Never trust a computer you can't throw out a window.
Almost every OS X server service offers weak or broken authentication mechanisms.
Facebook and Google are battling over who will be our gateway to the rest of the Internet through 'like' buttons and universal logins - giving them huge power over our online identities and activities.
When Facebook was getting started, nothing used real identity - everything was anonymous or pseudonymous - and I thought that real identity should play a bigger part than it did.
I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.
When we were a smaller company, Facebook login was widely adopted, and the growth rate for it has been quite quick. But in order to get to the next level and become more ubiquitous, it needs to be trusted even more.
It is impossible to work in information technology without also engaging in social engineering.
For a while, I couldn't join Facebook because of my last name. During the registration process, I was asked for my real name, and when I wrote 'Fake,' it rejected me. Finally, a friend working for Facebook took care of me.
Usernames and passwords are an idea that came out of 1970s mainframe architectures. They were not built for 2016.
With the early prototypes, I held the phone to my ear and my ear [would] dial the number. You have to detect all sorts of ear-shapes and chin shapes, skin colour and hairdo... that was one of just many examples where we really thought, perhaps this isn’t going to work.
Every application will be designed from the ground up to use real identity and friends.
Facebook has a rule that you're not supposed to be anonymous.
Computing is kind of a mess. Your computer doesn't know where you are. It doesn't know what you're doing. It doesn't know what you know.
User-controlled default encryption is a real challenge for law enforcement.
If you still use 'admin' as a username on your blog, change it.
That's the power behind a tool like Facebook Connect. It is making a Web without walls. Facebook allows you to go to other sites to comment, rate, etc., without having to set up a new profile for that site.
If you've got five or six cloud apps, do you want a different user ID and password for each one? No.
I log out of Twitter on my computer so I have to log in and then I log back out.
It's crazy that you have to tell your phone or your computer or your house or your car 'It's me!' hundreds of times a day. Wearables will solve that problem.
