you can always change the provider while using the same URL as an OpenID: your blog&#8217;s URL.<br />
Some relying parties (=websites that let you log in with OpenID) let you associate multiple OpenID&#8217;s with your account. So it&#8217;s possible to use different OpenID&#8217;s for login.<br />
Anyway don&#8217; worry, MyOpenID is one of the best providers out there, IMHO.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Isaac Rabinovitch</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187248</link>
		<dc:creator>Isaac Rabinovitch</dc:creator>
		<pubDate>Mon, 01 Oct 2007 19:55:40 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187248</guid>
		<description>&lt;blockquote&gt;There are desktop software solutions like Roboform (PC) or 1Passwd (Mac), but they won’t help you when you’re away from your main computer...&lt;/blockquote&gt;Roboform certainly can. You can get PDA apps (PalmOS and Windows CE) that store copies of all your logins.</description>
		<content:encoded><![CDATA[<blockquote><p>There are desktop software solutions like Roboform (PC) or 1Passwd (Mac), but they won’t help you when you’re away from your main computer&#8230;</p></blockquote>
<p>Roboform certainly can. You can get PDA apps (PalmOS and Windows CE) that store copies of all your logins.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: FirefoxUser</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187239</link>
		<dc:creator>FirefoxUser</dc:creator>
		<pubDate>Mon, 01 Oct 2007 19:23:19 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187239</guid>
		<description>There are many good Firefox add-ons for password management - and they work on Windows, Mac and Linux! One of them (iMacros) can even use social bookmarking services to store the passwords, so you can access them from every PC that has Firefox installed.
http://del.icio.us/imacros/imacro</description>
		<content:encoded><![CDATA[<p>There are many good Firefox add-ons for password management &#8211; and they work on Windows, Mac and Linux! One of them (iMacros) can even use social bookmarking services to store the passwords, so you can access them from every PC that has Firefox installed.<br />
<a href="http://del.icio.us/imacros/imacro" rel="nofollow">http://del.icio.us/imacros/imacro</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: vincent404</title>
		<link>http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187029</link>
		<dc:creator>vincent404</dc:creator>
		<pubDate>Mon, 01 Oct 2007 13:30:43 +0000</pubDate>
		<guid isPermaLink="false">http://webworkerdaily.com/2007/10/01/myvidoop-tries-to-be-everything-you-need-for-login-security/#comment-187029</guid>
		<description>Wish I knew of this BEFORE I signed up with Myopenid. If anyone knows of a way to port one OpenId to another provider, let me know.</description>
		<content:encoded><![CDATA[<p>Wish I knew of this BEFORE I signed up with Myopenid. If anyone knows of a way to port one OpenId to another provider, let me know.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
