Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Peter Williams (home_pwmsn.com)
Date: Sat Mar 08 2008 - 17:29:06 CST
Well I have to say I'm impressed both this afternoon and even more so later this afternoon - since this morning depressed me.
2 years ago, I know dominated muscle applet, muscleshell, various tools for GP loading, and GP command sets for its fancy security features such as DAP and receipts. I know I also dominated T0 over CCID firmware for 8051 uPs, and various bits of microcodable verilog to support fancy crypto modes in the ATMEL ICC's 16 bit crypto co-processor, we used once to use. Having left this project, 2 years later I return to its src tree - and its just a load of mumbo-jumo of various tools, old compilers by firms that no longer exist, and scripts in 9 toolchains, A bit of openssl here, a win32 port of muscletool there, an atmel load script for promming micros, loadfile for starting up a COS, scripts to personalize muscle applet, along with various simulations.
I could not make head or tail of it despite being the programmer of it all) !
Not happy (with myself).
So using Vista SP1 and an old SCM cardreader which received auto-updated firmware/drivers, I went to the identityalliance.com site, and installed its download package. Then I stuck in my really old JCOP21 javacard democard from IBM Zurich and use the idalliance tool's profile menu to configure it (as a musclecard). 60s later, its done . I even set easily a new admin and user pin. Even set a password in the password store.
So, on a roll, I went using the same vista host to the openid.trustbearer.com and and registered this card - enrolling it with my trustbearer openid. 60s later, I have an SSO-capable token.
I'm http://openid.trustbearer.com/home_pw. What else?!!
Perfect. No fuss (and no compiling required of 2 year old code that I cannot fathom any longer).
Later this afternoon (now that I'm feeling lucky and cared for):-
I use task manager to kill my locked up IE7 (sob). Oh well, it happens 4 times a day with or without smartcard installs!
So I go to http://www.plaxo.com/openid to use my new found capabilities. First I remove my old jcop 21 with its old musclecard applet from the old SCM reader.
plaxo redirects the browser to trustbearer, which prompts me to insert a card (after an activeX download). Perfectly reasonable. So I do as asked and it them prompts me for a pin: which I enter. All perfectlty normal and expected.
trust bearer redirects me to plaxo, which now asks me to bind to my asserted openid to the plaxo account, given I have a verified id assured as multi-factor-hardware!
Perfect. It was all seemless, first time through.
Muscle mailing list