Latest / Identity at the Center / #225 - Authenticate 2023 Preview with Andrew Shikiar of the FIDO Alliance

Transcript

#225 - Authenticate 2023 Preview with Andrew Shikiar of the FIDO Alliance · Identity at the Center

0:05
This is identity at the center. If it has anything to do with I
0:11
AM, This is the go to podcast now your hosts Jim McDonald and
0:17
Jeff Steadman. Welcome to the Identity at the
0:21
Center podcast. I'm Jeff and that's Jim.
0:23
Hey, Jim. Hey, Jeff.
0:24
How are you? Oh, not so bad yourself.
0:27
I'm good, but I have a Mia culpa today.
0:29
You know what that is? Yes, I do.
0:31
You're going to give me an excuse about something.
0:34
It's a confession or an acknowledgement of wrongdoing.
0:37
I'm going to date this back to episode 175 where Andrew
0:41
Shikiyar was on our podcast. And for our lighter note
0:44
question, we said what was your favorite band from Seattle or I
0:48
don't remember the exact question.
0:50
And Andrew said something like heart is my least favorite.
0:56
Great. Like I hate heart.
0:58
And I kind of like joked around like, yeah, yeah, yeah, like,
1:01
but I was lying, man. I love heart.
1:05
I I don't know why I went along with it.
1:07
But for the past year, I felt horrible about doing that.
1:12
And so today I'm coming clean. I like heart.
1:16
Okay. Well, the good news is, is
1:18
Andrew's going to be on the show today and we'll introduce him in
1:20
a minute so you can you can give that heartfelt apology.
1:24
Andrew was staring at you with wideeyed wonderment.
1:26
First, he thought he was going to say something like, you know
1:28
you loved him, that he loved it and he was.
1:31
He was prepared to jump in, man. He was like, not going to wait,
1:35
but we'll get to Andrew in a second.
1:37
I don't really know heart. I think I know the song
1:39
Barracuda. That's heart crazy on, you know?
1:43
I'm not crazy and crazy on you and alone.
1:47
Those are awesome songs, man. OK, well, I'm not.
1:49
I don't celebrate their entire catalog, so.
1:52
And I think they have a couple hits and that's that's about
1:54
all. I I know I'm not a heart fan.
1:56
Beyond that, should we get to our conference plugs, because we
1:59
have a lot of conference plugs coming up, Yeah, absolutely.
2:04
Go for it. I think it's the most ever we
2:06
have like so I have a very packed speaking schedule all of
2:10
a sudden in the space of like 3 weeks for the rest for the next
2:14
couple of months. So the first one coming up is
2:18
the Cybersecurity Midwest Summit.
2:20
This one is in Cincinnati, OH, it's September 14th.
2:24
It's put on by COM, Spark and CDO.
2:27
I'm going to be part of a panel. They're talking about a debting
2:29
and access management. I have no idea what yet.
2:32
We still haven't figured that part out yet.
2:34
Just got synced up with with my fellow panelists.
2:36
I don't know what is it? It's the existential question.
2:39
What are we doing? Why do we even care?
2:40
Like all that stuff. So I'm sure we'll come up with
2:42
something. I'll have a link in our show
2:44
notes. So if you're in the Cincinnati
2:46
area, September 14th. Come check me out and you know,
2:51
be part of the panel or at least come watch the panel and have an
2:54
identity conversation with us. The next one that I have been
2:58
talking about for a couple of weeks now is Identity Week
3:00
America. I've been teasing a discount
3:04
code and we finally have it all set up and ready to go.
3:06
Identity Week America, that's October 3rd and 4th.
3:09
That's in Washington, DC. I'm going to be hosting a panel
3:12
on pass keys. My good friend Andrew has agreed
3:16
to be part of that panel or maybe him or his designee.
3:18
We'll see whatever ends up happening.
3:20
But I thought, well, how do we have a conversation about pass
3:22
keys without bringing Fido into this.
3:24
So we've got that a code for that is Ida C3 zero 30% off of
3:32
your conference pass which is a nice little discount.
3:35
So if you're. Looking to attend Identity Week
3:38
America, October 3rd and 4th in Washington DC.
3:41
I'll have a link in our show notes as well with the code and
3:43
a link to register all that good stuff.
3:45
Come check out the panel that I'll be moderating.
3:48
We'll be talking about pass keys with Andrew and a couple other
3:51
folks. And then of course we have to
3:54
talk about the Authenticate Conference.
3:56
That's why we're here today. We have a code for that one as
3:59
well. Thank you to Andrew and Megan
4:01
and Adrian and others that have been helping us out with this ID
4:04
AC15 podcasts. That is October 16th to the 18th
4:08
in Carlsbad, CA just north of San Diego.
4:11
I know Carlsbad very well. I have family on my wife's side
4:15
who lives there. So hopefully we'll see if maybe
4:18
I'm too busy and I'm not able to do things.
4:21
You know the the busy life of a of a of a speaker at conferences
4:25
and things like that. But Jim you and I are actually
4:26
going to be at authenticate. I should mention the other two.
4:29
It's going to be just me, a Danny Week, America and Cyber
4:32
Security Midwest Summit. Those are just solo adventures
4:35
for myself. We're kind of dividing and
4:36
conquering, and then you and I will be doing some things at
4:40
Authenticate Conference and should be a fun time.
4:44
I just have to figure out if I'm going to bring my golf clubs or
4:47
rent them there. I mean, that's the big question
4:49
for me right now. Well, I'm A1 bag person.
4:52
I try to one bag travel as much as I can.
4:54
So I'm definitely not bringing clubs.
4:55
If I need to I will rent them. I am terrible at golf, so.
5:01
Don't expect any great. Don't have Great Expectations of
5:05
my golf game. I guess what I'm putting it, I'd
5:07
like to play against you then. Oh yeah, yeah, absolutely.
5:10
Yeah. I don't.
5:11
I don't. There's no way that I would win.
5:14
So here's a fun little tidbit about me.
5:16
You never seen me golf before? This is true.
5:19
I'm just guessing I can. I can hit an iron.
5:21
I cannot hit a wood to save my life.
5:23
I took lessons when I was in high school and I stopped going
5:26
after the irons, so I I never really got the swing down for an
5:30
iron. I can hit a 7 iron.
5:33
Great. Looking forward to doing some
5:34
top golf next week with my guy David.
5:36
We're going to see him. But yeah, I can't hit a wood to
5:40
save my life. So you know, like a par three
5:43
course is probably, you know, the only thing that I would have
5:46
have have a chance that yeah, I can, I can talk golf all day and
5:49
I'm sure that's not why anybody tuned into the podcast so.
5:53
Yeah, let's get a little bit more into the authentic
5:55
conference. And again, I'll have links in
5:57
our show notes to all this stuff.
5:58
We are going to talk about Authenticate 2023 and making his
6:02
triumphant 6th appearance on the show.
6:06
Now tied for the lead with the artist formerly known as Julie
6:09
Smith of the IDSA, he'll have a chance to pull ahead next time
6:15
episodes 56111, One Eighteen one 41175 and then this will be
6:22
episode 225. Welcome back, Andrew.
6:26
Jeff, Jim, thank you so much for having me.
6:29
Yeah, Thank you for sitting through that and biting your
6:32
tongue when Jim started talking about heart.
6:35
This is an audio podcast, but I could see a little bit of steam
6:39
coming off around, you know, the feelings for her heart.
6:41
Do you want to, I guess, do you accept Jim's apology?
6:45
Let's just get this out in the open right now.
6:47
I mean, what are your feelings around heart?
6:49
Are they still as strong as maybe you've indicated in the
6:52
past? I'm not a fan.
