Showing posts with label report. Show all posts
Showing posts with label report. Show all posts

Daily Tech Digest - July 19, 2017

UN survey ranks nations by cyber security gaps

“There is still an evident gap between countries in terms of awareness, understanding, knowledge and finally capacity to deploy the proper strategies, capabilities and programmes,” the survey said. 50% of countries don’t have a national security strategy, which is said to be the first step towards closing cyber security gaps. “Cybersecurity is an ecosystem where laws, organisations, skills, cooperation and technical implementation need to be in harmony to be most effective,” the survey said. “The degree of interconnectivity of networks implies that anything and everything can be exposed, and everything from national critical infrastructure to our basic human rights can be compromised.” North Korea, in 57th place, was among countries that ranked higher than their economic development but were let down by their “cooperation” score


AI Will Be In Almost Every New Software Product By 2020, Says Gartner

The growing interest in AI for enterprise software is evident in Gartner’s search data; in January 2016, the term “artificial intelligence” was not in the top 100 search terms on gartner.com. By May 2017, the term ranked at number seven. “As AI accelerates up the Hype Cycle, many software providers are looking to stake their claim in the biggest gold rush in recent years,” said Hare. “AI offers exciting possibilities, but unfortunately, most vendors are focused on the goal of simply building and marketing an AI-based product rather than first identifying needs, potential uses and the business value to customers.” Hype and “AI washing” is obscuring the real benefits to be gained by the technology. To successfully exploit the AI opportunity, technology providers need to understand how to respond to three key issues


Financial Services and Neo4j: data lineage and metadata management

Specifically, data lineage compliance can be a challenge because the same data can be replicated across many different systems. ... Neo4j’s flexible schema enabled the global firm to model all its data flows and rapidly answer questions about how and where its data is used. Given the success realised with Neo4j, the firm plans on widening its coverage of datasets and offering the solution to other parts of the bank. ... An enterprise whose data management process is both flexible and responsive in real time can better respond to the evolving compliance landscape while offering more competitive products and services to customers. In terms of both flexibility and performance, Neo4j is far and away the best database to manage these growing and interconnected datasets.


Where Do Businesses Fall Short With Digital Transformation?

“The number one challenge is finding the right talent to execute on it. Gartner has done research with CIOs asking them about what they see as their top challenges. Number one was lack of talent and resources. ... Where the demand for talent is already about five times bigger and supply and demand is growing faster and faster, attracting this talent is a major challenge.” – Roald Kruit, Co-Founder, Mendix.  “Probably the biggest challenge is having a real understanding of what it means to dangerously transform the business. Many people believe that digital transformation means making the forms that round the business available online, or making some transactions available on a website or on an iPhone. However, true digital transformation means rethinking the way you run your business from top to bottom. ...” – Rod Willmott, Chief Wzard, Wzard Innovation


The hidden horse power driving Machine Learning models

Something needs to be done. Maybe we could move this problem into the cloud and let the big boys with their big machines take over. The problem is moving your data into the cloud. For universities and the likes of Google, this isn’t really a problem, providing you’ve got access to end-to-end fast networks. Universities in Britain are all connected over the Janet network, whose backbone runs at 100Gbps, more than enough to shift large datasets around. Google, of course, has its own dark net, but what if we want to move data out of our walled garden and onto a public cloud ML system? This was just the problem we faced a few years back at Dundee University when trying to use Microsoft’s Azure to process Mass Spectrometer data. These files were fairly big - a few gigabytes in size - but we were hoping to process lots of them in near real time.


What is gamification? Lessons for awareness programs from Pokemon Go

While many vendors, as well as security practitioners, want to describe their gamification products/programs as a fun way to learn, the effort to provide information is not gamification. Again, gamification is about rewarding actual behaviors, not achieving a specified learning objective. All security practitioners should be aware that just because a user knows what is proper behavior, it doesn’t mean that they actually practice that behavior. For example, some vendors created games about how to tell if a password is strong. They then have in-game contests to tell if a student can tell which passwords are strong and which are weak. If a student knows that a good password has eight or more characters, the “game” issues them a certificate deeming them security aware.


Goodbye Age of Hadoop – Hello Cambrian Explosion of Deep Learning

While data scientists are a little cautious to talk about the wonders of artificial intelligence, they are very enthusiastic in talking about the new capabilities presented by Deep Learning. This may seem a little paradoxical but I invite you to think about it this way.  Robust AI is the accumulated capabilities of speech, text, NLP, image processing, robotics, knowledge recovery, and several other human-like capabilities that at this point are very early in development and not at all well or easily integrated. Deep Learning however is a group of tools that we are applying to develop these capabilities, including Convolutional Neural Nets, Recurrent Neural Nets, Generative Adversarial Neural Nets, and Reinforcement Learning to name the most popular.


Advanced social technologies and the future of collaboration

Most companies have begun adopting digital tools, including social technologies, or even transforming their businesses with digitization in mind. But a mistake that many make is choosing the tool first and then expecting change will follow. Any improvement via social tools must begin with people changing the way they work first, then using the tool that fits best. Agile ways of working (such as cross-functional teams, scrums, or innovation hubs that are apart from company hierarchy), as well as user-centric approaches to product development, require the greater collaboration provided by the message-based platforms. And the more that message-based platforms are integrated into business processes and systems, the more critical they will be.


Why cyberattacks should keep CFOs up at night

"Bringing cybersecurity up a level to the C-suite and providing it to them in a framework of risk helps them to really put the investments we want to make in the right framework, so they can understand those investments versus the overall compensation structure or the R&D pipeline," Driggs said. In this way, the CFO can act as a cybersecurity advocate to the board. "If we are hit with a cyber attack or subject to ransomware or fraud, there is certainly a financial impact and a reputation impact and a business continuity impact," Driggs said. "The CIO should view a relationship with the CFO as beneficial to them—they will get an advocate to represent their issues to the board and the C-suite for investments and awareness around the risks they are trying to mitigate for the company."


The simple way to scan documents with your Android phone

It's kind of astonishing when you stop and think about all the once-cumbersome tasks our smartphones have simplified. From check depositing to audio recording and even airplane boarding, our tiny pocket computers have truly become all-in-one life organizers and productivity machines. Our phones can do so much, in fact, that I'd wager hardly anyone actually takes advantage of all their mobile-productivity powers. Case in point: One easily overlooked way your phone can save you time and frustration is by serving as a quick 'n' simple on-the-go document scanner. Google actually offers two useful tools for scanning and managing physical papers -- and both can come in quite handy when you find yourself needing to save or share any sort of document, card, or receipt.



Quote for the day:


"If it's a good idea, go ahead and do it. It is much easier to apologize than it is to get permission." -- Admiral Grace Hopper


Daily Tech Digest - February 10, 2017

Are Companies Doing Enough On The IoT Security Front?

