billso.com

County politicians in Los Angeles have passed legislation championed by the RIAA and MPAA that lets authorities confiscate property from anyone convicted of IP theft or piracy. See Wired for more information.

The RIAA uses automated methods for collecting information fom LimeWire and other peer-to-peer programs. Data including the IP address and the files offered for trade are collected. The trade organization also has an automated takedown notice and settlement system that targets universities and students. The RIAA uses a manual process when investigating commercial ISPs. This article from the Chronicle of Higher Education has some details.

Meanwhile, BoingBoing reports that the US House of Representatives has passed a similar measure (HR 4279, PRO-IP (Prioritizing Resources and Organization for Intellectual Property Act of 2008). The bill may not get through the US Senate this year.

See Ars Technica and TechDirt for more information on this ridiculous piece of legislation.

Related posts on

billso.com

• 11 May 2008: Qtrax makes a free music download deal with Universal
• 15 March 2008: 10 years of MP3 players
• 21 February 2008: Copyright and fair use
• 4 February 2008: Better than free
• 13 November 2007: File sharing and campus security
• 5 October 2007: What’s wrong with copyright?
• 17 July 2007: A quick explanation of copyright law
• 29 September 2006: US copyright law in verse
• 15 August 2004: American Library Association promotes fair use
• 27 June 2003: Sue your best customers

I recently implemented OpenID on billso.com. OpenID is a single sign-on (SSO) system that lets web users log on to multiple sites with the same username and password. SSO support is becoming a key success factor for social networking and social media web sites, as new users struggle to manage a growing number of passwords.

With OpenID, no one needs to apply for a user account on billso.com. They can use their username and credentials from another site to join billso.com, or to post a comment on a billso.com article.

Kyle Neath posted a long rant about OpenID yesterday. He won’t be implementing OpenID on his site because he thinks the system too confusing for users. I don’t think OpenID is that difficult to understand - here are two brief explanations from OpenID.net and Wikipedia.

Phishing phears

Kyle’s concerned that phishers might target OpenID users, and he uses PayPal as an example. That site has become a primary target for phishing attacks.

OpenID does have an identity system that lets an authorized user revoke their OpenID as a last resort. Anyone who uses an OpenID should select a strong passphrase, as I described in this billso.com article from 24 Aprill 2008. OpenID can also add multifactor authentication to their service. Checking a user’s location, or asking for a token or passphrase that only the user should have, in addition to the regular passphrase, would provide a strong defense against phishers. Virtual keyboards and other systems could also be used, as I described in this billso.com article from 17 April 2008.

The provider’s burden

I understand some of Kyle’s points. Any web site that implements OpenID for SSO could also become a provider of OpenIDs. I decided not to do this right from the start. I don’t want to provide perpetual support users who request a billso.com OpenID username. There is a system that lets departing OpenID providers delegate their users to another provider.

On 30 April 2008, I posted some programming code that lets a popular WordPress OpenID plugin use JanRain’s ID Selector tool. There are several providers of OpenIDs that can carry the long-term burden of maintaining these accounts, including VeriSign, AOL, Google, Flickr, and WordPress.com.

Universities could become OpenID providers. It makes sense to give students and employees access to a global SSO system, as long as schools are willing to provide stable, permanent usernames for their stakeholders.

Users can also purchase a personal identity domain for around US$10 a year and get a personalized OpenID URL.

Related posts and pages from billso.com

• OpenID
• 30 April 2008: Updating WP-OpenID to support ID Selector
• 24 April 2008: Change that password into a passphrase
• 17 April 2008: Virtual keyboards and monitoring software foil keystroke loggers
• 12 April 2008: Finding business contacts and passwords on the Internet
• 14 March 2008: Social media in action
• 2 July 2007: CXOs face malware email attacks
• 11 January 2007: How to create a secure password

From the Associated Press via Sports Illustrated and Forbes: National Football League commissioner Roger Goddell has announced that the league will enact and enforce tougher regulations regarding technology and spying for the 2008 season. The NFL has allowed radios for offensive play-calling since 1994, but mobile computer and video technology have advanced far faster than the league’s regulations ever anticipated.

The three-time NFL champion New England Patriots have been the subject of intense scrutiny after a staff member was caught videotaping defensive coaching signals during the team’s 2007 season opener. The NFL and Senator Arlen Specter (R-PA) are each investigating multiple allegations that the Patriots had been videotaping opposing teams since coach Bill Belichick was hired in 2000.