6:55
I respect Jim's fanout, and I'm sure the Wilson sisters
6:59
appreciate your apology. I heard they're a little miffed
7:02
by the whole thing, but we'll come back to music in a little
7:05
bit. But no, I honesty is very
7:07
important and you can't sit on things like that because it
7:10
builds resentment, bad feelings and just a sense of dishonesty.
7:15
So Jim, you're you're absolved of that.
7:18
And I I appreciate that. And I appreciate your
7:19
remembering, your remembering our conversation.
7:23
One thing I want to say, I want to congratulate both of you on
7:26
your growth with this podcast. I mean, it's great to be here 6
7:28
times. That's really awesome.
7:30
But you know, the way that this podcast has grown and stature is
7:35
super impressive. You truly are an important voice
7:38
for the industry. So thank you for what you're
7:40
doing and thanks again for having me.
7:42
Well, I definitely appreciate that.
7:44
It has been a Cinderella story, I guess to some degree.
7:47
We don't do any advertising really.
7:49
It's all word of mouth and it's just, it's just Jim and I,
7:51
that's the podcast. That's it.
7:53
And you know, we thank people for listening, we thank for
7:56
people for coming on the show, right.
7:58
And stuff like that. But yeah, it's been a great
8:01
ride. It's been interesting to see
8:02
Authenticate grow over the years and we're going to kind of get
8:05
into that. I got to ask you though, you
8:06
know what is the secret to your success of multiple identity at
8:10
this center? Appearances.
8:13
Bribes and kickbacks, so. I guess we're not.
8:16
Going to talk about publicly. I've been so fortunate to be
8:20
part of Phyto Alliance. Sometimes I feel a little bit
8:23
like Forrest Gump, you know, being involved with this
8:25
activity, being entrusted to serve as a leader and a
8:28
spokesperson for the organization.
8:31
The fact of the matter is what we're doing is so germane to
8:34
everyone who listens to your show.
8:37
You know, people understand the challenge of passwords, the
8:41
plague they present, and I think that's one of the reason why
8:44
Phyto Alliance has been so successful is that.
8:46
The industry at large understands the challenge at
8:48
hand and understand that they need to work together to tackle
8:51
that challenge if we have to, because it is so important to
8:56
the identity space and business in general.
8:59
So I think that's why I think that's why you've had me on six
9:02
times, not because my sparking personality.
9:05
Well, you do definitely have a sparking personality, but let's
9:07
talk about authentication, because.
9:10
That's really what you guys focus on for and you've got
9:13
we've got plenty of shows that people can kind of go back in
9:14
the back cattle and listen to. But give it just a quick
9:17
refresher on Fido and Fido Alliance and I think more
9:20
importantly what's the progress that's been made over the last
9:23
year because it's been it's been a big year and pass keys are are
9:26
in the limelight now. Yeah, that's certainly our
9:29
headline from the past year. For those of you don't know,
9:32
Fido Alliance is is the industry body working on creating open
9:36
standards. And best practices are
9:38
implementing, you know, simpler, stronger user authentication.
9:42
They're basically aiming to reduce reliance on passwords, if
9:45
not eliminate them entirely. We've been at this now for over
9:48
10 years as a body. We have hundreds of companies
9:51
who take part in the alliance, who build our technical
9:55
standards, who run our programs, who build our best practice
9:59
guidance, our white papers, our guidelines and things like that.
10:04
We've released several sets of specifications, you know most
10:06
notably the court Fido user authentication specs or Fido 2
10:10
specs that have been built into just about every device and
10:13
browser on the planet. So that's what we do and that's
10:17
what that's that's who we are. Progress over the past year, I
10:21
think it's been fantastic. You know last year and
10:24
Authenticate past keys was a key theme because we announced the
10:28
past key concept in May of last year.
10:30
It's just over a year ago, I guess like 14 months ago now.
10:33
That we announced the concept of passkeys, that the key new
10:36
concept there was allowing the the private key in the Fido key
10:40
pair to be securely synchronized over a cloud, so over an OS
10:44
cloud or something like that, so iCloud, Google cloud, things
10:46
like that such that the user's credentials will be readily
10:51
available across all their devices.
10:53
And that was a new way of deploying Fido.
10:55
And we we made that choice a very conscious decision to
10:58
change the way Fido could be implemented in order to
11:02
accelerate. Consumer adoption, net skill of
11:05
Fido authentication, right. So we had a number of major
11:09
brands already deploying Fido and native apps and enterprise
11:12
and and with web off then you know for consumers.
11:15
But we hadn't reached that tipping point yet and part of
11:18
the reason for that was that the way Fido worked before 1 needed
11:25
to enroll every device for every service.
11:29
So if I enrolled. You know, ecommerceprovider.com
11:32
on my iPad, they give me the chance to just use Face ID or
11:35
Touch ID the next time, which is great and I would never have to
11:39
use a password on that device again.
11:41
But then when I showed up on my MacBook or my phone or my PC, I
11:45
would then need to enroll that device also.
11:48
Which basically means that every time I was enrolling new device,
11:51
I was essentially running through a account recovery
11:54
process which is counterintuitive to the user.
11:58
And also they really forced that service provider to keep the
12:02
password front and center and our mission is to deprecate the
12:06
use of passwords, right. So it's almost counter
12:09
productive to our overall goal. So that's why we allowed the
12:13
private key to sync. And the other thing we've done
12:15
with passkeys is we basically passkey is a term that we've
12:19
landed on for any. Pass through this Fido
12:21
authentication flow. So that could be a UAF native
12:24
app, it could be a device bound passkey and a security key.
12:27
And we now have a consumer ready term for a Fido authentication
12:31
flow which is also very significant.
12:34
All right, To try to take on passwords and ultimately replace
12:38
passwords, you need to look at the advantages that passwords
12:41
have. You know one of those is
12:43
ubiquity, right? You can use a password just
12:45
about anywhere. It's so fun to type in a
12:47
password on a. Keyboardless phone or God
12:49
forbid, a smart TV, but you certainly can do that.
12:52
And there's also a familiarity of passwords are they've been
12:56
around for 60 years, Everyone knows how to use them.
12:59
And so, you know we need to build the same ubiquity and same
13:01
level of familiarity with Fido and passkeys Give us a chance to
13:05
do that by having a single turn and industry icon and common
13:11
flows. Consumers will start, you know,
13:14
looking for the passkey icon, understanding what passkey is.
13:18
When they're signing in on various sites, whereas before
13:21
sites that supported Webauth in which again is using fiber
13:24
authentication, everyone talked about it slightly differently,
13:28
right? And so by building this, this
13:29
common terminology, common iconography, common user
13:33
experiences, we're going to start really accelerating
13:35
consumer awareness and demand for passwordless sign ups.
13:39
I think the ubiquity piece is like so, so huge.
13:42
It's so important that it just, you know what to do.
13:46
You don't have to read a like a help file or watch a video even
13:51
to figure out how to use it. I think one of the other
13:53
important things is from a security standpoint, making sure
13:57
that there's not end around. You know, it's like you have to
14:00
have the ability for people when they they lose their passkey or
14:03
can't recover to be able to recover without having to type
14:08
in a password, right. So that's a big part of it as
14:11
well. Yeah, absolutely.
14:13
So that kind of goes back to, you know, part of the reason we
14:15
did this is that your passkey will be readily available on
14:17
your devices. So now with Passkey, going back
14:19
to my example, I enroll with, you know, ecommerce provider.com
14:23
on my iPad, when I go to my MacBook, automatically it says
14:27
only Andrew, we see you have a passkey, Do you want to use your
14:29
passkey? And I just use, you know, my
14:32
screen unlocked, probably Touch ID on my MacBook to sign in,
14:35
right. So I don't need to enter a
14:36
password to recover that device, which is really important.