Device manufacturers need to make sure security is incorporated into the design and embedded in the product life cycle, Laliberte says. “Design the product to be easy for the consumer to secure,” he says. “Do not rely on them to perform critical activities needed to secure the device. They will likely not do it.” Ultimately, users of IoT and the product manufacturers “have an obligation to install and create IoT products in ways that maximize usefulness and minimize risk,” Laliberte says. “The use of IoT devices is going to expand rapidly, and without adequate security we have the potential to introduce unknown dangers into our homes, workplaces and communities.” The overwhelming amount of insecure and unsecured IoT devices worldwide practically ensures that we’ll continue to see attacks such as DDoS continue to proliferate worldwide for the foreseeable future, DiDio says.


Solving Data Gravity Pain

Data gravity introduces significant industry challenges. BI has primarily lived on-premises, with only a minuscule 2 percent of BI applications living in the cloud. Even as the industry shifts more and more apps rapidly to the cloud, data warehouses and many other data sources still often reside on-premises for a long time. Thus, we anticipate an increased need for BI apps to query across both realms, on-premises and cloud, as the latter matures. Data gravity is an undeniable market force that we’re seeing in our BI industry mid-life crisis. The mobile- and cloud-first world – one in which a myriad of apps for every conceivable function generate more data in the cloud than on-premises. As more apps are delivered via mobile, cloud and Software as a Service (SaaS), the center of data gravity is already shifting.


Highlights from the Cisco 2017 Annual Cybersecurity Report

The cyber perimeter of organisations has not been restricted to their physical boundaries for some time, and the continued blurring of the line between work and private lives has further increased the attack surface area of many organisations. The increasing use of BYOD and home-working schemes, with employees carrying their devices everywhere, has continued to expand the security perimeter so that organisations’ physical borders have become a hub within the cyber perimeter. The security perimeter has also been extended beyond organisations’ physical devices to the immaterial and unlimited space represented by the Cloud environment, where Cloud solutions are being increasingly adopted worldwide.


Twitter hopes machine learning can save it from oblivion

Twitter began making more noise about its machine learning investments last summer when it acquired Magic Pony Technology, which had developed image-reading technology. At the time, Twitter also highlighted two past acquisitions in this space: Madbits in July 2014 and Whetlab in June 2015. During the call, Dorsey revealed that Twitter had hired Jan Peterson to oversee its “science efforts, all of our deep learning, all of our machine learning and artificial intelligence.” Dorsey pointed to the growth over the last three months in statistics like daily active users, engagement, and tweet impressions that people see. The company has been breaking away from its traditional firehose, real-time format to help users find more interesting tweets that they may have missed.


NACD Publishes Five Cybersecurity Principles Every Board Director Needs to Know

Directors are under tremendous pressure to appear to be doing something to get a handle on cyber risks. In many cases, this is manifested by the questions boards are asking CISOs and other managers. For example, the handbook warned that employees and contract workers, while indispensable assets, can also become easy vectors of attack for external actors, highlighting the need for regular security awareness training, strong controls and a strong organizational culture. According to NACD, only 42 percent of public directors are confident or very confident that their company is properly secured against a cyberattack, versus 29 percent for private companies. Similarly, just 42 percent of public directors are moderately confident, in contrast with 39 percent for private companies.


The Biggest Tech Trends of 2017

As the technology matures further over the course of the year we can expect prices to drop as more competitors enter the market. The technology as it stands currently has a prohibitively high pricing point, and increased competition in the sector should push prices down to a point that we see VR headsets in most households. VR is more than just a consumer phenomenon; there are strong business use cases for the technology as well. We can expect more and more business applications for VR to crop up over the next 12 months. One of the most interesting areas for expansion is retail – as retailers use VR to show how a watch might look on your wrist or how a new coffee table would look in your living room. There are so many possibilites with this technology that have yet to get the industry’s attention and investment that they deserve – this will all change in 2017.


Agility Robotics Introduces Cassie, a Dynamic and Talented Robot Delivery Ostrich

Today, Agility Robotics, a spin-off of Oregon State University, is officially announcing a shiny new bipedal robot named Cassie. Cassie is a dynamic walker, meaning that it walks much more like humans do than most of the carefully plodding bipedal robots we’re used to seeing. This makes it better at handling the kind of diverse and complex terrain that we walk over all the time without even thinking, a talent that’s going to be mandatory for robots that want to tackle the different environments and situations that they’ll need to master to be actually useful around people. In addition to search-and-rescue and disaster relief, Agility Robotics has one particular environment and situation in mind: They want Cassie to be scampering up your steps to deliver packages to your front door.


When Hackers Hack Hackers

While most cybercriminals tend to set their sights on siphoning valuable data from poorly protected enterprises, there's no limit to the kinds of targets they'll seek out. There's no honor among thieves, so it shouldn't be a surprise that with the right kind of motivation, malicious hackers will happily attack other black hat and grey hat hackers. Sometimes the attacks are purely mercenary: rivals know they can hit pay dirt very quickly if they find an easy way to tap into data stores of already vetted stolen identities or financial information. Similarly, certain kinds of cyber skirmishes are initiated to take competitors out. And then there are the attacks that are a little more personal: to show someone up, settle a score, or otherwise make a philosophical stand. Regardless of the motives, these kind of squabbles offer up a satisfying dose of schadenfreude for cybersecurity pros beleaguered by the bad guys.


Attorneys Predict A Demanding Year For IT Outsourcing Customers

Outsourcing customers will want to add flexibility to the IT service deals by seeking new termination rights, the right to switch locations, the right to insource, and other similar protections. However, Masur warned, providers are likely to push back insisting that these issues are customer — not provider — problems to solve. “To some degree these political changes may well accelerate the move to sourcing models offering cost savings not based on offshore labor arbitrage such as cloud services, robotic automation and utility offerings. “While these sourcing strategies may result in the elimination of American jobs,” Masur says, “they cannot be attacked as offshoring jobs to foreign countries.” The net result of the current political environment is hard to pinpoint.


Teaching smart gadgets privacy manners

So how should engineers approach building privacy controls into IoT devices? Use new ISACA privacy resources! I am grateful and proud to have been part of the two ISACA International Privacy Task Force groups, both led by Yves Le Roux, since 2013, and to have been the lead developer authoring the newly released ISACA Privacy Principles and Program Management Guide (PP&PMG), incorporating the recommendations and input of the International Task Force members, as well as a complementary privacy guide targeted for publication in mid-2017. The ISACA PP&PMG outlines the core privacy principles that organizations, as well as individuals, can use to help ensure privacy protections. These privacy principles can be used by engineers to build the important privacy and security controls into IoT devices right from the beginning of the initial design phase, and use them all the way through the entire product development and release lifecycle.



