Web Crypto API entering Last Call !

Good things must end. The polishing, fine tuning, cocooning of the Web Crypto API is over. The Web Crypto WG felt that it was shiny enough to go for Last Call. So if you have any interest in using it, just read it, and send us your comments. This is your last chance to influence it before it is shipped into browsers !

The specification is available here : http://www.w3.org/TR/2014/WD-WebCryptoAPI-20140325/

Anyone can send comments to: public-webcrypto-comments@w3.org

Enjoy !

The W3C Needs a Dashboard

letters

I recently had some discussions with mozillians on ways they could contribute to the W3C working group I am chairing [1]. This question made me rethink about the magic path individuals have to go through to contribute to W3C work.

W3C is a place where contributions are welcome, free, easy to do. For my readers not familiar with the W3C process, most working groups, interest groups, business groups have public mailing lists for member contributions, but also mailing list dedicated to comments – the lists managed by W3C can be found here : http://lists.w3.org/. In addition, there always are contacts given for editors, chairs, W3C staff, aiming to ease the direct exchange.

But. If you wish to contribute, it means that you have to solve another bigger problem. It means that you have to be able to identify that something is going on in W3C, expecting your review, expertise and nasty comments.

For individuals belonging to W3C member companies, that is relatively easy. Members are represented by Advisory Committee representatives. All AC reps gather twice a year, in nice places, where the W3C staff share both status and hugs. The meeting content is tailor-made for members, with overviews, and focus on specific topics. And this is usually ok. So, if the AC rep attends that meeting, if the AC rep reports to his team(s), that is the perfect situation. But if not…

For non-W3C members, curious individuals, start-ups, geeks, this is another story. They must monitor the W3C’s activities on their own. They can make sure they register to the excellent newsletter that the W3C team issues on a weekly basis. Press, blog and actual publication or specification transitions are collected here http://lists.w3.org/Archives/Public/public-w3c-digest/. They can visit all working groups blogs, wikis, githubs praying that they are maintained. They can also subscribe to the public mailing lists and read (thousands of emails). If they have time. But who has that time ?

I am paid to be an AC rep’, I love W3C; as chair, I am trying as much as possible to spread the word to the public. I am also reporting inside my company, making status updates, consolidating information I am grabbing on different media, creating dashboards, explaining trends, mentioning implementations… This takes time. This costs money to small companies.

This is why I think it would be worth having nice and structured dashboards for each domain handled by W3C, made available to anyone, contributors, developers, but also decision makers. Giving a global view on what is going on in W3C, what are the current priorities. Something like for the mobile area here : http://www.w3.org/Mobile/mobile-web-app-state/ but for all the domains.

I know. This is easy to ask, less easy to deploy. But I’d be happy to help, to make sure all the potential contributors can actually be aware of what is going on in the W3C kitchen.

 

[1] initial conversation about contribution blockers in W3C : https://twitter.com/annevk/status/444069161321242624
Note : photo credit: Jodaur via photopin cc

[Mots] Syndic

palmier

– Ha ben, c’est pas trop tôt.
– C’est pas avec toi qu’on va réussir à préparer l’assemblée générale du mois prochain !
– Désolé. J’avais un truc à faire. Le boulot.

– Tiens, signe la feuille de présence.

– Dites donc, vous faites ça bien !

– Ben oui, si on n’est pas organisé, c’est le bordel. (more…)

[Mots] Les mots, sombres et terribles.

les mots sombres et terribles

Les mots sombres et terribles. Ils me cisaillent. De la nuque aux tripes. Quelque part, près du nombril. Il y a un nid. Ça fourmille. Je sens leurs petites pattes. Il y en a des pointus, des lourds, des clandestins – les pires – habitués à vivre cachés, rampant.

Ils me cisaillent, me traversent, se jouent de moi. Profitent d’une égratignure, d’un titubement, se précipitent sur la plaie. Et piaillent. Ils veulent sortir. Parader. C’est mon heure, disent-ils. C’est mon moment. Non. pas maintenant, leur dis-je.