14:40
The other important thing to note, and I think we'll talk to
14:42
this a little bit more later, is a security point, right.
14:46
And they think about everything that we talked about in
14:47
security. We've been talking about MFA,
14:49
you know, for years now, 2FA. How many factors do you need?
14:53
The fact of the matter is, every factor we've added is really
14:56
just trying to put a Band-Aid on the fundamentally flawed primary
14:59
factor of passwords and what we're doing with passkeys.
15:02
Passkeys are truly a password replacement.
15:05
We're now your primary factor is an unfishable credential.
15:08
Which changes the way that everyone can and should look at
15:12
user authentication for their consumers or their their
15:15
employees and for themselves. It's been interesting to see the
15:18
adoption from large organizations pick this up.
15:21
Remember going through passkey setup for Google relatively
15:25
within the last few months and I've been amazed at how well it
15:29
works. Like, it's like this is great,
15:32
like why are more people doing this?
15:33
And we're starting to see those announcements, right.
15:35
I'm definitely in the Apple ecosystem, so I've got.
15:38
You know the phone, the watch, the iPad, the Mac and it just
15:40
works. I'm looking forward to maybe
15:43
cross-platform at some point. Not sure how that would work.
15:46
I think we've seen some password wallets for example start to
15:49
look at things. I think it's, I'm sure they're
15:51
all looking at it like 1 password and LastPass and bit
15:54
words all that and maybe they're the glue, right?
15:56
That kind of crosses across different, you know, ecosystems,
16:00
you know, for lack of a better word, but it's been a great
16:03
adoption. It has been so you going back to
16:05
what have you done in the past year.
16:06
So we announced pass keys in May and then in October and
16:10
authenticate. You know we announced the first
16:12
major commitments to deploy passkeys right with with PayPal
16:15
and entity Docomo. They came on stage with me yet
16:17
to authenticate during my keynote and iOS and Mac OS was
16:22
just launching support for passkeys around that time,
16:24
right. And then Android went live and
16:26
Chrome OS went live with passkey support for sync passkeys.
16:29
You know, December and January. So.
16:31
In reality, we've only had the two major device platforms, you
16:34
know, mobile device platforms both supporting passkeys for a
16:37
little over 7-8 months, you know.
16:50
So TikTok was the big one. So when you talk about some of
16:41
the brands that have actually supporting, you've decided to
16:44
support passkeys is quite remarkable, you know so high,
16:47
DocuSign, Shopify, TikTok announced last week.
16:52
And then Google. And actually what Google's done
16:53
is so significant. And the sense that anyone with a
16:56
Google Google account can now enroll for passkeys.
16:59
Which by the way? I also work for social sign in
17:02
and I'm signing in to forget what account.
17:03
The other night I had a Google sign in before and I could use
17:07
my Google passkey now to sign into other accounts as well.
17:09
Apple ID. That's an Apple ID.
17:11
Now I can, you know, secure the passkey and back up with a
17:14
security key. So it's truly actually quite
17:17
remarkable progress in around 7-8 months to see how much how
17:21
many big brands are using passkeys for consumer sign ins.
17:27
It's got to be really encouraging to see that.
17:29
I mean we've been talking about sort of this password listing
17:33
forever and killing the password forever and I feel like we are
17:37
starting to get there. And you mentioned things like
17:40
you know or companies like Google and sort of that consumer
17:43
facing you know workflow and user experience and I know that
17:46
Fido puts out guidelines around that.
17:50
And I'm sure that's what they are, right.
17:51
They're guidelines. Every brand is going to kind of
17:53
figure out how they want to do it.
17:54
But there has to be some consistency, I would imagine.
17:56
Right, to to make it familiar enough where people can say, oh
17:59
okay, I'm kind of recognized this flow.
18:02
How does, how do they, how do they roll out of guidelines like
18:05
that help the experience? How does it help inform some of
18:09
the partners that you've mentioned where they take that
18:11
and say, yeah, okay, you know, let's.
18:13
Consider doing this in a similar way to drive adoption.
18:16
Yeah, that's a great question. You know, if if pass keys, you
18:19
know we're our headline, you know, for the past ten months,
18:21
I'd say that our UX work is a subhead because it is that
18:24
critical. And you know I think you are
18:26
tired of me talking about UXI, think my throwaway line is like
18:32
every conversation I have around Fido these days begins and ends
18:35
with usability. But it is absolutely true,
18:37
because as people get more real about deploying Fido at scale,
18:40
you need to understand. How does it impact my consumer's
18:44
user experience? Not only that you know, UX will
18:48
impact whether or not people actually enjoy it, if they sign
18:52
an experience and then choose to use it and choose to take part
18:55
in your your online experience. So the UX work we do is is a
19:00
very meaningful part of Fido Alliance.
19:02
We've released now three sets of UX guidelines which are best
19:05
practices for how companies should deploy final
19:09
authentication. These guidelines are based on
19:12
very systematic research that we've done in partnership with
19:16
the UX firm called Blink UX and the research is scoped and
19:20
driven by our UX working group, which is comprised of usability,
19:25
design and UI experts. From our members, we have 30
19:30
something companies taking part in this.
19:32
And they're contributing usability experts, right?
19:35
Just like our initial specs are written by the brightest minds
19:38
on the planet in authentication, identity are U experts being
19:42
guided by the same ilk of people focused on usability and design.
19:47
And what we learned, you know, through this project was is very
19:49
eye opening, right? So we assume that the passkey
19:53
kind of sign in and flow to get someone to enroll for passkeys
19:55
would follow the user journey we had for our web FN guidelines,
19:59
but it's actually not the case. Right, because I just want one
20:03
kind of, you know, teaser here, but generally to be using a
20:07
passkey, you need to be using a password manager, right?
20:10
You're using either iCloud or like your browser password
20:14
manager form fill, which most people don't think of as
20:16
password manager is what they actually are.
20:18
And since you're already using one of those, getting someone to
20:21
take action to enroll for a passkey is different because you
20:23
can't really interrupt that flow, right.
20:25
So we learned about that. You know the key take away there
20:28
is to get someone to use passkeys, we need to engage them
20:31
during an account related activity, right, meaning going
20:34
to account settings or doing a password reset or things like
20:37
that, which is not what we'd expected.
20:39
And so our guidelines actually walk people through that.
20:42
It's a very extensive set of guidelines.
20:44
It's online, it's on our website, you search you know
20:46
Fido UX guidelines, we've identified 130 something touch
20:51
points, the user journey, we've been given guidance on the top
20:54
six, right. So we have more work to do, but
20:56
we think that six or so, we think that these touch points
21:00
that we cover, it really put companies in position to have a
21:04
successful passkey implementation.
21:06
And that's been validated by the fact that some of these early
21:09
adopters who started down their passkey journey before engaging
21:13
with us once they saw the guidelines to a company all
21:16
said, holy blank, I wish I knew this beforehand.
21:20
This could have saved me months of development time and 10s of
21:23
thousands of dollars of development time because they
21:25
all kind of run the same Ahas, right?
21:29
And so basically capture those Ahas, roll them into these UX
21:33
guidelines and we're seeing companies use them to develop
21:36
their own user flows. We also have some assets
21:41
available online and Fig went elsewhere where companies can
21:44
actually copy them and use them for their own implementations.
21:47
So Andrew, you spoke one of the keynotes of identifiers and I
21:54
kind of what an awesome conference I was, I just kind of
21:57
felt like. The reception for Phyto Alliance
22:01
and Pass Keys and everything you guys are doing was unanimously
22:06
like we love it. We want more, send us more.
