I just logged into Kim's blog (www.identityblog.com) using a InfoCard and was redirected to his Blog Admin page.

click to enlarge
What was interesting was that at the bottom of the blog admin page was a link to
browsehappy.com.

click to enlarge
The first page of
browsehappy.com has text that reads as : "
Internet Explorer can make your computer unsafe. Why not switch to a browser that's more secure?".
I read that and thought.... {{{nothing}}} I Know, I Know, browsehappy.com and wordpress are interlinked...
ALSO: I sent an infocard with Kim's own FirstName, LastName and email address (because from Kim's infocard invoker code, I saw that the only info he requested from an infocard was just the firstname, lastname and email address) and was able to login with that infocard too. However either with my own infocard or with a FAKE infocard with Kim's own info, I could not do much on the site. But the point is that regardless of the authenticity of the user, a "user" was provisioned on his blog.

click to enlarge
QUESTION: what if millions of users or a BOT did that?. Would Kim "provision" all of them on his local DB ??
Tasteless Joke: InfoCard can be good business for the storage folks.
PS: I HAD to use Internet Explorer 7 to be able to use infocard. No Standard Web browser would work. (at least for now)
Interesting aye !! 