<rss version="2.0">
  <channel>
    <title>Bret W. Lester, The Official Web Presense of</title>
    <link>http://bretlester.com</link>
    <language>en-us</language>
    <description>What to think about stuff</description>
    <item>
      <title>Announcing Niche, The Hacker's Web Stack</title>
      <description><![CDATA[<p>I am offcially releasing my Java-based web stack, Niche, (which happens to be powering this very site) under a BSD license.</p>

<p>
<a href="http://niche.bretlester.com/">I've created a website for it here</a>.
</p>

<p>
From the website:
</p>

<blockquote>
"Niche is a high performance Java-based web stack for hackers, built from the ground up to be modular with a devoutly minimal core."<br/><br/>
"The minimal Niche Core provides a basic infrastructure for components. Interoperable components are distributed as bundles."
</blockquote>

<p>
I've created a couple of Niche Bundles--both of which provide a sensible platform for writing Server-Side Javascript, and one which delivers a minimal abstraction layer over JDBC and MySQL's Connector J.
</p>]]></description>
      <pubDate>Mon, 01 Dec 2008 17:39:02 GMT</pubDate>
      <author>Bret W. Lester</author>
      <guid isPermaLink="true">http://bretlester.com:80/entry/11/</guid>
      <link>http://bretlester.com:80/entry/11/</link>
      <category>home</category>
    </item>
    <item>
      <title>Massive Sacramento River Chinook Carcass  Found</title>
      <description><![CDATA[<p>For my fellow fish-heads (my brother sent this to me). Holy Shit!</p>

<p>Here's <a href="http://www.redding.com/news/2008/nov/04/07/">The Story</a> for anyone interested.</p>

<p><img src="http://media.redding.com/redd/content/img/photos/2008/11/03/081104ctSalmon_w.jpg"/></p>]]></description>
      <pubDate>Tue, 04 Nov 2008 21:20:38 GMT</pubDate>
      <author>Bret W. Lester</author>
      <guid isPermaLink="true">http://bretlester.com:80/entry/9/</guid>
      <link>http://bretlester.com:80/entry/9/</link>
      <category>home</category>
    </item>
    <item>
      <title>What to Think About OpenID</title>
      <description><![CDATA[<p>Want to alienate and confuse your users? Consider Open ID for your next authentication scheme. Fortunately we have Yahoo (god bless 'em), mysteriously oblivious to their shareholder obligations with plenty of time to spend on <a href="http://developer.yahoo.net/blog/archives/2008/10/open_id_research.html">usability studies</a>--providing actual observable proof of something that is common sense to anyone with a friend or family member who doesn't know or give a fuck what Web 2.0 means.</p>

<p>This pretty much sums it up:</p>

<blockquote>
"Our test subjects were several experienced Yahoo! users... None of [them] had heard of OpenID before, and none of them even noticed the OpenID sign-in box displayed below the traditional email/password login form on the site."
</blockquote>

<p>
In other words, if you're building a site where a significant percentage of your users are from somewhere other than San Francisco, or who's primary source of income is non-tuition-based, I would recommend avoiding Open ID altogether. It is practically useless as an optional authentication method.</p>
<p>
If Open ID made sense it would have garnered some form of mass-appeal by now. It is clearly an evolutionary dead end. When you're reading this in 2020, I'll still be smirking.</p>

<p>So what then?</p>

<p>Although the un-washed masses are apparently incapable of understanding the utter brilliant masterwork of philanthropic engineering that is Open ID, they seem to recognize the potential benefits of a distributed authentication system (or is Open ID centralized? What if your Open ID provider spends too much money on usability studies, runs out of money and goes dark? It's too confusing to know for sure), which I admit, resembles something an engineer might acknowledge as a legitimate idea.</p>

<blockquote>
"...we explained OpenID to them, and they all recognized the value of being able to easily sign into a new site without having to create a new ID and password. They also appreciated the potential of using their Yahoo OpenIDs to automatically verify their Yahoo email address without having to do manual email verification."
</blockquote>

<p>
Fair enough, but a simple REST API to Yahoo's back-end would have actually been useful--simply formalizing what can already be automated with some clever scraping mechanisms. Yes, give me your Yahoo username and password and I can programmatically import all of your data. This is already possible. What the Open ID cloud dwellers fail to acknowledge is a (albeit informal and somewhat legally questionable) distributed authentication system has been in place since the emergence of the first multi-user web app. Open ID is a solution to a problem that doesn't exist. It's Premature Optimization at its best and most entertaining.</p>]]></description>
      <pubDate>Fri, 31 Oct 2008 04:49:15 GMT</pubDate>
      <author>Bret W. Lester</author>
      <guid isPermaLink="true">http://bretlester.com:80/entry/4/</guid>
      <link>http://bretlester.com:80/entry/4/</link>
      <category>home</category>
    </item>
  </channel>
</rss>