22:10
I thought that was a great conference, the Authenticate
22:14
2023 conferences coming up Identity Center is going to be
22:18
the official podcast for it. I want to ask you why should I
22:22
AM practitioners attend the conference this year.
22:27
Well, first of all, you're going to be doing a podcast from the
22:29
main stage. That's pretty good reason right
22:31
there. Just come see you guys live and
22:33
I think we're talking about doing some other live podcast up
22:35
with you as well. So you know, get to see Jeff and
22:39
Jim in the flesh, which is always a treat.
22:42
In addition, you know, I think I agree with you, Identifiers is a
22:46
fantastic show, authenticates a little bit more narrowly focused
22:49
on authentication which is a critical part of anyone's
22:53
identity implementation, anyone's identity stack and so
22:57
authenticates the place to learn about that first step in the
22:59
user experience, user journey. You know, our content's very
23:03
case study driven. I think we have, you know, I
23:07
don't know 1520 different case studies this year across our
23:10
dozens of sessions where people are talking about their
23:12
experiences implementing Fido or other means of passwords
23:16
authentication in a variety of settings.
23:19
You know, whether it's, you know, large scale consumer
23:21
settings and financial services or enterprise settings or
23:24
government settings, it's a chance to hear directly from
23:27
other practitioners on what they've done to be successful or
23:31
what they've learned along the way that any other I am
23:35
practitioner can learn from in a very actionable, meaningful
23:38
manner. Now this year, the conference is
23:40
moving from Seattle. I know you're a Seattle guy.
23:43
You're moving it to Carlsbad, CA, basically San Diego.
23:47
Why the move? We're going to reverse engineer
23:51
the journey of any better who started it in Chicago, went to
23:55
San Diego and then Seattle. So we might be in Chicago in a
23:58
couple years now we we moved like, look we we want to be in
24:02
Seattle at first, not just because I'm a Seattle guy.
24:06
It's a natural place for us to start.
24:08
You know, we have, we have great stakeholders there in in
24:11
Microsoft and Amazon and so many of our members have out the
24:15
outpost there where it gives a good chance to have a lot of
24:17
people who could attend. But we thought it was time to to
24:22
broaden things a little bit and and bring it to to a different
24:24
part of the country. And what we found is a wonderful
24:28
location in Carlsbad at the Lacosta Resort and Spa.
24:32
We think the location will really stand out.
24:35
It's a little secluded, it's around 45 minutes from the
24:37
airport, but we're working a on some transport options.
24:40
But B, once you get there, it's really a beautiful spot.
24:43
You know, it has kind of sprawling grounds where people
24:45
can meet and network and and take in, you know, weather and
24:50
what typically is a beautiful time of year in Southern
24:52
California. Yeah, I think you hit the
24:55
keyword there. Weather good enough of an answer
24:58
going to give me a one word answer.
25:00
I would have been cool with that.
25:02
One of the things I always think is so important about
25:04
conferences, but especially authenticate was the Expo hall
25:09
or you know the sponsors of the conference folks who show up in
25:14
the. I've got some solutions that
25:17
help solve the problems of the I am practitioner.
25:21
How are you going to organize the Expo hall?
25:23
Make sure that people have plenty of opportunity to get
25:26
around and and interact with folks.
25:29
Yeah, yeah, great question. I think one thing that makes a
25:32
Fido community unique is that the vendor community really does
25:34
want to engage and help people. And Jim, you're talking about
25:38
get a little off topic. You're talking about how our
25:40
message was well received identifiers and it generally is
25:43
well received because there's kind of a missionary sense in
25:45
the broader Fido community behind what we're doing.
25:47
You know we're not a vendor trying to pick something.
25:50
No one's telling you that yes, you want more passwords and we
25:53
think fishball authentication is a good thing.
25:55
So everyone is willing us to move forward but also carries
25:58
into the vendor community of the Fido Alliance and other Fido
26:02
certified companies, you know 35 to 40 of which will be
26:06
exhibiting out Authenticate in in Charles Bend.
26:10
And they're always willing to to talk to people and share best
26:13
practices in addition to you know giving demos and and and
26:16
talking about their products and service to Expo Hall this year.
26:20
So the location I guess it's really, it's a great venue, but
26:24
I just was there yesterday during the site visit actually I
26:27
live in LA so you can drive down there, you know one giant hall
26:31
with all the content, another giant hall where the Expo is
26:33
going to be. We will have food and snacks and
26:38
drinks inside the Expo area with outdoor, indoor, outdoor
26:41
seating. We're going to run a challenge,
26:45
kind of a scavenger hunt thing that should encourage people to
26:47
go through the Expo hall as well as to take part in other
26:50
activities that they'll be encouraged to do.
26:52
But ultimately, you know, I think you will get a lot of
26:56
value out of Expo Hall, in addition to meeting the vendors
26:59
and then having a nice place to congregate with other attendees
27:02
and grab some snacks as well. Yeah, great idea.
27:07
Last thing I want to talk about was I went through.
27:09
I did my registration. Of course we have the discount
27:13
code IDAC 15 podcast get 15% off, but it was asking me if I'm
27:20
a member and I was like, I don't know if I'm a member, but I
27:22
think the answer is no. I it was driving toward do you
27:26
want to register for the member plenary?
27:29
And I don't even understand the word plenary.
27:31
So I I'm sure I could Google it, but what is the member plenary?
27:35
Yeah. So let's not forget Fido
27:36
Alliance is a, you know, we're a nonprofit organization.
27:38
I talked about what we do and and and how we do it.
27:41
Our specifications, our outputs are largely, you know, created
27:44
by our members, our member organization.
27:48
So any corporation, any company can join.
27:50
We don't have individual memberships.
27:52
We have over 300 company members in Fido Alliance.
27:56
We meet three times a year, once in Asia, once in Europe, once in
28:00
the Americas. What we've done is basically
28:03
turn our US meeting into authenticate as well.
28:07
So typically what we used to do is have like a seminar the day
28:09
before our plenary and they'd be just had a lot of excitement, a
28:13
lot of it turn out. So we basically expanded that
28:15
and turn that into authenticate. So this year we're going to run
28:19
that the plenary actually adjacent to it.
28:20
So we will have depending on the day, you know three or four
28:24
content tracks and we'll have a fifth track where these working
28:27
groups can actually meet and advance their items, right.
28:30
So we have working groups, technical working groups, you
28:33
know, which covers things like you know, 502 specs, UAF covers
28:38
our IoT work. We have deployment working
28:40
groups where people talk about you know, issuing best practice
28:43
guidelines and papers like our enterprise deployment working
28:46
group just issued an awesome set of papers about how to deploy
28:50
the pass keys in enterprise, right.
28:52
So those groups meet face to face.
28:55
We have a board of directors that meets.
28:56
So basically on Monday, Tuesday, Wednesday, we'll have a single
29:00
track where different working group meetings will take place
29:04
one at a time and then on Thursday, the day after everyone
29:07
else takes off, everyone meets, right?
29:09
So we'll have 4 tracks, the working groups meeting, working
29:12
groups all meeting as well as the Board of directors meeting
29:14
throughout that day. So.
29:16
So you know that might be a little little some insight in
29:20
the sausage making on how Fido works, but that's that's what it
29:23
is. So members have a different rate
29:26
than non members for authenticate, but they're also
29:28
signing up to attend, these added.
29:30
So it's interesting to hear that there is working groups taking
29:33
place through the conference. I guess when I was thinking
29:35
about it, it was something that would take place separate, but
29:37
it is interesting to see that kind of pulled together the the
29:40
themes for the conference this year.
