Thursday, December 3, 2009

A form to show off capabilities

The form below uses a capability (the string in the Token field) to replace the last data entry in The world's simplest capability demo... try entering some text and hitting submit. You'll see your text appear in the last slot on the linked page.

Your text

Token (which entry do you wish to replace?)

Less talk, more code

I can blog and talk for the rest of my life, and I doubt it would matter much. The fact is that it's very hard to wrap your mind around something as different as capabilities without some good old fashioned examples to play with.

So... I've written one, using Google App Engine. It's a simple message board with the ability to append a message, and the ability to replace and existing message, provided you have a capability.

To make it easy, the capability strings are right out there for you to use and abuse. It's VERY simple code and easy to mangle, so please be gentle.

Tuesday, December 1, 2009

The Mine! Project - Capabilities for the web

I've watched the demo videos (the second video gets closest to capabilities), and it appears that The Mine! Project is going to be building capablities based security for the web, without specifically mentioning it. This will be a very nice step forward, in my humble opinion.

They want to allow someone to give a "minekey" as a proxy for a relationship. This could be considered equivalent to a capability. The minekey can be revoked at any time, which is a pretty good method of control. They don't try to solve covert channels, nor do they try to build in DRM.

Doc Searls talks about VRM as a way to counteract the mining of our data, and that approach along with the efforts of others, seems to be yielding fruit like this, and in other areas.