Quote for the day:


"A brand is no longer what we tell the consumer it is - it is what consumers tell each other it is." -- Scott Cook


July 25, 2016

More Than Half The World Is Still Offline

While more than four out of five people in developed countries use the internet, just over 40 percent of those in developing countries have access. In the ITU’s “least developed countries” -- places like Haiti, Yemen, Myanmar and Ethiopia -- just 15.2 percent of the people are online. ... Also, fewer women than men are on the internet, and that difference is getting worse. The worldwide difference between internet user penetration for males and females is 12.2 percent, up from 11.0 percent in 2013, the ITU says. It’s shrunk significantly in developed countries, from 5.8 percent to just 2.8 percent, but grown in poorer places. Cost makes it harder to get online in some countries. The ITU says entry-level internet access has become affordable in many developing countries since 2011 but remains unaffordable in most of the poorest countries.


Short-term programs, not four-year degrees, are the future of tech education

It takes more than just technical skills to succeed in a coding career. A big part of a career in the programming field is troubleshooting and responding to problems that arise day-to-day. In order to do this successfully, it is vital to be an inquisitive, intelligent learner who likes working through challenges. Additionally, while some may think of programming as solo work, it is quite often done in a team environment. Being able to communicate clearly and work together cannot be underestimated in these roles ... A three-month program like those offered at our schools offers a different type of learning environment. We are able to focus on the key coursework that will help students get in-demand jobs, and our student outcomes back this up.


Ransomware Predictions | Past, Present, Future

A criminal may not need to target an entire enterprise’s set of hosts for maximum return potential. Targeting a few critical assets and preventing restoration ahead of time may be all that is needed to extract a higher ransom amount from some organizations. Think of print servers sitting in a massive warehouse distribution operation. Many of these print servers are still running Windows XP – oftentimes because they are so critical to the operation that they literally cannot be replaced or upgraded. How much money would such an operation pay to get those servers back online? Answer: $1 less than the hundreds of thousands of dollars per day in operations they support. And if it’s a perishable food distribution operation, even more.


EY Report : Blockchain Technology to Reach Critical Mass in the next 3 to 5 Years

A considerable progress has already been made in the embedded health and digital rights management segments. There are already few platforms offering these services. The success of these platforms combined with further development of blockchain-based applications will pave the way for large-scale adoption. The real estate sector is also increasing exploring the use of digital currency technology for managing property records and also as a pooled investments platform where a large number of people can make small investments into projects. According to the EY report, the large scale implementation of blockchain technology will take at least 3 to 5 years. Those who are prepared to invest, experiment and adapt to the technology by that time are expected to benefit when the shift happens.


The world turned upside down: Conventional IT is rapidly becoming shadow IT

The answer is pretty thin gruel. One of IT's remaining tasks is to architect and manage the company’s networks. This is a strategic responsibility but one that’s largely taken for granted. Another task that still falls to IT is the management of the company’s data center. If the data center is used to host revenue-generating systems, this is also a strategic responsibility, but if it’s just housing internal systems then it’s not that big of a deal. A third responsibility that IT continues to handle at many companies is maintainence of internal email systems. This is a highly visible role, but one that is likely to wane in importance as most email systems migrate to the cloud.


7 Common Data Science Mistakes and How to Avoid Them

Some data scientists feel that, to have built a successful machine learning model, is having achieved the maximum level of success. Having built a right model is just half the battle won and it is necessary to ensure that the predictive power of the model is maintained. Many data scientists often forget or tend to ignore the fact that it is necessary to re-validating their models at set intervals. A common mistake that some data scientists often make – is thinking that the predictive model is just ideal since it fits the observational data. Predictive power of the built model can disappear instantaneously based on how often the modelled relationships keep changing. To avoid this, the best practice for any data scientist is to ensure that they score their data models with new data every hour, every day or every month based on how fast the relationships in the model change.


Mobile Payments: Risks Versus Opportunities

One noteworthy example of this phenomenon right now involves mobile payments. Specifically, we know that many technology professionals are extremely leery of mobile payments. ISACA’s 2015 Mobile Payment Security Study found only 23 percent of IT and security professionals believe mobile payments will keep information safe—which, let’s face it, is not exactly a vote of confidence.  It bears asking, though, how that compares to the alternative. Meaning, are there risks to mobile payment scenarios? Sure. Show me a technology without some risk and I’ll show you a technology that’s completely valueless. But even if there is risk, what is the opportunity cost? What do we miss out on by waiting for some future scenario that is even more locked down?


Adapting your board to the digital age

To serve as effective thought partners, boards must move beyond an arms-length relationship with digital issues (exhibit). Board members need better knowledge about the technology environment, its potential impact on different parts of the company and its value chain, and thus about how digital can undermine existing strategies and stimulate the need for new ones. They also need faster, more effective ways to engage the organization and operate as a governing body and, critically, new means of attracting digital talent. Indeed, some CEOs and board members we know argue that the far-reaching nature of today’s digital disruptions—which can necessitate long-term business-model changes with large, short-term costs—means boards must view themselves as the ultimate catalysts for digital transformation efforts.


Ransomware protection -- what you may be missing

As the saying goes, sometimes you can't see the forest for the trees. We are so used to seeing the top 10 prevention techniques, we sometimes miss the lesser discussed approaches. These are important, because the purveyors of ransomware read the same articles with the common approaches, and can use these as a road map to improve their techniques. One of my customers is a large healthcare institution, and one of my major focuses with them has been to take a deep look at approaches to ransomware prevention and recovery. In the process, I have found many things that organizations can do that are not often discussed in the trade press. Since we in the business world need all the help we can get at this point, these can be very important. Consider a few of these


The Technical Skills You Need to Have as a Software Developer

Many beginning programmers try to hedge their bets by learning several programming languages at once or before they try to take on their first job as a software developer. While I think that you should eventually learn more than one programming language, I would advise against doing it upfront because it will just lead to confusion, and it will divert your energies from many of the other technical skills you are going to need to learn. Instead, I’d advise you to go deep and focus on learning the ins and outs of a single programming language, so you can feel really confident in your ability to write code in that language. Remember how we talked about being as specific as possible when deciding what kind of software developer you were going to become?



Quote for the day:

"Leadership consists of nothing but taking responsibility for everything that goes wrong and giving your subordinates credit for everything that goes well." -- Dwight D. Eisenhower

May 30, 2016

The enterprise technologies to watch in 2016

More tactical, though still important to carefully consider throughout the phases of tech planning, pilots, growth, and maturity are technologies that are likely to add something significant to the way enterprises operate and which therefore have non-trivial impact to competitive advantage. The tactical technology additions that made the cut this year including contextual computing, workplace application integration, so-called low code platforms, smart agents/chatbots, adaptive cybersecurity, microservices architectures, ambient personalization, and fog computing. Looking farther out, some adjustments have also been made to the list of horizon technologies, or anticipated technical innovations of significance that most enterprises are probably not only not ready to experiment with yet, but are still in the process of being made viable in R&D departments and startup incubators.