29:42
I mean obvious could be based on authentication, but are there
29:45
are there other things that we should be looking forward to
29:48
from an organization standpoint or you know, maybe different
29:51
tracks that things were being followed along?
29:54
Yeah, you know, so it's real interesting to me.
29:56
So this is our third year after this and really second year in
29:58
earnest, right. So the first year we held the
30:00
physical event was 2021 and they were coming off COVID as there's
30:06
another kind of like flare up of COVID.
30:09
And so it was impacted by COVID. You know, we maybe had 250
30:12
people I think in Seattle. And then 2022 is last year is
30:17
pretty much post COVID for you know, most of the world, a lot
30:20
more people. And this year of course is you
30:22
know that that's fully knock on wood in the Riverview mirror and
30:24
we're going to have you know full attendance.
30:26
But what's been interesting to see is, is the how the the
30:30
sophistication and and depth of the content has matured over the
30:34
years with Imperial with Fido become more mature.
30:38
You know So in 2021 there's a lot of like well I piloted this
30:41
and here's what I'm thinking and you know a lot of intro level
30:44
type stuff. But now you know there are
30:46
multiple years of Fido deployments under some companies
30:48
belts they're that they're bringing to share that
30:52
authenticate again. But we've always had case
30:55
studies where these will be more data-driven based on multiple
30:59
implementations. So I think the themes are learn,
31:03
get actionable content and see how people are doing this.
31:07
We have kind of different buckets.
31:09
We're gonna have three main tracks each day with
31:14
introductory content, some case studies, government block,
31:18
payments block, other identity, Jason identity topic block, some
31:22
stuff on emerging technology. And then we have this year
31:28
something new. We're doing our actual
31:29
workshops. So we're going to do a UX
31:33
workshop and we're going to do a developer workshop.
31:36
These are both. There's also kind of content
31:38
tracks on these topics as well. But the workshops will be true
31:41
workshops where in a classroom setting, you know, 2-3 hours
31:45
each for people interested in really gaining, you know, hands
31:49
on knowledge and content. We'll have an open laptop
31:52
session where they're building things right.
31:54
This is the first time I've done that, so I'm super excited about
31:56
that. So that's kind of a new thing
31:58
we'll have here in addition to kind of higher level developer
32:01
and UX content on the main agenda.
32:04
I'm. I'm glad.
32:05
So you got to, you touch a bunch of nerves for me in a good way.
32:08
So the first day, I'm glad to hear there's some introductory
32:11
stuff because I still feel like, you know, I've been attending
32:13
this conference now for a couple years.
32:15
And Speaking of COVID, I'm not going to let Jim let this get
32:18
away with this. But when the last time it was at
32:21
2021, Jim volunteered to speak and I was like, all right, I'll
32:24
go and I'll help you create the content.
32:26
But I'm not speaking. And then what does he do?
32:28
He goes and gets sick the the morning of his flight to
32:30
Seattle. I'm like so I end up having to
32:33
do it myself. So thanks Jim for that.
32:35
Appreciate that that. I will never hear the end of
32:39
that. This is now two years ago.
32:41
You left me hanging, hanging to drive, but I think it went well.
32:44
The second one is this workshop concept.
32:48
Tell me more about this. Do I bring my own laptop?
32:51
Is it something that like it? Is it?
32:53
Is it something you do on the web?
32:54
It's like a virtual environment. I guess it's in person, so I
32:57
should also mention that you can authenticate virtually for all
33:03
the tracks other than the workshop tracks.
33:04
So the workshop tracks are on site only.
33:07
We're not streaming those remotely.
33:08
Know that it's meant to be like an interactive session where we
33:11
have. So our UX working group I talked
33:13
about all those experts who are in that group.
33:16
They're actually creating the curriculum for this in a multi
33:19
hour workshop. So when you're registered for
33:21
authenticate you can choose the sessions you want to attend.
33:24
You can always go back and change your registration later.
33:27
As you get closer to the event itself, we'll send updates to
33:30
those who preregistered with a set of expectations for what
33:34
they should know going into it, what to bring with them, and
33:37
some more details on the actual agenda for those workshop
33:39
drafts. That's really cool.
33:41
I'm gonna have to go back and look at my registration and see
33:44
if I can attend one of those. I'm not a developer, I'm not a
33:48
UI person, but I certainly critique bad ones when I see
33:51
them. But I think that's true for so
33:53
many people, right? So we have, like I was saying,
33:55
we have I'll call accessible UX and developer content also for
34:00
the rest of us, right. So I'm not a I love the UX
34:02
stuff, I'm not a I'm not a UX guy.
34:04
I'm not going to do anything actual with that.
34:05
Likewise, I, I appreciate developer concepts, but I'm not
34:08
going to be developing anything, right.
34:10
So we have that content too. But Jeff, you hit on something
34:12
else that's really important which is that we are certainly
34:15
including introductory content and to be honest with you that
34:18
was one of our challenges. You know, how do we structure
34:20
these tracks? Do you do like 100 level, 200
34:23
level, 300 level or is it like by, you know, subsets or topics?
34:27
And so we opted more to focus on kind of buckets of content in
34:31
these blocks, but certainly do have the intro intro content, a
34:34
lot of it of course up front. So anyone who needs to get up to
34:38
speed on what is Fido, what are pass keys, you know, what is UX?
34:42
How do I consider the enterprise?
34:43
You know, we'll have all that content there for people to
34:46
attend and make sure that those sessions don't conflict with
34:49
other, you know, kind of 100 level sessions on getting people
34:54
all at the same foundation to talk about Fido at Authenticate.
34:58
I think it's fantastic because that's the problem I always have
35:00
is I see so many good sessions and they overlap.
35:03
It's like, OK, what do I pick one?
35:05
Or is like, I'm 5 minutes here, 5 minutes there, 5 minutes
35:07
somewhere else. Like, I don't know how Andy does
35:09
it for identifiers, right? I feel like we have like 17
35:11
tracks at once. And without a doubt, because we
35:14
have so much demand, so much great content, I'm always
35:16
missing something I want to see and that will happen here as
35:18
well. I consider that to be a
35:19
fantastic problem and that's why we are actually recording
35:23
everything and everything's archived will be available
35:25
immediately to attendees. In fact, last year I heard some
35:28
people doing this right. They would go up to the room
35:30
after the after the sessions and after the festivities, of
35:34
course, and then immediately be able to access a trap they're
35:37
unable to see that day because they went to something else.
35:40
So we have to be covered in that in that event.
35:44
But yeah, that's having conflict is something we try to avoid,
35:48
but it's certainly a good problem to have.
35:50
Well, as a as a regular Joe attendee person, I appreciate
35:53
that. Are there any specific keynotes
35:57
or speakers that you're really kind of excited that kind of
35:59
jumped off the page and it's like, hey this is, this is a
36:01
good get or I'm really looking forward to what so and so has to
36:04
say well, so Rachel Tovac's our featured keynote speaker, so I'm
36:09
thrilled to have her. I mean if you haven't seen
36:10
Rachel speak, you're in for a treat.
36:14
She's a social engineering guru who will talk about, you know
36:17
her different hygiene. She's done the past and things
36:21
to be aware of. I mean social engineering is is
36:25
a very real ongoing and growing threat, right.
36:28
We talked about generative A I some of that you know Kuplas
36:31
kind of died down a little bit, but it probably shouldn't
36:35
because you think about what A I stands to do in the realm of
36:38
fraud. It's a very real threat.
36:41
You know, because of the social engineering attacks will grow in
36:44
volume and most you know, significantly in sophistication.
