Blog Home  Sign In RSS 2.0 Atom 1.0 CDF  

  def Softwaremaker() :
         return "William Tay", "<Challenging Conventions />"

  knownType_Serialize, about = Softwaremaker()
 

 Saturday, July 08, 2006

I cannot help but grin when I found out the next Crypto API (CAPI) - or termed - Crypto NextGen (CNG) and the suite it encompasses will be all included in Microsoft Windows Vista.

This article says it all. Elliptical Curves Cryptography (ECC) should definitely be there (and is) when the Base Smart Card Cryptographic Service Provider (Base CSP) is there as well.

It will be a long post to explain why the industry is adopting ECC and slowly adopting it and making it the cryptographic algorithm of choice. If you do understand the key concepts of prime factoring behind the concepts of Public-Private (or Asymmetric) Key Cryptography and the constraints of it moving forward into the future and the proliferation of mobile embedded devices, these 2 diagrams should suffice.

NIST_PubKeyCorreAESKey.gif

InverseDifficulty.gif

Doesnt that give you a hint of where we are going with computing processing power and where it may be next time ?

Saturday, July 08, 2006 6:13:10 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Friday, July 07, 2006

    This popped into my inbox a while ago ...

    image_emailing_securetheweb_072006.jpg

    Contests like this are just great. Not only are you receiving money (if you win... Who cares, even if you dont, a digital mutation of your idea may still evolve to a sellable one), you are competing with the best to generate a innovative, marketable, secured and (hopefully) usable product. The byproduct derived from the entire process would be similar to a mini-version of an RFC. Bad and unsecured ones would have been shot down and the good ones could be made better with a few ingenious tweaks.

    Now only if I can find 25.5 hours in any given day ...

    Friday, July 07, 2006 6:45:38 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  • Blasphemy ...

    It is finally published. After many, many, and I mean, many months of paying the process tax for this piece, it is finally LIVE !

    I started this piece with the first ever March 2005 CTP of Windows Communication Foundation (WCF, previously - Indigo) and I went through so many port demos and edit document cycles its so unbelievably painful ...

    But it is really good to see this in online form and shape.

    I started with this idea even though MSFT Corp has explicity stated that it will not support any form of interoperability between WSE 2.0 and WCF, even though it is "theoretically possible to develop Web services using WSE 2.0 in such a way that they can interoperate with WSE 3.0 (and WCF) by using only a reduced set of specifications"

    More importantly, the main reason for the motivation to write such a piece is written in the article itself and I quote:

    [BEGIN QUOTE]


    ...WSE 2.0 has seen 3 service pack releases since its official launch in 2004. It implemented the OASIS Web Services Security 1.0 specification which was the widely accepted interoperability standard protocols between secured web services as well as the implementations of WS-Addressing, WS-SecureConversation and WS-Trust. It was integrated very nicely into Visual Studio 2003. Even BizTalk Server 2004 carries with it a WSE 2.0 adapter for securing of Web Services. Thus, it would be fair to assume that there is more than its fair share of implementations in the market today.

     

    Depending on timing, budget, complexity and a whole host of other requirements, some of these applications will need to be moved and migrated to WSE3.0 and some to WCF. Aaron Skonnard has provided a great resource in his “Service Station” column on MSDN on a brief overview on the migration of WSE 2.0 applications to WSE 3.0 ones. However, as stated in his article, there are some major changes in the programming model and architecture in WSE 3.0 and migrating them from WSE 2.0 may not be trivial.

    Another very important factor to take note is while WinFX, and therefore WCF, is available downstream from Windows Vista to Windows 2003 and Windows XP. That is as far down as it goes. There still exists a huge installed base of Windows 2000 Servers out there running on server and data farms and if you need to implement the advanced Web Services stacks on those servers, WSE is still a very important strategy you cannot ignore.

    As noted in the above guidelines, even though Microsoft will not guarantee interoperability between WSE 2.0 and WCF, the good news is that there are a few WSE 2.0 common scenarios, which can allow wire-interoperability with WCF. I will illustrate them in the next section...


