April 16, 2015

5 Factors to Retrospect after Every Sprint while Developing a Product
The essence of agile is to thrive for continuous improvement through empirical process control. True agile teams find ways to improve through experimentation, finding sustainability, and delivering business value earlier. It is a never-ending journey, and a sprint retrospective emerges as an opportunity to further accelerate this improvement process. It is a great time to allocate and analyse extraneous factors in detail, which otherwise may distract the team’s focus. In this post, we highlight 5 factors which every agile team should retrospect after each sprint. Let’s have a look.


Combining SIAM and DevOps for Digital Reimagination
Some of the most important aspects of the SIAM role are the coordination of people, processes, technology and data, and the governance across multiple suppliers, to ensure effective and efficient operations of the end-to-end service delivery to the business user. DevOps and SIAM converge in addressing current business and IT challenges and targeting people and attitude as primary drivers of performance and value. Whilst DevOps addresses the cons of functional specialisation and the spread of responsibilities across different IT teams, SIAM deals with the additional challenge of spreading services across multiple vendors.


Free ebook: Microsoft Azure Essentials: Azure Machine Learning
This ebook will present an overview of modern data science theory and principles, the associated workflow, and then cover some of the more common machine learning algorithms in use today. We will build a variety of predictive analytics models using real world data, evaluate several different machine learning algorithms and modeling strategies, and then deploy the finished models as machine learning web service on Azure within a matter of minutes. The book will also expand on a working Azure Machine Learning predictive model example to explore the types of client and server applications you can create to consume Azure Machine Learning web services.


Lack of skilled infosec pros creates high-risk environments
A portrait of the ideal cybersecurity professional emerges from this list of shortfalls: the top three attributes are a formal education, practical experience and certifications. The study reveals that organizations are experiencing attacks that are largely deliberate, and they lack confidence in the ability of their staff. The top four threat actors exploiting organizations in 2014 were cybercriminals (46 percent), non-malicious insiders (41 percent), hackers (40 percent) and malicious insiders (29 percent). 64 percent are very concerned or concerned about the Internet of Things, and less than half feel their security teams are able to detect and respond to complex incidents.


How The Internet of Things Is a Transformational Opportunity
Internet of Things looks like a massive opportunity over the years ahead, there are already many practical and valuable applications, and everything seems to be indicating that we are just in the first stages of what could be a game-changing series of innovations. However, opportunity attracts competition, and IBM will need to compete against several big players trying to get a piece of the pie. In January 2014 Google invested $3.2 billion in the acquisition of Nest Labs, a leading player in smart thermostats and smoke alarms. This means Google invested more in a single purchase than IBM over the coming four years in its whole Internet of Things initiative.


Will containers kill the virtual machine?
Containers are not a new technology: the earliest iterations of containers have been around in open source Linux code for decades. But in the past year they've captured the hearts and minds of many developers for building and running applications. Containers isolate specific code, applications or processes. Doing so gives whatever is inside the container a neat envelope for managing it, including moving it across various hosts. Whereas you can think of a virtual machine slicing up a server into multiple operating systems, containers run atop the OS so unlike a VM, they don't require an OS to boot up when they're created. In essence they can virtualize an operating system to provide a more lightweight package of an application compared to a VM.


SSL/TLS/HTTPS: Keeping the public uninformed
Perhaps the most important thing to understand about the SSL/TLS/HTTPS system that secures websites is that you are not supposed to understand it. ... If SSL/TLS/HTTPS was reallydesigned for security, this would have been done long ago. But secure websites are security theater. They seem to be secure, techies say they are secure (at least in public), but the system is flawed. That it took so long to expose Superfish was because the system is rigged against normal folks. Jonathan Zdziarski recently made another simple suggestion that, like mine, will never see the light of day. He points out that HTTPS interception, such as Superfish, can be detected if the web browser notices that the last X "secure" websites were all vouched for by the same Certificate Authority.


SEC’s Stein touches all the bases in discussion on data, technology
With a goal of collecting an estimated 58 million records per day, there is little doubt that CAT will require a tremendous amount of industry cooperation. However, Stein pointed out that a proposal that might seem like a regulatory reform wrought with headaches for the industry might eventually simplify the work of compliance professionals. “Only though CAT can we develop regulations that are driven by the facts,” Stein explained. Stein touched on how the Flash Crash and the lengthy investigation that followed highlighted the need for CAT and lamented the slow march to implementation, which remains years away. “We need the CAT as soon as possible,” Stein said.