Former Patriots employee Matt Walsh recently sent 8 video tapes of Patriots opponents to the NFL office for analysis. According to Mike Fish of ESPN, at least one tape included offensive coaches from another team. Previously, it was believed that the Patriots only taped defensive coaches.

What about the FCC?

Most of the discussions I have read about the so-called Spygate scandal have missed an important legal point. The NFL depends upon large multi-billion dollar contracts from US television networks for a significant portion of the league’s revenue and market power. Every regular-season and post-season game is televised. The NFL also owns and operates its own television network, which carries 8 regular season games, many pre-season games, and a 24/7 stream of interviews, documentaries, replays and other NFL content. See this article from CBS Sports for more details.

The Federal Communications Commission (FCC) has specific regulations on how sports may be broadcast in the United States. One key rule is that live televised sporting events must be “free of artifice”. In other words, games cannot be rigged or fixed in any way.

This is one reason that professional wrestling broadcasts use a great deal of taped and edited content. Pro wrestling is marketed as , not a sporting event.

“When we met with [the] commissioner, the discussion was how we proceed in an era when technology is expanding exponentially,” Indianapolis Colts president Bill Polian said. “The question is how do we keep on top of that. This is far less about what happened in the past and how we deal with it in the future.”

From the New York Times comes Michelle LaBrosse’s account of her laptop’s travels. After she was injured, LaBrosse ended up checking her laptop computer as luggage on a flight to Chicago.

From her description, it sounds like she takes packs a lot in her bags when she travels. Maybe she should read this New York Times article about packing light.

In any case, when she arrived at O’Hare, her computer bag was missing. Never made it to the baggage carousel. No big surprise. Frankly, I’d never check my laptop computer on an airplane.

A few weeks later, one of her assistants at Cheetah Project Management determined that the computer was being used by someone for instant messaging.

Turns out the computer ended up in Nicaragua. LaBrosse never got the computer back, but at least ahe figured out where it went… and she got the story published in the Times.

Photo courtesy of william c hutton jr through a Creative Commons license.

Related posts on billso.com

• 15 May 2008: Don’t check cameras in your luggage
• 2 May 2008: Never check your computer on a plane
• 11 March 2008: Using Facebook as a lost-and-found department
• 3 March 2008: Building the perfect laptop
• 30 September 2006: Don’t steal my laptop!
• 28 June 2003: Where’s my luggage?

As business blogging becomes a key success factor in some industries, business bloggers sometimes face pressure to produce excellent metrics right from the start. Their managers sometimes try shortcuts to success, only to find that the online community can see through these tricks.

SEO 2.0 has posted an excellent list of 10 things a business blog should not do. These include:

Number 1) Writing under an assumed name. I use an old email address (billso) for my domain name (billso.com). My real name is listed on my about page.

Number 9) Requiring employees to read, rank and promote the blog. I do not require my employees or students to comment or rank my blog articles. I do assign blog articles for my students to read with their assignments. My blog articles provide up-to-date examples that my course textbooks cannot provide.

Building reputation and authority

SEO is an acronym that means search engine optimization. There are thousands of blogs and online businesses that offer advice on getting more advertising revenue, more readers and a higher Google rank.

Many bloggers get caught up in revenue generation, as I mentioned in my billso.com article of 27 March 2008. It’s much more difficult to build a blog’s reputation and authority. These attributes can be measured by counting the number and kinds of inbound links to a blog, a blog’s search engine ranking, and quotes in the mainstream media.

For readers, reputation and authority are difficult concepts. It takes little effort to lose these attributes. SEO Chicks has some more good examples of what not to do with a business blog. It’s a bad idea to set up a flog, especially in the United Kingdom:

A ‘flog’ is a fake blog usually created by a PR or online marketing firm for the purpose of falsely representing themselves as a consumer, usually for the purposes of creating a buzz around a specific product or brand. Sometimes this is done as a brand or online reputation management activity.

There’s usually hell to pay when the mainstream media or the blogosphere discovers a flog or a fake.

Related posts on billso.com

• 8 April 2008: Blogging and teaching
• 5 April 2008: Blogging can kill you
• 27 March 2008: Blogging as a business model
• 14 March 2008: Social media in action
• 25 February 2008: Social Media 101
• 11 June 2007: Blogging for a living