Alors, ils se vengent. Percent des tunnels. Nouent ma gorge. Subtilisent un sens. Puis. Vaincus par le silence, repoussé par la discipline, ils cèdent. Se rangent et s’entassent, oisifs et narquois, jusqu’au prochain naufrage.

photo credit: mll via photopin cc

Web Security : a snapshot from W3C

snapshot

For the past few months the web has been in the headlines for bad reasons (but also for good reasons such as its 25th anniversary). The bad side pointed out a regular basis concerns broken servers, denial of service attacks, leaking connected-apps, massive internet monitoring… Everyone’s wondering what are we doing so wrong? Well. First, people have to eat, so business does go on. But once given food, and this is the good news, people are talking about security problems. Realizing they must change something. Alone. Together. Against. But they must move. And organizations such as the W3C are fostering those discussions. People exchange views, make alliances, start thinking about solutions. After all, this is what standardization bodies like the W3C are made for. Find collective solutions, serve both business and social interests. Let me share with you few interesting evolutions:

* Strong web apps, strong internet

Prior to the last IETF meeting, the STRINT workshop took place, the tag line of which was ‘strengthening the internet against pervasive monitoring’. From both W3C and the IETF, attendees discussed how to bind the existing internet specs to make them stronger, but also discussed new features to think about, to avoid facing more governmental invasion in the internet flow. While waiting for the report, one can read the minutes.

(more…)

[Musée] Les Beaux-Arts de Marseille

palais-longchamp_luc_orbitelli_cut

Le Palais Longchamp offre depuis toujours une vue imprenable sur Marseille. Du haut des ses cascades, perché sur les taureaux fulminants ou derrière les statues géantes, on aperçoit Notre Dame de La Garde. A nos pieds, l’aile gauche du Palais abrite le Muséum d’Histoire Naturelle (et son imposant éléphant d’Afrique). Depuis quelques semaines l’aile droite a ré-ouvert et accueille le Musée des Beaux Arts, proposant des œuvres d’art du XVII au XXème siècle. Lorsque l’on pénètre dans cette aile restaurée, on est sous le charme des escalier imposants, des colonnes de marbre, des sols de mosaïque et du parquet – qui craque sous nos pas prudents et timides de visiteurs. (more…)

[Mots] Mécaniques Humaines

poulies

Cette nuque qui s’incline. Notre patience étirée, distendue, blanchie. Qui cède brusquement pour empourprer nos joues, redresser un regard. Ces poulies qui s’activent pour rétablir les équilibres.

Ce sourire en coin. Reflet discret de nos désirs. Qui décore de lampions rouges le fil de nos échanges. Qui sublime nos élucubrations sur la pluie et le beau temps en promesses d’infini.

Ce regard diablement droit. Continuité d’un corps pilier, d’une volonté certaine, d’un élan raisonné. Monolithe en mouvement.

Cette main qui fuit et s’efface. En fluides esquisses et agiles glissades. Première pierre d’un monument de fracture. Cette main traîtresse disparaît laissant un souffle de vide.

Cette voix éraillée. Qui peine à monter. Se pose et s’éteint, étouffée. Harmoniques désordonnées, parsemées de notes perdues, de sons transparents.

Nous ne sommes que mécanique, niveaux, poids et pistons. Ajustés sans cesse. Que la vie parfois caresse, d’un répit temporaire, d’un équilibre futile.

Trusted Execution Environment, millions of users have one, do you have yours?

mobile phone

I have been spending few years monitoring the development of a technology named Trusted Execution Environment in standard. Switching from a quest, to a technical concept and now starting to be embedded in devices, I felt it is time to share few things about that security enabler. At the time I discovered that strange stuff, it was just a question ‘how can we make the mobile more secure?’. That question was extensively discussed in OMTP, a dead consortium of mobile network operators and device makers. They wrote some security requirements, based on well know existing attacks on mobile environments and expected someone to solve the problem. (more…)

Innovative business models : 7 take away

seven

Gemalto is setting up its innovation framework and this requires sometimes help from innovative and experienced people. Some of us were trained by Philippe Meda @merkapt, on innovative business models. Vivien Ruivaco @VivienRuivaco and I wanted to share in a post our seven take-off from training that intends to drastically shake our innovation mindset and habits. Why seven? Neither because of the movie or any specific believe. Just because that is what we got.

1.       Innovation vs invention: We would say that a first tangible measure  of “Innovation is the ability to convert ideas into invoices.”  (L. Duncan). However Innovation is about changing the market, while introducing an invention makes no turbulence on Richter scale.

2.       Innovation is a magic balance: Innovation is happening in start-ups magic pots and not in big corporation legions (i.e. big pharma business model). Therefore when a start-up is innovative, buying it and integrating it within a big corp will diluted or make imploded the inner magic.

3.       Bringing an added value: Customers pay for what you are bringing to them, which in fact is the unique value that you are able to offer them over your competitors. Hence, innovation is about bringing “added value” to your customers.

