On the first day of EIC 2026, I will deliver a keynote speech titled "When Software Becomes Staff: Governance, Security, and Safety for Aggressive AI."
Further display I will be giving a keynote speech at EIC 5 in Berlin on May 19th, titled "When Software Becomes Staff: Governance, Security, and Safety for Agentic AI."Category: identity
EU age verification app hacked in 2 minutes?! Details and evaluation
On April 15th, European Commission President Ursula von der Leyen announced that the EU Age Verification app was now available. However, shortly afterward, reports began to surface claiming that it could be "hacked in two minutes." [...continues...]
Further display EU age verification app hacked in 2 minutes?! Details and evaluationID Technology Trends in March 2026
March 2026 was an extremely busy month for me, with standards-related meetings including JTC 1/SC44, SC27, and IETF, just among my acquaintances. ISO/IEC JTC 1: There are various things I can't write about regarding ISO-related matters, so this is just a brief overview. SC27 (Information Security, Cybersecurity and Privacy…)
Further display ID Technology Trends in March 2026I spoke at FINOLAB's "Towards the implementation of AI agent payments - from governance to authentication and authorization"
On March 6th, I appeared at a Japan Fintech Week-related event hosted by FINOLAB, titled "Towards the Implementation of AI Agent Payments: From Governance to Authentication and Authorization." My speech was to be with Shibata-san, but despite the script he had written for me, I completely overstepped the bounds of my bounds...
Further display I spoke at FINOLAB's "Towards the implementation of AI agent payments - from governance to authentication and authorization"Discord is on fire after authorities report codes and other information were found in Persona code, which is supposed to be used for age verification
The source code for the Persona front-end used by Discord for age verification was accidentally made public. Analysis of this code has caused a stir, as it was discovered that, while it was supposed to be performing "age verification," it also had modules that compared facial images with watchlists and PEPs, and reported directly to the government.
Further display Discord is on fire after authorities report codes and other information were found in Persona code, which is supposed to be used for age verificationYear-end Greetings: Faure's "In Paradise - Requiem Op.48" - In Memory of Andrew Nash
This is my customary end-of-year greeting. I had been planning to perform "Lilium" this year, but upon hearing the news of my dear friend Andrew Nash's passing (although it was only three months ago), I quickly switched to "In Paradise," the final movement of Fauré's Requiem. This performance is for Andrew, and for the memory that lives on through the work they left behind...
Further display Year-end Greetings: Faure's "In Paradise - Requiem Op.48" - In Memory of Andrew Nash12th FIDO Tokyo Seminar - Towards a Password-Free World -
As I announced on X (I often don't have time to write a blog, so I hope you'll follow X), today is the 12th FIDO Tokyo Seminar ~Towards a Password-Free World~. ~Phishing Prevention Using "Passkeys" and the Latest Trends~ will be introduced throughout the conference...
Further display 12th FIDO Tokyo Seminar - Towards a Password-Free World -Participating in the panel "Current Status and Future of OSS Initiatives in Economic Security" at Okinawa Open Days
I'm writing this on the day of the event, or rather, right now (12/4 9:45 AM) at my desk preparing for the panel, and I will be appearing on the panel mentioned above. There will be an 8-minute presentation on the panel, and the thumbnail is the cover of that presentation. Once it's finished, I'll upload the materials here. [Updated 13:23] Here are the materials. Please review them.
Further display Participating in the panel "Current Status and Future of OSS Initiatives in Economic Security" at Okinawa Open DaysCongratulations on RFC 9901! SD-JWT Becomes an Internet Standard -- New Rules for "Show Only What You Need" in the Era of Digital ID Wallets ~ "SD-JWT: An Overview of the Core Format Supporting Verifiable Credentials and Identity Wallets"
1. The Birth of RFC 9901 On November 19, 2025, the specification for "Selective Disclosure for JSON Web Tokens," commonly known as SD-JWT, was published as RFC 9901. The authors are the following three people: JSON Web…
Further display Congratulations on RFC 9901! SD-JWT Becomes an Internet Standard -- New Rules for "Show Only What You Need" in the Era of Digital ID Wallets ~ "SD-JWT: An Overview of the Core Format Supporting Verifiable Credentials and Identity Wallets"Digital Agency: First Expert Meeting on Attribute Certification Issues
This is a bit old news, but I participated remotely as a committee member in the first meeting of the Digital Agency's "Expert Meeting on Attribute Certification Issues," held on October 23rd. It was the autumn tour season, so... However, perhaps due to Microsoft Teams or the microphone, I could only hear about two-thirds of what was being said, and I couldn't hear what was going on behind the scenes...
Further display Digital Agency: First Expert Meeting on Attribute Certification Issues