    [END QUOTE]

     

    So, this article will outlined WHAT that reduced set of specifications are and HOW to go about using them.

    Many Special Thanks go to Kirill, the Interop PM on WCF, who gave me a couple of tips to get over the port-over humps I had thoughout this piece since last year. And of course, I cannot forget Clemens, who is the catalyst to making this publication happen when he came onboard.

    I hope this helps at least someone out there. Enjoy !

    Friday, July 07, 2006 6:11:57 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Monday, June 26, 2006

    It has been quite a while since I hit the speaker circuit for our Singapore .Net Usergroup (which I had helped co-founded).

    However, I will be there on the 6th July 2006 speaking on the Federated Identity Metasystem. Do register yourself and I hope to see you there.

    Monday, June 26, 2006 6:10:31 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Thursday, June 22, 2006

    As some of you might know, I have recently been very active in working with Microsoft Cardspace at work. I am involved in 2 very major projects at the Governmental Level that deals with authentication frameworks and federated identity systems.

    Having heard about this via zdnet is really a piece of good news. This really brings to reality about the entire Identity Metasystem concept, instead of having many quarters talk about it as just a Microsoft thing.

    OSIS is the project - who knows, given time and resources, I may want to contribute into that "space" as well

    Thursday, June 22, 2006 6:09:39 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Saturday, June 10, 2006

    Well, the marketing spin doctors are at it again. Besides the renaming of WinFX to .NET Framework 3.0, Infocards has gotten a new and better name as well.

    I am just glad that it is not renamed as Windows Card Foundation. And for good reasons ...

    Actually Microsoft Cardspace does sound nice. The word "space" is just so much more abstract and encompassing ...

    Saturday, June 10, 2006 6:08:14 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Wednesday, June 07, 2006

    During my webcast on "Why we need Reliablility in SOAP: Web Services", there were a couple of hiccups which hindered a better listening experience.

    1. I cannot see the animation on the slides I am presenting, even though I am assured by the producer that the floor is seeing it. Therefore, I am "guessing" what the audience is actually seeing in my click-animation and gauging my content from there. It was neither easy nor pleasant.
    2. There was a disconnect incident in my demos that also marred the listener's experience. I had to re-login again. Not Good.

    Isnt it ironic? My network connection showed lack of reliability when I am talking about Reliability as a topic. . Now the least I can do is to answer a couple of questions that popped up after the session:

    Q: Is RM available for all the bindings in Windows Communication Foundation (WCF, previously - Indigo)
    A: Yes, it is available for MOST of the standard bindings in WCF. In some bindings such as the netTcpBinding I showed, it is On-by-Default. In bindings such as wsDualHttpBinding where you need correlation of different channels and such, it is Always-On. It doesnt make sense to stick <reliableSession /> in a netMsmqBinding, for example.

    Q: Is this the same WS-RM spec that is authored by IBM, Microsoft and TIBCO ? 
    A: Yes. In my slide, I mentioned - I.B.M and TIBCO. I.B.M is actually the acronym I used for IBM, BEA and Microsoft.

    Q: Can I get the demo you showed? 
    A: No, I am sorry. In any case, my demos will not work with the lastest WinFX B2 bits today. I will need time to port them over. I recommend you go bug Shy when you see him and ask him for his WS-RM demo which consists of a WPF stack in there and a "awesomely" cool Rubik's Cube demo and is 100x better than mine.

    All in all, it is quite a different experience than doing an on-stage presentation, especially when you spent an hour talking to yourself and you cannot see the audience faces and cannot manipulate your content and presentation based on their moods.

    But then again, no one can see that I am wearing my Mickey-Mouse boxers while I am presenting, so I guess that is a good trade-off.

    Wednesday, June 07, 2006 6:06:48 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Friday, June 02, 2006

    So ...

    Mr. Setag goes over to Mr. Nezihc's little cafe-library called "Cafe Eboda" in Tonmeerf and bought a cup of coffee. Mr. Setag then sits down with his coffee and proceeded to pick up some publications to read from the Cafe's Library. He was, however, abruptly stopped by Mr. Nezihc who refused to allow him to read those in-cafe publications unless Mr. Setag pays for it.

