Microsoft, Google, and others have just launched the Information Card Foundation, to promote awareness and interoperability around InfoCards.  This is great news - I think InfoCards have the potential to solve some real problems with managing identities and securing them against theft.  Despite the client-side technology being available in Vista for a year plus, we’re still slow to see installations emerge in the marketplace.  The only use I make of InfoCard (and then still pretty rarely) is in the WSO2 Mashup Server, which has both InfoCard and OpenId support (though you can use an old fashioned username/password).

Managing identity and security without complicating the user experience is still a challenge.  I’m hoping the Information Card Foundation can encourage broadly useable solutions as it gets rolling.  And I’m hoping some large properties (PayPal is a member) may actually start putting stronger identity management technologies in place on a broad scale.

It should be no surprise with our products supporting InfoCards and OpenId that WSO2 is now a member of both the Information Card Foundation and the OpenID Foundation.

Had a great though brief visit from Paul, during which we toodled around the north end of Tamales Bay, bordering the Point Reyes National Seashore, the site of one of our successful backpacking trip a couple of years ago.  My primary goal, the Drake Estero, was closed for Harbor Seal pupping season, but we had good fun anyway.  Flickr set here.

Also uploaded and organized some existing shots from plane windows.  Looking out the window is by far the best part of flying!  Flickr set here.

Yes, you heard right.  A few minutes ago in Orlando at TechEd IT 2008, Bob Muglia’s keynote included a demo of StockTrader 2.0, an SOA sample application consisting of a client application, a business process service layer, and an order processing service in order to place sample stock trades.  Gregory Leake of Microsoft showed the application, with each of the three components built in .NET 3.5, and then I came on stage, representing WSO2, and we swapped out the WPF smart client for a PHP application based on the WSO2 Web Services Framework for PHP.  Then we swapped out the back end order processing service for a Java version hosted in the WSO2 Web Services Application Server.  After each swap we placed a successful trade.

Watch the keynote here.

The demo featured the cross-platform interoperability between .NET, Java-based solutions, and unmanaged code solutions such as the PHP application.  The Web Services used were completely secured with message-level security (WS-Security), and everything of course worked quite seamlessly.

You can download the WSO2 StockTrader 2.0 application as well, including PHP versions of the business service and the order processing service.

The good news in putting this demo together is that the wire-level interop worked pretty spectacularly out-of-the-box, just as the demo promotes.  The actual interop between the three major development platforms in use today (CLR-based languages, JVM-based languages, and unmanaged code based at some level in C) is impressive, and while there is more work to do to complete and verify interop deeply across Security, Reliability, Transactions, and Policies, it really seems like the goal of making this stuff both universal and "just plumbing" is approaching pretty rapidly.

On another note - yesterday we were speculating backstage whether a keynote at a major Microsoft event had ever featured an Open Source partner on stage.  None of us could think of any off the top of our heads.  Can you?  Were we the first?

Update: 10PM.  Here’s the press release.  And a news article, with a nice (and accurate!) quote from me.

I was pretty excited to try out Microsoft’s new "personal cloud" computing initiative - Live Mesh.  I signed up right away and it looks great and offers some very neat features.  Yet I have one problem with it, and that’s an unfortunate tie with Vista that makes one or the other virtually unusable.

Live Mesh, for some reason unknown to me, requires that User Account Control to be turned on.  Vista users will know User Account Control (UAC) as an annoyance that comes turned on by default.  It prevents unauthorized and potentially dangerous changes from being made without an Administrator’s approval, which I concede might be beneficial in some circumstances (a classroom?) but is incredibly annoying if you are used to being the Administrator yourself.  In that case all it does it pop up a regular stream of annoying modal warnings, to which you become accustomed to clicking through without reading in about 10 minutes, thereby rendering any protection useless.

But it’s worse, these warnings actually prevent you from doing useful work when you really want to.  Like renewing your IP address.  Or adding or removing files in the Program Files folder - if you’re editing them through an IDE, you don’t even get the warnings, skipping directly to failure.  You might have to reorganize your file system a bit to work around UAC.  And some stuff simply doesn’t work.  I could not under any circumstances get Adobe Flash 9 to install for me under UAC.

You can see I’m an anti-fan of this non-feature of Vista, which promises security but provides no real benefit and quite a number of headaches.

I don’t really understand why UAC would be required to run Live Mesh, but how important could it be if I can run Live Mesh on Windows XP, which has no such concept?  Is this just a UAC marketing?

In any case the effect is that a serious Vista user (the kind who might be an early adopter of Mesh) is significantly disadvantaged.  For me, the benefits of Live Mesh aren’t worth the pain inflicted by UAC, and I’ll generally restrict my Mesh use to non-Vista platforms, or extraordinary circumstances where it’s worth doing a reboot to access the Mesh.  What a shame.

Listen to this, and then check out this.  Wow.