The latest cybersecurity risk? Our homes and offices

Then there’s regulatory liability. Not only can hackers steal financial data, but they can steal other kinds of data as well—including consumer’s personal information. In the United States, for example, theft of medical information means the property owner could face a HIPAA (Health Insurance Portability and Accountability Act) violation if a medical office or health insurance tenant is compromised through the building system. “Laws are becoming much stricter with regards to how companies protect consumer information,” says Edward Wagoner, Chief Information Officer, JLL Americas. “In some countries, your name, email, phone number and physical address are all considered private information and any unauthorized release of this data is against the law.”


Surging Ahead: Fintech Startups In The Middle East

Sometimes, existing financial institutions are slow to adapt their sales channels and products to an online world, or their products are too complicated to be easily understood, which in the UK and US led to a growth in financial services comparison websites and what CB Insights has outlined in their The Unbundling of Banks infographic. But it also allows for new products and services and new ways for traditional financial institutions to reach customers. Feloosy is looking at companies like Acorn, who have made saving money faster and simpler for millennials, but with an Arab twist. With a Feloosy account, you’ll be able to put small amounts of money into an investment account towards a specific goal, whether a car, television, or education. This can be a very exciting prospect if they can tie it into PayFort’s payment gateway and souq.com’s merchants.


Fintech Report 2016: Asia Fintech Funding Hits new High of US$2.6b in First Quarter 2016

“Global VC investment into the technology sector may be experiencing a bit of a pause, however FinTech, propelled by some very large mega-rounds, has proven to be an exception to the rule,” said Warren Mead, Global Co-Leader of FinTech, KPMG International. “Investors are putting money into FinTech companies all over the world – from the traditional strongholds of China, the US and the UK – to up and coming FinTech hubs like Singapore, Australia and Ireland.” Anand Sanwal, CEO at CB Insights, added: “While FinTech startups continue to attract large investment both in the US and abroad, and investors gravitate to areas yet untouched by much tech innovation including insurance, recent events and public market performance suggest that growth-stage FinTech fundraising will be harder to come by moving forward in 2016.”


A digital crack in banking’s business model

Digital start-ups (fintechs)—as well as big nonbank technology companies in e-retailing, media, and other sectors—could exploit this mismatch in banking’s business model. Technological advances and shifts in consumer behavior offer attackers a chance to weaken the heavy gravitational pull that banks exert on their customers. Many of the challengers hope to disintermediate these relationships, slicing off the higher-ROE segments of banking’s value chain in origination and sales, leaving banks with the basics of asset and liability management. It’s important that most fintech players (whether start-ups or China’s e-messaging and Internet-services provider Tencent) don’t want to be banks and are not asking customers to transfer all their financial business at once. They are instead offering targeted (and more convenient) services.


Cloud Databases: What’s the Worry?

The three key issues most central to an organization are performance, security, and compliance in the database. Many companies want their databases to deliver these capabilities while remaining on-premise, thinking closer proximity translates into better results. However, it’s actually the cloud that offers the best opportunity for maximizing performance, security, and compliance. And while storing all data in a public cloud can make a majority of today’s companies uncomfortable, a well-designed hybrid cloud database not only assuages common fears and meets companies’ database needs, it also gives enterprises a new level of scalability. Here are a few additional facts architects can bring to the table when discussing the pros and cons of a hybrid cloud architecture:


Cloud and Big Data still haven't breached the enterprise core, survey shows

Overall, cloud is gaining traction for business services around the enterprise, such as those offered through Salesforce.com -- used by 40% of respondents. But adoption of cloud-based ERP/core enterprise applications (I use the two terms interchangeably) itself, or databases remains tepid. For ERP/core enterprise suites and enterprise databases, at least eight in 10 remain on-premises, and will remain that way. Security, potential loss of control, data integration and potential migration difficulties are all seen as obstacles to moving more core enterprise applications into the cloud. That's not to say people aren't interested in exploring moving particular applications or data sets to cloud. What is evolving are hybrid environments, in which key applications and data remain on-premises, but newer applications may be hosted somewhere else besides the corporate data center.


IoT Security – The Trojan Horse Is In The House

How ironic is this? You buy a smart device to help you, but it rather hacks you. Collects your data. More like a Trojan horse. You get it in the house because it might be good for you. In fact, once the gadget is in the house, things can get quite scary. You see, most of these IoT devices are going to collect your credit card details. Your date of birth, your name and even your address. A bigger problem is caused by the fact that most of these IoT devices are sending your data to the cloud, by using your home network. The data is not encrypted; hence, you are just a network misconfiguration away from exposing your data to the world, via your own WIFI network. Not what you would call IoT security, is it? But it does not stop here. In fact, it gets even worse. Some of the cloud services that these devices use, come with privacy concerns. More and more third party companies race to take advantage of the cloud platforms.


Transparency system means ‘sneaky algorithms’ can’t hide

“Consider a system that assists in hiring decisions for a moving company. Gender and the ability to lift heavy weights are inputs to the system. They are positively correlated with each other and with the hiring decisions. Yet transparency into whether the system uses the weight lifting ability or the gender in making its decisions (and to what degree) has substantive implications for determining if it is engaging in discrimination,” the researchers write in their report The researchers want to particularly focus on the areas of healthcare, predictive policing, education and defense as they feel these areas deserve the most attention in achieving algorithmic transparency. It remains to be seen whether this system will be adopted by companies but it is important and necessary – especially in an age where algorithms are subtly shaping our lives.


Design for Mobile: App UI Best Practices

The first step to defining what your app does is understanding which needs your app is solving. With the millions of apps already in existence, there’s a good chance that there’s already an app (or maybe hundreds of apps) that does something similar to what you’re envisioning. You need to consider how your app is different, and what will make it stand out from the crowd. Which specific scenarios are you targeting? Is there a specific audience you’re looking to attract? Understanding the mindset of the user is the next step in defining your app. You can think of this as one step below your app’s genre. What is the user’s situation and what are they trying to accomplish? Are you a productivity app? I need to complete a task. Entertainment? I’m bored and looking for something fun to do. Travel? I’m in San Francisco and looking for sushi.



Quote for the day:


"In programming simplicity and clarity are not a dispensable luxury, but a crucial matter that decides between success and failure." -- Dijkstra


December 22, 2015

Agile is not Enough: Revolution Over Transformation

Todd Charron has been a speaker at numerous conferences, is the lead mentor for Lean Startup Machine Toronto and is the founder of Follow Your Fear Day. Todd combines his background in Improv with over 15 years of experience in the software industry as a Developer, Manager, Agile Coach, and Lean Startup Mentor to help organizations and teams be bolder and more creative. ... Todd Charron argues that for success it is necessary to go beyond a change of processes and tools, to change how people in an organization see themselves and their role in it.