36:48
It becomes impossible to discern what's the real message from a
36:51
fake 1. So it's really important that
36:53
the people to think about, well, you know, if they're for some
36:55
reason, they're still the sidelines and are still
36:57
depending on passwords. Generative AI should be the kick
37:00
in the rear. They need to get off the
37:02
sideline and start adopting fiber authentication to protect
37:05
their employees. And it's not fair to ask your
37:07
employees to be like a shadow IT team trying to sniff out
37:11
phishing emails and the age of AI, let alone before.
37:14
So I think that that'll be a key talk.
37:16
So she'll talk about social engineering.
37:18
We have some AI themes. She's Jane from our Coast Labs,
37:23
a good friend of Phyto Alliance. I will dig into this.
37:26
And one of his presentations, we have several talks on that.
37:28
So that'll be a key theme. Other keynotes, we have Amazon
37:32
Keynote. Yeah, some other major platform
37:35
companies, you know providing keynote updates to be announced
37:40
to stay tuned on those. But I think we'll have a really
37:42
good mix of Mainstage content. And then you know, like I said
37:46
before I, I always love the case studies and one of the coolest
37:50
things about you know running Authenticate is seeing the
37:53
content come in, right. So we had you know probably two
37:56
or three times the amount of submissions as we had number of
37:59
tracks. But the fact that people who are
38:01
deploying Fido are willing and interested to take the time to
38:06
submit at a speaking proposal and then actually come out and
38:10
speak, it still blows me away. It's super cool.
38:13
So like I'm looking forward to new keynotes, excuse me, new
38:15
case studies this year from companies like Block, Pinterest,
38:20
Starbucks, Fox, Shopify, DocuSign, all new.
38:26
And then we have some updates too from companies like Target
38:28
who will reflect on, you know, how their Fido implementations
38:32
have progressed, you know, since they talked last about it in
38:35
2022. Well, I believe in work hard,
38:38
play hard. And by work hard I mean sit in
38:40
air conditioned building and listen to people talk at
38:42
keynotes. But you know, one of the things
38:45
that I remember from last authenticate was the Mopop
38:50
museum and social that you had in in Seattle.
38:54
And like the events that surround the conference are just
38:58
awesome. And I wonder what you have in
39:00
store first this year, whatever you're willing to share at this
39:03
point, we won't authenticate to be fun.
39:07
You know, I'm not going to say irreverent, but like, you know,
39:09
we don't feel bound to any sort of trade show code of conduct.
39:13
I mean, we expect people to conduct themselves well.
39:16
But like, we know this doesn't need to be like another, just
39:19
another trade show. So one thing, we're introducing
39:21
this here, which is kind of fun for the Mainstage sessions.
39:23
Well, welcome music. So everyone who's speaking will
39:26
get a chance to speak to choose their welcome music for their
39:29
session. So for example you guys can
39:32
choose hard for your session. It'll be fun to see what other
39:36
people choose for their own welcome music for each of their
39:39
their main stage talks. That'll be kind of like a fun
39:41
little twist on things. I mentioned the scavenger hunt.
39:45
I know it sounds like Oh yeah another like trade show gimmick.
39:47
But it actually we met with the team yesterday that's organizing
39:49
it. It's going to be a lot of fun
39:51
for individuals or teams to take part in that wins great prizes,
39:55
meaningfully great prizes. We are going to bring in food
39:59
trucks for like the opening night reception.
40:02
There's probably going to be in and out food truck and other
40:04
food trucks and. Plenty of to eat and drink to,
40:07
to help people mingle. And again, I think the venue
40:10
itself is really a special place, right?
40:13
So the Monday night event, which is a the opening reception and
40:18
the Tuesday night event which will replace Mopop.
40:22
Both those will take advantage of the natural surroundings
40:24
where you can kind of mingle around, enjoy yourself some
40:27
food, cold beverage and the company AD authenticate.
40:32
It is a lot of fun. We do have a good time there,
40:34
for sure. Hard is not my choice.
40:37
I think we've been, we've been kind of I I, you know, thinking
40:40
about how like our session might go.
40:42
And I'm thinking is we'll just play our show intro and just do
40:46
that. So at least there's some
40:47
familiarity with it. Like, the idea we've been
40:49
playing around with is this idea of doing a live show in front of
40:54
a live studio audience and it just happens, this one.
40:57
May or may not be streamed at the same time and then sort of
41:00
that sort of thing. So that's kind of what I'm
41:02
thinking. I don't know if we can do heart
41:04
because I don't want to get a DRM strike.
41:06
I had a world of hurt last week with one of our episodes and
41:10
some music that we I was trying to get working with and it was a
41:16
real problem for me. Our production company assures
41:18
me that they'll be on top of that the DRM, so we'll see it
41:21
goes on. There was the other thing to
41:22
mention when Jimmy mentioned golf.
41:24
I know you're a golfer. We can probably spend 45 minutes
41:26
before everyone else talking about golf.
41:29
But that being said, you know, for those of you listening, you
41:33
know it is on, well, the golf courses.
41:35
There's two golf courses, one's under construction, other ones
41:38
available, but within a wayward, you know, 3 Wood away, there's,
41:42
you know, 1520 golf courses in that area that are worth
41:45
attending, worth worth going to and coming early.
41:49
You know, we're encouraging people to come early.
41:51
You know, bring your, your spouse, your family for the
41:54
weekend prior. If you're a vendor, this is a
41:56
great place to bring your customers, right?
41:58
So bring your customers. You're interested in learning
42:00
about authentication, identity, bring them early, wine them and
42:02
dine them. There's a fantastic steakhouse
42:04
on property you know it's really meant to be.
42:08
I'd encourage people to take advantage of the venue in the
42:11
setting as much as they're looking forward to engaging with
42:14
attendees as well. Yeah, I'm looking.
42:17
I'm really looking forward to it.
42:18
I find it a very approachable conference too.
42:21
Like, I feel like, you know, everyone's there.
42:24
They're in an identity capacity. They're in a very specific
42:26
identity capacity around authentication, right, and
42:28
things like that. But I mean, I've had great
42:31
experience. I've had great hallway
42:32
conversations. You know, I learned about
42:35
quantum computing one year from. You know, one of the attendees,
42:40
I don't want to like blow up a spot or anything like that, but
42:43
it was interesting. It was like, I've had a lot of
42:44
good stuff, alright. I say it was Roger Grimes, but I
42:48
mean, I was like, OK, this is, this is a good conversation and
42:51
it does. That's the stuff that I think
42:53
you just can't, you can't replace virtually.
42:56
I mean I get people can't always be where they, you know, where
42:58
they want to go live and stuff like that.
43:00
But that's just one of my favorite parts is just those
43:02
hallway conversations. That's really one way I love to
43:06
judge our success is seeing busy hallways.
43:08
In this case we busy, busy kind of like walkways.
43:11
But I think that that's the value of coming to these things
43:13
in person Jeff. I mean you hit that spot on, you
43:16
know the contents are fantastic, right.
43:18
And that's why we also have remote attendance options if all
43:20
you care about, not if you care primarily about primarily about
43:23
the content or for any reason can't travel.
43:26
The content's available to you as remote attendee when we make
43:29
it available, you know several months after the conference to
43:32
the community at large. But it really is a networking
43:35
the the face to face stuff that we aim to facilitate.
43:39
We've expanded the timing of the breaks to give ample time for
43:43
meetings to go to the Expo hall, to have imprompty conversations.
43:47
So I think those are all things that were aiming to facilitate.
43:51
It's almost like Hamilton, like, you know, you were in the room
43:55
when it took place and that's about all I know of Hamilton, so
43:59
don't cause me past that. So I feel like this is a little
44:02
bit of a celebratory year because we've got past keys out.