4.       Product or service, who cares?:  When discussing innovation, the product or service discussion is irrelevant. There is no difference! A product/service/solution is just a technical mean to “carry” your added value and make it real. Thus, the product or service question shouldn’t ever be the starting point of a brainstorming because nobody care about that.  By the way, everybody is now doing (or say be doing) solutions…

5.       Business model innovation: Write your own business model down the paper and challenge to twist it again and again. What if it were fab-less, what if it were open source, what if it were collaborative with your competitor, what if it were free, what if it were a software…

6.       Out of books market research: Spotted by Gartner & co? That means you are looking at invention. Reading market studies is nice… but if you want to innovate, interviewing and prototyping are better.

7.       Reality check-up: Have you ever seen a designer in your life ? No? Too bad, those guys rock to question the real life of your lovely innovative offer.

If, like us, some of those principles make you curious about good practices in innovation, then you may have a look at Philippe Meda Blog http://www.merkapt.com/.

[mots] Un piano dans la gare

piano

Un panini jambon cru, et une bouteille d’eau, siouplait.

Je m’appelle Karen.

Un dessert avec ça ? Pour faire la formule ?

Je travaille au snack. Meet and go. En face de Macdo. A Saint Charles. La gare de Marseille.

Douze euros soixante-dix.

J’aime bien c’est tranquille.

Bonne journée. Monsieur ? Un coca. Light. non, zéro. On a que du light. Ok.

Et surtout de l’autre côté de mon comptoir, ya mon pote. Le piano.

Cinq euros et dix centimes, s’il vous plaît, madame. J’ai les dix si vous voulez.

Le piano. Noir. Avec son invitation : “A vous de jouer”. Il s’y passe plein de choses. Déjà, sans ça, il se passe plein de choses dans ces couloirs. Le vent. Les retards. Ça traîne, ça flâne, ça court. Ça zone un peu. Pas trop : position debout oblige. Ya pas de banc. Sauf. Le banc du piano.

Une salade montagnarde. Ya les couverts ? Oui. Tant mieux ! Sept euros et quinze centimes, s’il vous plaît, monsieur. J’ai les quinze, si vous voulez.

Toujours occupé ce banc. Jamais vide. Des étudiants, des vieux, des ados. Ils posent leurs mains. Ou le bout de leurs doigts sur les touches. Ils gloussent. Ils sont sérieux.

Une orange pressée. On fait pas, madame, c’est pas la saison. Ha bon ? Jamais entendu ça. Un jus de pomme alors. Trois euros dix. J’ai les dix si vous voulez. 

L’autre jour, ya un couple qui l’a repéré. Ils ont jeté leurs sac à dos géants à terre, posé leurs hamburgers en équilibre dessus. Ils se sont assis. Côte à côte. Elle a fermé les yeux. Elle a joué un truc. Doux. Mais doux. Tout le monde a ralenti. Les gens se sont arrêtés. Attroupement.

Une canette de coca. Normal ? Ben oui ! Trois euros vingt s’il vous plaît madame. Je peux payer par carte bleue ? Oui.

Et lui. Il la regardait. Elle, elle jouait. Elle était partie. Je l’enviais un peu.

Votre code, s’il vous plaît.

Des enfants ont accouru. Du style qui vient de faire cinq heures en train, qui a besoin de se défouler.

Voilà, votre ticket. Bonne journée. Merci, vous aussi.

Les gosses ont tapé sur les aigus, à droite du piano. En ricanant. La pianiste n’a même pas bronché. Elle était partie. Elle a juste souri.

Un brownie noisette. Et une pomme. On n’a plus de brownie noisette. On a chocolat, amandes, noix-orange. Alors celui-là. Là ? Oui. Ce sera tout ?

Moi, ce piano, il me fait rêver. Il est posé là. Tout le temps. Jamais vandalisé. Pas un tag. Rien. Les gens qui le voient, on sent que ça leur fait quelques chose.

Treize euros cinquante. S’il vous plaît, madame. J’ai les cinquante, ça vous arrange ?

Comme si on leur faisait un cadeau. Auquel il n’avait jamais pensé. Un vrai cadeau.

Une salade de taboulé. Ce sera tout ? Non. Une bouteille d’eau.

Un bout d’exception dans leur voyage. Comme une caresse. On pose ses bagages. On écoute. On s’écoute.  Ce piano, il me fait rêver. Sa mélodie me fait parfois oublier ce tiroir caisse. Qui glisse. Qui tape. Un jour…

Une salade moza.