The road to hybrid cloud architecture is paved with mistakes

One error organizations used to make when implementing hybrid cloud architecture, said David Linthicum, a consultant at Cloud Technology Partners Inc. and author of numerous books on IT, started with OpenStack. IT organizations use the open source cloud software platform to build a private cloud, which offers advantages similar to public cloud but uses in-house architecture. It's a perfectly reasonable endeavor, except many organizations didn't fully understand what they're getting into. "It was too much of an engineering challenge for them to take on, and they ended up going over budget or just abandoning it quickly," Linthicum said. The problem for many was that they believed the hype on private cloud as a bulletproof and easy-to-implement alternative to public cloud, Linthicum said, citing 2013 as the banner year for vendor bunk.


Year-end career checkup, Part 1: If you listen, they will call

We've all seen plenty of comedy -- or tragedy -- result when two people who don't speak the same language attempt to converse. Even when they do, misinterpretations and misperceptions abound, and our workplaces prove it. Job interviews and talks with recruiters are even more susceptible to these roadblocks, since they occur between people who probably don't know each other and don't have similar pasts (professional or personal), and when one party (you) is in the especially tense situation of seeking new employment. A review of best practices in recruiting and interviewing reveals that listening, defined as a means to this end, has finally earned a spot in the curriculum on how to ace this critical skill. Start by being careful. Instruction on listening typically centers on the ability to reflect feeling or paraphrase feedback.


The web is 25. What will it be like when it's 50?

Thanks to broadband, web browsers, and the cloud, we now do everything over the Internet. With Chromebooks, Google has shown us that we don't need local programs at all. It's not just Google, a company born of the Web. Microsoft, which made its billions from the standalone PC, is now moving its fortunes to cloud-based applications such as Office 365. Today, our friends and office mates are scattered around the globe, but they're only a keystroke away on social networks, VoIP, or videoconferencing. Unless you're working at Yahoo, you can pretty much work anywhere in the world. Thanks to the rise of smartphones and tablets, we're no longer even tied to desktops or laptops. So long as you have power and Wi-Fi, there's nowhere you can't work or play. And, it all goes back to the Web.


Why It's Time To Say Goodbye To IT

Of course, something needs to take its place. But instead of the customer-hostile, Mordac-the-Preventer-of-IT-Services, consider the "us means all of us, not just IT" model of digital services. Digital services will necessarily be a huge change. We'll need our organization's best technologists. We'll need great communicators, awesome project managers, fantastic marketing pros, skilled negotiators, and the cream of our data scientists. Sure, we'll need security and infrastructure folks, but a lot fewer of them (read: the collaborative, friendly ones), because we'll standardize and be using lots of pay-as-you-go cloud services for maximum flexibility. We can't have control freaks. No sociopaths are allowed who think that technology is only for technologists.


World Quality Report 2015-2016

The speed of digital transformation and short life-cycles of device and services is increasing the importance and pressure on quality assurance testing. Additional conclusions highlights that a seamless customer experience is a key driver for QA testing, the shorter lifecycles demand greater agility and new roles are being created to meet testing demand. ... Key recommendations from this year’s report: Refocus QA and Testing on customer experience and business assurance; Transform the traditional Test Center of Excellence (TCOE) using agile and DevOps practices; Make continuous and automated security testing a key strategy; Prioritize testing with predictive analytics and continuous feedback; and Expand testing teams’ skills beyond manual and test automation.


The hidden pitfalls of Internet of Things development

One of the first problems confronting any IoT developer is the industry's distinct lack of standards. In a report, McKinsey & Co. notes that "Interoperability between IoT systems is critical," but goes on to lament the mishmash of conflicting "standards" that plague IoT's market potential. As I've suggested, though vendors dominate the more than 400 competing standards, the battle for developer hearts is more likely going to be won by de facto open source standards. Even so, the problems with IoT development don't end there. More unfortunate still, IoT development can appear deceptively simple, as Cohen stresses:


International data centers face Safe Harbor loss

Safe Harbor's failure will have a minimal effect at the high level. The groups responsible for dealing with organizations that do not follow data security and management procedures are the same ones that can't reach agreement on a new Safe Harbor. Organizations compliant to the requirements of the old Safe Harbor are unlikely to be taken to court, as the countries that drew up the EU Directive 95/46/EC on the protection of personal data agreed that Safe Harbor was compatible with the directive. If an international data protection trial does arise, pointing out that your organization is compliant with current laws in place should be a clincher.


On Big Data Analytics. Interview with Shilpa Lawande

Before we talk about technical challenges, I would like to point out the difference between two classes of analytic workloads that often get grouped under “streaming” or “real-time analytics”. The first and perhaps more challenging workload deals with analytics at large scale on stored data but where new data may be coming in very fast, in micro-batches. In this workload, challenges are twofold – the first challenge is about reducing the latency between ingest and analysis, in other words, ensuring that data can be made available for analysis soon after it arrives, and the second challenge is about offering rich, fast analytics on the entire data set, not just the latest batch.


Can Collaborative Security Work?

“The biggest and most universal problem [with information sharing] is that trust tends to happen between individuals, and not between organizations,” says Wendy Nather, R-CISC research director. “When we talk to people, we find that they already have information sharing going on – it’s just with individuals that they trust. Getting them to shift that trust to an organizational relationship and keeping that going when the original person moves on (which happens a lot in security) is the biggest challenge.” R-CISC already has about 50 corporate members, and some of them come from outside the retail industry, Nather says. Oil and gas companies have joined the retail group, for instance, because most gas stations also operate convenience stores.



Quote for the day:


"A culture of discipline is not a principle of business; it is a principle of greatness." -- Jim Collins


July 31, 2015

Why Data-Driven Cultures Outperform Rivals

Proactive organizations take steps to address unstructured data growth before it escalates. The sheer volume of unmanaged unstructured data can become extremely costly in terms of storage. Additionally, data that is not properly managed quickly turns into a liability if information cannot be located in the event of an e-Discovery request for legal matter. To add to the complexity, customer expectations have changed as a byproduct of new technology advancements and the emergence of mobile, BYOD and the commercialization of IT resulting in additional data security and privacy concerns. These changing customer expectations around data and how organizations use it also lead to a further secondary use for large repositories of unstructured data;


The Ultimate Beginner’s Guide to Data Quality and Business Intelligence

Business processes should also be established to ensure data manually entered into systems is of the highest quality possible. As we learned previously in our example of the pregnant men, many organizations experience data errors when information is manually entered, at a rate of 2% and 8%. Even one wrong number entered incorrectly can cause a payment to fail, a wrong part number to be shipped, or apparently a man to become pregnant. Data validation controls can be integrated into on-line forms, using rules to check the validity of data sets. For example, an on-line website form may require a visitor to enter data in specified formats. Or an IRS form may utilize controls to check that positive numbers are being entered into fields.