44:05
It's in the real world. People are starting to use it.
44:08
We're done. Mission accomplished.
44:11
You know what's next for Fido? I mean, I'm sure there's a lot
44:13
more work to do, but I'm guessing the answer you're going
44:16
to tell me is, no, we're not done.
44:17
There's a lot of things still that need to be taken care of.
44:19
But what is next for Fido in the Fido alliance?
44:22
Yeah, the mission is far from accomplished.
44:25
You know, we've seen a handful of very meaningful pass key
44:28
deployments which is fantastic, but more need to happen and
44:32
we're still learning, you know, so we as a broader fighter
44:35
community, we you know speak on behalf of the kind of core
44:40
platform stakeholders that are implementing this.
44:44
They're constantly learning. In fact I give this company so
44:46
much credit and how quickly they've actually taken
44:49
innovations and feedback into their OS implementations of
44:53
passkeys based on what they saw from the UX working group, based
44:57
on what they've heard from early adoptions, there is a true
45:00
desire to get this 100% right and everyone's working very
45:04
diligently to make that. So another thing that actually I
45:07
talked a little bit about that Denver Speaking of kind of
45:09
passkey providers is opening up the third party passkey
45:13
ecosystem. So you mentioned you know one
45:16
password and dash laying companies like that.
45:18
You know that they are independent credential providers
45:20
who have a vital role to play in the future of passkeys.
45:24
And so we're we're working on programs to make sure that those
45:29
providers are vetted and can be recognized as such for having
45:33
you know requisite security practices in place to protect
45:37
past keys and the the fabric, the sync fabrics that that
45:40
manages those. So that's something else that's
45:43
really important to do and then continue on you know building
45:47
out the technology, you know technical work's not done.
45:51
The foundation's there. There's work around the edges
45:54
that always needs to be done, you know in credential flows and
45:58
adjacent topics like Wallace and identity and things like that
46:01
that will continue to focus on through our technical working
46:03
groups and our deployment working groups that issue best
46:07
practice guidance on how to successfully implement fiber
46:11
authentication. Then again UX, you know the UX
46:14
working group is super exciting dynamic group right now.
46:18
They have a kind of road map ahead for them and focus on
46:22
other touch points in the user journey where you want to, you
46:25
know, test and deliver expert guidance on the best way to
46:30
deploy pass keys. Ultimately, you know you only
46:33
get so many cracks at consumers and our focus is on making sure
46:37
that, that people get it right the first time because if you
46:40
tick a user off, you know they see passkey sign and everything
46:44
breaks down, the next time they see it, they'll be less likely
46:46
to actually enroll their passkey.
46:48
So it's very important to us that people get this right.
46:50
So we'll continue to focus on on guidance and making sure the
46:54
technology itself is easy to implement, easy to use.
46:58
So we're going to end on a later note here in a minute, but I
47:00
want to go back and Jim started off this episode with a Mia
47:03
culpa. I have one of my own because
47:06
this actually happened at Authenticate a couple years ago.
47:09
I think it was the year that Jim ditched me and made me present
47:11
on my own. No offense, you know, just just
47:14
letting that in there. Somebody came up to me after
47:18
that after I was done presenting and it was from a consumer
47:23
password company wallet, you know, like.
47:27
A LastPass or a bit warden or you know what things like that.
47:29
I don't remember which one it was, but they asked me what did
47:35
I see the role of their company in similar with passwordless and
47:41
I didn't see it and said I don't know if there's really anything,
47:44
any role because if we don't have passwords, how are we
47:47
going, you know, what do we need you for flash forward here two
47:50
years later And now I'm saying, oh, they're the glue that holds
47:53
all the ecosystems together, at least right now.
47:56
And I'm starting to see. I don't know if I'm right or
48:00
not, but I know. I feel like I'm two years later.
48:02
I was wrong two years ago and I feel like I'm starting to catch
48:07
up to maybe where that person was thinking, yeah, no, I think
48:11
that's a natural assumption for one to make when we first
48:15
announced past keys. I've got all sorts of questions
48:17
like the way you're putting the password manager companies out
48:19
of business or you're putting your vendors out of business and
48:21
I feel tend to fear innovation and no one's going out of
48:26
business do the passkeys right. So if you think of passkeys and
48:30
the role of password managers today again you're an Apple guy
48:34
like iCloud is your iCloud Keychain is a great password
48:38
manager for you. I'm a multi ecosystem guy
48:43
because I like things difficult. So I use a password manager
48:47
across my devices and then share with my family across their
48:49
devices. And so that's for an independent
48:51
credential manager like a Dashlane or bid Ward or LastPass
48:55
or One Password, it really has a critical role to play and just
48:58
like they manage passwords today, they'll manage pass keys
49:01
tomorrow. So, and they're all working on
49:03
this, right. In fact, Ashley and One Password
49:04
have talked about their beta implementations, think bit
49:07
Warden has as well and they're all taking part in the alliance
49:10
and and you know they've been amazing contributors.
49:14
So I think, you know, it shows that with with every innovation
49:17
there's opportunity. I do think those companies have
49:20
an important role to play. Yeah, I'm with you.
49:22
I I didn't see it then. I I I'm starting to see it now.
49:25
So I was wrong. But hey, that's the great thing
49:28
about opinions. They can change as new
49:29
information comes along, right? Or to have an opinion to be
49:31
wrong and not to have an opinion in my book and nothing wrong if
49:34
you have an opinion. OK, let's wrap up here with a
49:38
lighter note. I crafted this one almost
49:40
specifically for you, and this is more.
49:43
I was watching a movie earlier this week as I was kind of
49:46
working and had something off the side TV.
49:48
It's not going to give you a scenario, so I I took into
49:50
account. The golf course at Carlsbad
49:53
where we'll be the other resort, and the fact that we've had lots
49:58
of music conversations, things like that.
49:59
And here's my spin on it. I'm going to give you a
50:02
scenario. You can ask as many questions as
50:04
you like, and then we'll get to the answers.
50:07
You are playing golf against an actor or a musician.
50:12
If you win, you take their place in a movie or song of your
50:17
choice. Who do you pick?
50:21
And what movie or song are you going to be in now?
50:24
So there's a couple of nuances here, right?
50:26
You have to beat them. So you have to pick somebody
50:28
that you think you could beat it.
50:29
Go or you can gamble and say, I don't know if I can beat them.
50:33
I surely would want you know that.
50:35
Try to go after that role or that song or whatever it may be.
50:39
Any questions? So if I'm the singer, do I?
50:44
So every time this band performs my like transported there as
50:48
lead singer to be on stage singing this song.
50:51
Yes. So this transcends, this
50:54
transcends space and time as we know it.
50:59
Yeah, It's. So let's say if it is a song,
51:01
anytime that that song is played, viewed, performed,
51:05
etcetera, you're the person in whatever song or role of that
51:11
song, right. Maybe you're the singer.
51:12
Maybe you're the guitarist or drummer or whatever it may be.
51:14
Or some other instrument. But it's just that one song, not
51:17
the band and not the catalog. One song or, and firstly one
51:21
movie or something like that. Could I take on the Wilson
51:23
sisters and then never sing Barracuda ever again?
51:28
You could and just just sit there and just stare blankly
51:30
into the camera or, you know, it's not fair.
51:35
I'm pretty a golfer, so I like my chances against against a lot
51:38
of people. I think I'd go movie.
51:42
I think I'd go movie. There's some pretty cool roles
51:45
out there that would be fun to be that, that actor, actress.
51:50
Action movies are cool, you know, and in my in my mind, I
51:53
can, I can carry these stunts off.
51:55
Even though I'm getting old and decrepit and probably couldn't.