    Mr. Setag was taken aback. Arent those magazines free to read. Everyone else here is reading it and I dont see them paying for it. Isnt this an open library ?

    "Well, yes", Mr Nezihc replied. "But because your wallet is bloated, I think it is only right that I charge you if you need to read those publications."

    "That is absurd", Mr Setag retorts. "It is not my fault that my wallet is bloated. In fact, given anyone else, they would love to have my bloated wallet as well, or try their very best to empty it through some legal means. This has nothing to do with the fact that I used to be your boss before, right ?"

    Mr Nezihc: "No, like I said - I am charging you only because your wallet is bloated. The rest of the folks here are not as rich as me, therefore, I dont charge them a single cent ..."

    Mr Setag: "OK. I will just bring in my papers to read then. How about that ?"

    Mr. Nezihc: "Nope. You have to use ours and you have to pay for it ..."

    Ridiculous ? Only happens in undeveloped countries ? You say ?

    Well, if you believe the content here is true, then I dont think this is any different.

    Jonathan Zuck of Association for Competitive Technology (ACT) sums it up real well with the following quote:

    "Adobe seems to be realizing that open standards have costs as well as benefits.  While opening its technology to the world helped Adobe to spread Acrobat far and wide, it also limits its potential business models and incentives to continue innovating.  The problem for Adobe is that they can't put this genie back in the bottle"

    ---

    The Association for Competitive Technology (ACT) is an international education and advocacy group for the technology industry. Focusing on the interests of small and mid-size entrepreneurial technology companies, ACT advocates for a "Healthy Tech Environment" that promotes innovation, competition and investment. ACT has been active on issues such as intellectual property, international trade, e-commerce, privacy, internet policy and antitrust. ACT represents more than 3000 software developers, systems integrators, IT consulting and training firms, and e-businesses from around the world.

    Friday, June 02, 2006 6:05:28 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  •  Saturday, May 27, 2006

    Here I am - proud to announce that I will be doing a MSDN Redmond-hosted Webcast right from the other side of the hemisphere in Singapore.

    I will be speaking on concepts of Reliability in Soap:Web Services, why its needed, as well as the context of it in Windows Communication Foundation (WCF, previously - Indigo).

    More importantly, a 40GB Creative (another homegrown Singaporean product) ZEN MP3 player is at stake here waiting to be won. So, do sign up quickly for a chance to win this. Rules here.

    If you are one of those insomniacs in Asia-Pacific, do try to tune-in. I hope this blazes a trail for the other community leaders in Asia-Pacific to follow suit and show that we are right on par there with the best in technology.

    Click here for more details on this webcast.

    Saturday, May 27, 2006 6:03:37 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions

  • Via Newark - on an Airbus 340.

    NOT exactly very excited on this LONG trip though ... No prizes for guessing where I am going though. Here are some stats for the event.

    • 1,250,000 pieces of "Mikes & Ikes" will be consumed over the course of a week at Tech Ed 2006
    • 18,750 pounds of salad will be prepared and offered at meals
    • 83,700 ice cream novelty/ fruit and yogurt bars have been ordered for this function
    • 60,000 eggs will be eaten by attendees at breakfast (this is equal to 4,800 dozen cartons of eggs)
    • It will take 4 semis to transport the 150,000 bottles of water consumed on this show
    • The total amount of fruit ordered will fill 3/4 of full size tractor-trailer
    • 1.6 million ounces of coffee will be poured and consumed (conservative estimate)
    • More than 50,000 pounds of carbohydrates will be consumed at Tech*Ed (Atkins who?)
    • 1,500 table cloths will be used and re-set on a daily basis:  (7,500 for the week)
    • A minimum of 2,000 antacid tablets are likely to be consumed at this event

    Talk about Americans being number-crazy-crunchers.

       

    Saturday, May 27, 2006 6:02:19 AM (Malay Peninsula Standard Time, UTC+08:00)  #    Disclaimer 
  • Blog reactions