Hacker steals Bitdefender customer log-in credentials, attempts blackmail

The hacker, who uses the online alias DetoxRansome, first bragged about the breach on Twitter Saturday and later messaged Bitdefender threatening to release the company’s “customer base” unless he was paid US$15,000. To prove his point, the next day he published the email addresses and passwords for two Bitdefender customer accounts and one for an account operated by the company itself. Travis Doering and Dan McPeake claimed in a blog post that they contacted the hacker, who offered to sell the data to them. The hacker provided a list of user names and matching passwords for over 250 Bitdefender accounts, some of which were confirmed to be active, the two wrote Wednesday.


Disrupting beliefs: A new approach to business-model innovation

Executives can begin by systematically examining each core element of their business model, which typically comprises customer relationships, key activities, strategic resources, and the economic model’s cost structures and revenue streams. Within each of these elements, various business-model innovations are possible. Having analyzed hundreds of core elements across a wide range of industries and geographies, we have found that a reframe seems to emerge for each one, regardless of industry or location. Moreover, these themes have one common denominator: the digitization of business, which upends customer interactions, business activities, the deployment of resources, and economic models.


Critical BIND denial-of-service flaw could disrupt large portions of the Internet

There is no configuration workaround to protect against the BIND vulnerability or a way to prevent its exploitation through access control lists. Patching is the only option, the ISC said in an advisory. “Screening the offending packets with firewalls is likely to be difficult or impossible unless those devices understand DNS at a protocol level and may be problematic even then,” said Michael McNally, an ISC engineer and the incident manager for this vulnerability, in a blog post. The bug is difficult to defend against without installing the patch and it’s likely that attack code will appear soon because it’s not hard to reverse-engineer the patch and figure out how to exploit the flaw, according to McNally.


Open Container Initiative Nears Container-Spec Goal

For a Docker container to be able to do the things that its user wishes it to do (that is, intersect with a given host and connect the application that it contains to the host server) it needs to be able to rely on a sandboxing environment that allows some of the details of how the application runs to match up with the way the host runs. The main requirement to getting the two together is relatively simple: The host server needs to run the same Linux kernel as required by the application code in the container. Since the Linux kernel is a highly defined and labeled set of code, matching up the two is usually a given. With the initiative's specified runC runtime, a Docker container and a CoreOS Rocket container will be able to run in the same environment in the same way, without glitches, if both continue to adhere to the OCI runtime standard.


What Can The United Airlines Hack Tell Us About IT Security?

“Perhaps United Airlines should reconsider its choice of technologies and vendors that provide controls for privileged access to their systems and databases. The US Government could also serve a useful purpose in providing appropriate consequences to the attackers and their assets. There seems to be little incentive for this attacker to stop these attacks.” “As investigators identify fragments of evidence from these intrusions, they are not only finding needles in the haystack, but also the threads connecting these needles across some of the biggest breaches we have seen. Through this discovery they see these threads weave together to form a rather disturbing tapestry revealing patterns of a much more strategic and sophisticated attack than we could have imagined.


WebSocket: Bringing Desktop Agility to Web Application

The first reason for lack of WebSocket adoption has been a limited support in application servers and browsers. However with new generation of application servers and browsers, this issue is significantly addressed. The second, and the more important reason, is that opening the full potential of WebSocket requires significant web application redesign. The redesign involves going from a basic primitive of request – response to a more sophisticated primitive of bi-directional messaging. Application redesign is typically a costly process and vendors do not see clear benefits of going that route.


Why Google’s enterprise pitch is a confusing mess

Let’s try to follow Google’s logic here, but be patient because first you need to get through a series of familiar Google product names with “for Work” simply added to them. Confusion sets in almost immediately on the Google for Work homepage where solutions such as Google Apps for Work, Google Cloud Platform, Chrome for Work, Google Maps for Work and Google Search for Work are all listed prominently. Each of those services is sold and marketed to business customers separately, and Google Apps for Work is the only one with public-facing pricing. Regardless of what Google calls it, Google for Work appears to be a basic platform the company uses to upsell a host of services to prospective clients.


Cisco Mid-Year Security Report: Bad Guys Getting Badder

The main problem with enterprise and personal data security now is that users have a plethora of security products that don't interact well and that leave holes open for hackers to walk through. "The users are left with what we call this 'sprawl of security,' meaning devices that don't communicate well and don't share intelligence," Williams said. "These allow the bad guys blind spots to hide in. Does anybody have an IPS (intrusion prevention system) or anti-malware solution that can talk to their firewall? Until we have an integrated threat defense, those problems are going to allow adversaries easier access to networks."



Quote for the day:

“Leaders always choose the harder right rather than the easier wrong.” -- Orrin Woodward

April 15, 2015

GoodData analytics developers on what they look for in a big data platform
Far and away, the most exciting is about real-time personalized analytics. This allows GoodData to show a new kind of BI in the cloud. ... It's for telling you about what’s going on in your electric smart meter, that FitBit that you're wearing on your wrist, or even your cell-phone plan or personal finances. A few years ago, Vertica was blazing fast, telling you what a million people are doing right now and looking for patterns in the data, but it wasn’t as fast in telling you about my data. So we've changed that. With this new feature, Live Aggregate Projections, you can actually get blazing fast analytics on discrete data. That discrete data is data about one individual or one device. It could be that a cell phone company wants to do analytics on one particular cell phone tower or one meter.


Security risk potential linked to young, mobile users
The public sector was the least likely to report lost or stolen data, although that does not mean the public sector is not losing data. Attitudes were also lax among people working in high-tech industries, who were more likely than average to give up their device password if asked for it by IT, and in education, where teachers revealed a tendency to write their passwords down on a piece of paper. ... “Corporations have thought about security historically as very much a perimeter solution and put a big firewall at the gateway,” he said. “We’ve been eroding that for a good 10 years as information becomes more fluid, but we have not yet moved away from the idea that security sits only at the perimeter of the network.”


4 data wrangling tasks in R for advanced beginners
With great power comes not only great responsibility, but often great complexity -- and that sure can be the case with R. The open-source R Project for Statistical Computing offers immense capabilities to investigate, manipulate and analyze data. But because of its sometimes complicated syntax, beginners may find it challenging to improve their skills after learning some basics. If you're not even at the stage where you feel comfortable doing rudimentary tasks in R, we recommend you head right over to Computerworld's Beginner's Guide to R. But if you've got some basics down and want to take another step in your R skills development -- or just want to see how to do one of these four tasks in R -- please read on.


Report: Internet of Evil Things is your next nightmare
"Virtually every organization has some sort of rogue wireless access point or printer," Paget said. Worst of all, many companies don't know what devices are on their networks because employees can easily go out and buy them and install them themselves -- or bring them from home as part of corporate Bring Your Own Device programs. Employee-owned devices are a particular concern, Paget added, because there are limits to what a company can do to secure them. Overall, he said, when scanning corporate systems, Pwnie discovered that companies typically had two to three times more devices than they thought they did.