51:57
I would go, I'm going to go old school.
52:00
I was thinking like classic Sean Connery as James Bond and that's
52:03
who doesn't want to be that guy. I'm going to go with Clint
52:10
Eastwood as Dirty Harry. Oh, that's a good one.
52:14
Now, the problem there, Clinton is Prime was pretty golfer, so I
52:16
probably couldn't beat him. Plus he probably intimidate the
52:19
hell out of me. But assuming I could somehow
52:21
beat him, I would love to be Dirty Harry.
52:23
That'd be a pretty, pretty good role to have.
52:26
That that sounds good to. Me.
52:28
Yeah, I like that. That's that's a good one, Jim.
52:32
What's yours? Yeah, I don't think mine is as
52:35
good as that, but I wasn't thinking about the beat him
52:38
part, so I'm not sure I can beat the person I'm going to mention.
52:43
But I do have a qualification, so I'm only picking this person
52:46
if we can yuck it up while we're doing the eighteen holes.
52:50
So we can't yuck it up. I mean, you know, I don't want
52:52
to be there with this person, but I think I picked Ron
52:56
Livingston because first I had to go with the movie, right?
52:59
Because the the song I did kind of think through like okay, I
53:03
don't want to be on stage every night.
53:06
I want to be in one movie. That I can say.
53:09
Yeah, I was in office space. Remember that.
53:11
And so, for people who aren't familiar, who is Ron Livingston?
53:14
That's Peter in Office Space, and he's also in Band of
53:17
Brothers, which is like another favor of mine.
53:20
But but I'd pick, I'd pick his role in Office Space because,
53:24
like, I feel like I know every line of that movie and yucking
53:27
it up on the golf course would be like, you know, I would, I
53:30
would be his boss, like Peter. What's happening?
53:36
But he's like, just go away, Just go away, you know?
53:39
So we we Jack it up. Yeah, just.
53:41
See the new cover sheet? Because we've got a new cover
53:44
sheet now. For you, have you felt like that
53:47
in your job at one point or another where somebody's like,
53:50
I'll get you another copy of that memo?
53:52
It's like the timesheet reminders.
53:53
Yeah, peel back the curtain, right?
53:54
For for consulting. Anybody's in consulting probably
53:57
has to fill out time sheets every, you know, theoretically,
53:59
every day or every week, every pay period, whatever may be.
54:02
But yeah, we get so many reminders on the last day of the
54:05
pay period. Well, the worst is like remember
54:08
timesheets are due at 5:00 o'clock and then you get the
54:11
e-mail at 3:00 o'clock. Hey, you still haven't submitted
54:14
your timesheet? Yeah, 5 o'clock's in two hours.
54:17
You know, generative AI should answer that question for you at
54:21
some point. AI is going to solve all our
54:23
problems. OK, so the genesis for this
54:26
question. I was watching a movie earlier
54:29
this week, Iron Man and my is. Robert Downey's role in the
54:35
first Iron Man blew me away and I just love the character.
54:39
It's it's totally my speed. I'd love to be, you know the
54:42
rich Playboy with all the fancy technology and toys.
54:45
Every knows I'm kind of a tech dork to begin with.
54:47
But yeah, I would want. I don't.
54:50
I don't. I I'm almost certain I could not
54:51
beat anybody in golf, but I would.
54:54
I would enjoy the journey and if on off some chance I'm able to
54:58
pull it off, I would love to to have the role of Iron Man.
55:03
In the same like just I thought he was just a perfect fit and it
55:06
was just like he pulled it off so well, so not as deep.
55:09
I like the Clint Eastwood one, that's really good too.
55:11
I like the office based one. These are good choices.
55:13
It's hard to pick just one though, right?
55:15
Yeah, it's I'm definitely bringing this conversation, this
55:18
question to all my friends and family for over drinks.
55:23
This would be fun conversation. Great question.
55:25
Good. So then, mission accomplished.
55:27
Who cares about all that identity crap that we talked
55:29
about? This is the This is why people
55:32
tune into the Identity of the Center podcast.
55:35
All right, so we're going to get things wrapped up.
55:36
I do want to give a shout out to a recent Five Star Review Gone
55:41
On Apple podcast that somebody left for us.
55:43
Informative, entertaining, and educational.
55:46
Jeff and Jim have an awesome rapport on the podcast.
55:49
Additionally, they bring a wealth of knowledge for people
55:51
looking to educate themselves on the nuances of identity
55:53
security. Keep up the awesome work, gents.
55:55
JK, hopefully that doesn't mean just kidding, but it's somebody
56:00
named JK Chi Town 22. I don't know who that is, but
56:02
they just left it like a couple weeks ago.
56:05
That was very cool. So we fooled another one.
56:06
Jim, into thinking that we have an awesome rapport.
56:09
We get off it and it's like, you know, cats and dogs.
56:11
No, we we get along. We've been working together for
56:14
like almost a decade at this point.
56:16
Yeah, I definitely could have gotten away from you.
56:18
I wanted to. I had my opportunities.
56:20
Yes, you've had it. So did you.
56:22
I keep pulling you along and keeping you close.
56:26
OK, we're going to go ahead to wrap it up for this week.
56:27
I've got a bunch of links in our show notes.
56:30
Connect with Andrew on LinkedIn. Learn more about the Fido
56:32
Alliance at fidoalliance.org. I've got the link for the Fido
56:37
UX guidelines. They're available for both
56:39
PDF&HTML, which is very cool, very flexible way to look at
56:42
over things and kind of get an idea of what they're what they
56:44
have there. Got a link to the Cybersecurity
56:47
Midwest Summit? That's in Cincinnati, September
56:51
14th. Identity Week America.
56:54
Code IDAC, 3030% off of your conference pass.
56:57
We'll have a link to that. Authenticate conference, which
57:00
is why we're here today. I D AC15 podcast 15% off.
57:04
Thank you very much to Andrew and the team for helping provide
57:07
that. We hope to see a lot of friendly
57:09
faces, a lot of new faces at the Authenticate Conference.
57:11
It really is a great one. I've I've been to the last I
57:14
think 3 or 4 now at this point and I'm, I'm looking forward to
57:17
the location. San Diego area is awesome and
57:21
looking forward to either golfing or it or close enough to
57:24
the beach. I think Andrew right we can like
57:26
go there. It's like.
57:27
It's like right there as well. I mean it's pretty close.
57:30
So with that, we'll go ahead and wrap it up.
57:32
We're on the web, idacpodcast.com, IDAC Podcast on
57:36
Twitter or X or whatever the heck it's going to be called.
57:38
By the time you listen to this. We're on Mastodon, at IDAC
57:42
Podcast, at Infosec dot exchange.
57:44
Jim and I are on LinkedIn. We're always happy to connect
57:47
with people, take questions or get show ideas, things like
57:51
that. And don't forget to subscribe
57:53
and be cool, just like JK Chi Town 22 so that you know when
57:58
new episodes drop and you know, hit that, like subscribe, thumbs
58:01
up, whatever it is, right? That helps us put out more
58:03
content and helps us get great gigs like working with Andrew
58:06
and Fido Alliance and and others to bring the goodness of
58:09
identity to all. Okay.
58:10
That was a terrible soapbox ending.
58:12
I'm going to wrap it up right there.
58:13
Thanks everyone for listening and we'll talk with everyone in
58:16
the next one. You've been listening to
58:19
Identity at the Center. We hope you've enjoyed the show.
58:23
Make sure to like, rate and review and we'll be back soon.
58:27
But in the meantime, hit the website at
58:29
identity@thecenter.com and find us on Twitter at IDAC Podcast.
58:37
See you next time on Identity at the Center.