Intel & Ingenico Announce Secure Payment Agreement for the Internet of Things
“This is a great example of how innovation can simplify the purchasing experience and further enhance the merchant-consumer relationship. Bringing secure payment into connected devices will root our payment acceptance expertise in the Internet of Things.” “The shift in liability this October will be a major milestone in the United States for banks and credit card companies, but especially for retailers,” said Doug Davis, senior vice president and general manager, Internet of Things Group, Intel. “Intel and Ingenico Group are working to bridge the retail experience and security gap while also making sure devices are easy to deploy and manage so we don’t create new burdens for the merchants.”


Navigating An Internet of Things Legal Minefield
This article explores how big data and the rights of data subjects can coexist. With the help of Amor Esteban, an attorney who helps companies navigate these murky and often dangerous waters, we explore the balance that may be struck between a company’s legitimate business interests and respect for the individual’s right to data privacy. ... He currently chairs that group and is editor in chief of its The Sedona Conference International Principles on Discovery, Disclosure & Data Protection: Best Practices, Recommendations & Principles for Addressing the Preservation & Discovery of Protected Data in U.S. Litigation. Together we will delve a little deeper into the development of IoT, the role of analytics in a complex IoT environment and what companies should be considering before embarking on a project.


A 21st Century Way of Life: From 20th Century Work-Life Balance to Lifeworking
The reason that organizations have been slow to truly rethink the concept of work-life is due more to cultural inertia than any other factor. The industrial-age assumptions about technology, organization and processes have become deeply ingrained within society, and have been reinforced through general and business education and the media. In most organizations these deeply entrenched assumptions have become orthodoxy, and this is why the question of work-life balance remains. Some enlightened organizations have made progress in some areas, especially with regard to virtual working and flexible working time, but in most cases these initiatives only patch the much deeper underlying problems


Nearly 1 million new malware threats released every day
Directed attacks and data breaches also grew, according to Symantec. Five out of six large companies were targeted by cybercriminals, a 40% rise on the previous year. The mining industry was the world's most targeted sector. Samir Kapuria, a Symantec executive, recalled one case in which hackers snuck into an energy company's computer network and stole a draft report. The report detailed the secret discovery of a potentially lucrative energy drilling spot. Hackers were trying to sell the information on a black market website to stock traders, Kapuria said. But they were foiled when the energy company (operating under a pseudonym) told prospective black market buyers that the information was false. Kapuria declined to mention the name of the company.


Data breaches may cost less than the security to prevent them
In a March 2015 column on The Conversation, Dean provided a hard to disagree with defense of why things security-wise "ain't gonna change" soon. "When we examine the evidence, though, the actual expenses from the recent breaches at Sony, Target and Home Depot amount to less than 1% of each company's annual revenues," wrote Dean. "After reimbursement from insurance and minus tax deductions, the losses are even less." Dean then administered the knockout punch: "This indicates that the financial incentives for companies to invest in greater information security are low and suggests that government intervention might be needed."


The Hybrid IT Enterprise Demands an End to Network Guessing Games
As visibility, control, and optimization are brought to hybrid networks it will become increasingly important to construct an analytics-driven infrastructure that can take action when problems occur anywhere in the network. We’re already seeing more IT organizations instrumenting network architectures with predictive analytics to create self-correcting, self-generating networks that respond to business needs and intents. Well-instrumented infrastructures provide the foundation for introducing automation. Such automation helps infrastructures react to changing demands without requiring manual intervention. Visibility tools can help to discover and map dependencies in application workloads, a necessary element for true workload portability.



Quote for the day:

"Courage is to never let your actions be influenced by your fears." -- Arthur Koestler

January 24, 2015

Security principles of bitcoin
Bitcoin is dramatically different. A bitcoin transaction authorizes only a specific value to a specific recipient and cannot be forged or modified. It does not reveal any private information, such as the identities of the parties, and cannot be used to authorize additional payments. Therefore, a bitcoin payment network does not need to be encrypted or protected from eavesdropping. In fact, you can broadcast bitcoin transactions over an open public channel, such as unsecured WiFi or Bluetooth, with no loss of security.


Publisher/Subscriber pattern with Event/Delegate and EventAggregator
Publisher/Subscriber pattern is one of the variation of the Observer designer pattern introduced by GOF in software devlopment. In Publisher/Subscriber pattern publisher(entiry responsible for publishing message) publish message and there are one or more Subscriber(entity who subsribe(i.e. intested in message) to perticular message type) who capture published message. Below image desribe the senario of publisher and subscriber pattern where Publisher publisher two type of message (MessageA and MessageB) and Subscribers of the message receive the message in which they subscribed


Shout Offers A New Take On Location-Based Social Networking
“We’re not anonymous – and we don’t want to be – because I think that ultimately hurts the value of the content that can be shared over the course of an app’s lifecycle,” he says. While he believes that the trend toward anonymous social networking, popularized by apps like Yik Yak, Secret and Whisper, is more than a flash-in-the-pan, he also thinks it dictates the kind of community that results. “I definitely think it encourages a certain kind of information, and you have to make the decision: is that the kind of information you want to be shared and you want your users to share?” he says.


Gartner: APAC Public Cloud Spending to Reach $7.4 Billion in 2015
Gartner says many countries in the mature Asia Pacific including Japan region have solid reliable telecommunications infrastructure and relatively advanced technology usage profiles. Despite challenges in the global economy, Gartner expects consistent and stable growth to continue through to 2018. Increased intra-region integration in APJ across services and industries will drive public cloud usage as countries in this region break down borders through trade bloc agreements such as the ASEAN Economic Integration 2015 and the Trans Pacific Partnerships, which will drive more mobility, big data sharing and analytics and public cloud infrastructure and applications to support these initiatives.


Can I trust my data in the cloud?
IBM Cloud gathered some of the top #cloudminds in the industry for an informative discussion about hybrid cloud. In this video, they discuss trust and security in cloud computing.  We'd like to thank our fantastic panelists: Sarah Cooper, VP Business Development, M2Mi; Andi Gutmans, CEO & Co-founder, Zend; Duncan Johnston-Watt, CEO & Founder, Cloudsoft Corporation; Mark Wyllie, CEO, Flagship Solutions; Mike Dorosh, Program Manager, Cloud Technical Partnerships, IBM.


How to avoid "Hybrid Enterprise" tension headaches
For hybrid enterprises, the promise of savings mount from a less expensive physical footprint as well as more flexibility to get data and apps where they need to be and quicker—especially when you have the right application performance platform in place. If not, you'll be chasing blind spots in your application delivery chain that come from only using point solutions from the past—that is, one tool for each segment from a vendor that specializes in one thing and no integration with the overall complete picture.


Conference calls a waste of time?
By 1915, the American Telephone and Telegraph Co. network spanned the continent with a single copper circuit 6,800 miles (11,000 kilometers) long that could carry exactly one call at a time. There were already 8.6 million phones served by AT&T, but hearing someone’s voice from the other side of the continent was astounding, like being able to go to the moon, said Anthea Hartig, executive director of the California Historical Society. It was a fitting event leading up to the exposition, which celebrated the completion of the Panama Canal and the latest technological and cultural achievements of the day.


Google’s Scientific Approach to Work-Life Balance
The fact that such a large percentage of Google’s employees wish they could separate from work but aren’t able to is troubling, but also speaks to the potential for this kind of research. The existence of this group suggests that it is not enough to wish yourself into being a Segmentor. But by identifying where employees fall on this spectrum, we hope that Google can design environments that make it easier for employees to disconnect. ... Googlers reported blissful, stressless evenings. Similarly, nudging Segmentors to ignore off-hour emails and use all their vacation days might improve well-being over time. The long-term nature of these questions suggests that the real value of gDNA will take years to realize.


How we really use our camera phones
The slight male dominance in video recording is also interesting, as it could point to a perception problem for video that may have to do with the way it’s currently being presented in capturing and editing apps. Or maybe it’s just long-ingrained collective gender stereotypes. Just think back to your family parties back in the 1990s or even the ’80s, long before everyone recorded everything with smart phones. That cousin dramatically crawling on the floor with a camcorder in one hand to get the best shot? Likely a guy. And just for the record: Male Android users take the least amount of photos, with an average of just 90 photos per month.


Actionless Frameworks
Simply put, actionless frameworks are extremely prepared for future changes and can make your application behave better/look better by a new configuration. If you are using it to edit records, then if in the future you create a better editor, you can simply replace the editor registration and the new (and I imagine better) editor will be used in all places. There is no need to search all the calls to the old editor to replace it by the new one. If you are using it to convert data and now you have a faster algorithm, simply register the faster algorithm and benefit from better performance.



Quote for the day:

"Trust is the lubrication that makes it possible for organizations to work." -- Warren G. Bennis

January 15, 2015

2015 Top Five Data Center Trends
As the conversations continue to circulate between IT companies and Datacenter Providers, it appears we have some differing opinions on what is to emerge in the New Year. Although there are many predictions on what will increase and what will decrease in popularity, some areas of the industry have brought about an increased chatter among the experts. In this article, we walk though the top five up-and-coming themes predicted to take place in 2015. They include trends in cloud, virtualization, internet of things (IoT), and the size of the industry.


Mobile users encountered malware 75% more often in 2014 compared to 2013
"We've seen a significant increase in both the frequency and sophistication of attacks that would truly represent a concern for the enterprise, like exploits that would let the bad guys get access to corporate networks," he said. "We also saw a greater prevalence and sophistication of applications that enable rooting or jail breaking the device." For enterprises in particular, the top security threats associated with mobile devices are loss of sensitive data and illicit access to corporate networks. "The threats that we found targeted both of these issues," Cockerill said.


Bruns-Pak: Datacenters vs. collocation vs. cloud computing
Owning and operating one's own data center might actually be the lowest cost option if the overall cost is considered. This approach, however, is not without its challenges. This approach requires the largest up-front investment as well as the need for the largest staff. Using this approach makes it possible, however, for an enterprise to take advantage of the reduced costs produced by purchasing systems, storage, software, power and networking in bulk. It also offers the opportunity of potential tax advantages of owning real estate, buildings and the like.


Intel-backed OIC advances in fast-moving IoT standards race
Though it seems too soon to be pushing out specifications and code, given that the industry isn’t expected to settle on standards until next year or later, this may be the best time to capture the hearts and minds of product developers. The International CES show last week in Las Vegas was rife with emerging (and some half-baked) IoT devices, especially for smart homes. Those that make it to market will eventually need to lock into some platform for working with other connected products. The OIC is developing its own standard for IoT connectivity but turned to the Linux Foundation to organize the project that is developing IoTivity. That project is open to anyone who wants to participate, whether they belong to OIC or not.


Nine CIO tips for surviving and thriving in 2015
In part one of Harvey's 2015 predictions column for CIOs, he singles out three trends that will continue to have big ramifications for the CIO role and enterprise IT next year. Here, he offers readers nine CIO tips for surviving and thriving in 2015, plus a cautionary compilation of quotes illustrating the danger of making technology predictions:


How to make applications resilient on AWS
Amazon provides different services to decouple systems and make them more reliable. One of the first services was Simple Queuing Services (SQS). Amazon describes SQS as a distributed queue system that enables service applications to quickly and reliably queue messages that one component in the application generates to be consumed by another component. Later, other services such as Simple Notification Service (SNS) or Simple Workflow Service (SWF) followed. One of the main characteristics of the cloud is elasticity, which means not making any assumptions about the health, availability or fixed location of other components.


Keeping Big Data Secure: Should You Consider Data Masking?
As Girard points out, one of the problems associated with traditional data masking is that, “every request by users for new or refreshed data sets must go through the manual masking process each time.” This, he explains, “is a cumbersome and time-consuming process that promotes ‘cutting corners’– skipping the process altogether and using old, previously masked data sets or delivering teams unmasked versions.” As a result, new agile data masking solutions have been developed to meet the new demands associated with protecting larger volumes of information.


5 Agile Ways to Achieve your New Year’s Resolutions
Perhaps we can use recent advances in software project management to get that success rate higher. Traditional software development efforts last one to two years and are managed by planning everything up front with what are called “waterfall” management practices. According to the Standish Group, the failure rate for waterfall projects from 2002 to 2011 was 29%. The costs for these failures can be measured in billions of dollars wasted. Agile management practices, which introduce frequent inspection and adaptation, have succeeded in reducing project failures to about 9%.


New report: DHS is a mess of cybersecurity incompetence
The report cautions about DHS's limited strategies, noting: "While patch management and cyber hygiene are clearly important, they are only basic security precautions, and are unlikely to stop a determined adversary, such as a nation state seeking to penetrate federal networks to steal sensitive information." The section on cybersecurity is titled: "The Department of Homeland Security is struggling to execute its responsibilities for cybersecurity, and its strategy and programs are unlikely to protect us from the adversaries that pose the greatest cybersecurity threat." One example in that section shows DHS departments effectively lying about performing critical and well-known security updates -- updates that DHS warned the public about via US-CERT.


New service wants to rent out your hard drive's extra space
The service works by first uploading a file-sharing application onto a user’s computer then breaking file data into small 8MB or 32MB blocks, or “shards,” as Storj calls them. Each block of data is encrypted with a unique hash, and then the pieces are distributed throughout the cloud network, according to a white paper the company published on its peer-to-peer storage technology. The file blocks get distributed throughout the network on nodes called “DriveShares” located all over the world. Storj uses hash chains or Merkle Trees, as they are sometimes called, to verify the contents of a file after it has been broken up into blocks or “leaves” off of a master or root hash.



Quote for the day:

"A budget tells us what we can't afford, but it doesn't keep us from buying it." -- William Feather