Infosec taking the strain as threats evolve and skills gap widens
Davis added it may also indicate that information security professionals in Germany have a higher level of top executive support than in the UK and elsewhere in Europe. Despite budgets allowing for more personnel, 62% of respondents reported that their organisations have too few information security professionals – up from 56% in 2013. Frost & Sullivan estimates that the global workforce shortage will widen to 1.5 million in five years, while the variety and sophistication of cyber threats are expected to continue. The situation is exacerbated by the broadening footprint of systems and devices requiring security oversight. Signs of strain, including configuration mistakes and oversights, were identified as a significant concern, and recovery time following system or data compromises was found to be getting steadily longer.


Why CIOs can’t sell enterprise collaboration tools
One of the biggest challenges is determining how to implement enterprise collaboration in cross-functional manner, says John Abel, senior vice president of IT at Hitachi Data Systems, “Teams are pretty good at communicating within their own group but when it comes to integrating across departments silos tend to happen, which ultimately becomes problematic when each team needs to align on certain campaigns or key topics,” he says. NetScout’s CIO and Senior Vice President of Services Ken Boyd says the landscape of collaboration tools available today makes it difficult to pick the best ones for a specific workforce. “Locating a collaboration tools provider that can offer the right balance for the needs of our enterprise users can be a significant challenge,” he says.



Quote for the day:

“...A man can only stumble for so long before he either falls or stands up straight.” -- Brandon Sanderson

April 15, 2015

GoodData analytics developers on what they look for in a big data platform
Far and away, the most exciting is about real-time personalized analytics. This allows GoodData to show a new kind of BI in the cloud. ... It's for telling you about what’s going on in your electric smart meter, that FitBit that you're wearing on your wrist, or even your cell-phone plan or personal finances. A few years ago, Vertica was blazing fast, telling you what a million people are doing right now and looking for patterns in the data, but it wasn’t as fast in telling you about my data. So we've changed that. With this new feature, Live Aggregate Projections, you can actually get blazing fast analytics on discrete data. That discrete data is data about one individual or one device. It could be that a cell phone company wants to do analytics on one particular cell phone tower or one meter.


Security risk potential linked to young, mobile users
The public sector was the least likely to report lost or stolen data, although that does not mean the public sector is not losing data. Attitudes were also lax among people working in high-tech industries, who were more likely than average to give up their device password if asked for it by IT, and in education, where teachers revealed a tendency to write their passwords down on a piece of paper. ... “Corporations have thought about security historically as very much a perimeter solution and put a big firewall at the gateway,” he said. “We’ve been eroding that for a good 10 years as information becomes more fluid, but we have not yet moved away from the idea that security sits only at the perimeter of the network.”


4 data wrangling tasks in R for advanced beginners
With great power comes not only great responsibility, but often great complexity -- and that sure can be the case with R. The open-source R Project for Statistical Computing offers immense capabilities to investigate, manipulate and analyze data. But because of its sometimes complicated syntax, beginners may find it challenging to improve their skills after learning some basics. If you're not even at the stage where you feel comfortable doing rudimentary tasks in R, we recommend you head right over to Computerworld's Beginner's Guide to R. But if you've got some basics down and want to take another step in your R skills development -- or just want to see how to do one of these four tasks in R -- please read on.


Report: Internet of Evil Things is your next nightmare
"Virtually every organization has some sort of rogue wireless access point or printer," Paget said. Worst of all, many companies don't know what devices are on their networks because employees can easily go out and buy them and install them themselves -- or bring them from home as part of corporate Bring Your Own Device programs. Employee-owned devices are a particular concern, Paget added, because there are limits to what a company can do to secure them. Overall, he said, when scanning corporate systems, Pwnie discovered that companies typically had two to three times more devices than they thought they did.


Intel & Ingenico Announce Secure Payment Agreement for the Internet of Things
“This is a great example of how innovation can simplify the purchasing experience and further enhance the merchant-consumer relationship. Bringing secure payment into connected devices will root our payment acceptance expertise in the Internet of Things.” “The shift in liability this October will be a major milestone in the United States for banks and credit card companies, but especially for retailers,” said Doug Davis, senior vice president and general manager, Internet of Things Group, Intel. “Intel and Ingenico Group are working to bridge the retail experience and security gap while also making sure devices are easy to deploy and manage so we don’t create new burdens for the merchants.”


Navigating An Internet of Things Legal Minefield
This article explores how big data and the rights of data subjects can coexist. With the help of Amor Esteban, an attorney who helps companies navigate these murky and often dangerous waters, we explore the balance that may be struck between a company’s legitimate business interests and respect for the individual’s right to data privacy. ... He currently chairs that group and is editor in chief of its The Sedona Conference International Principles on Discovery, Disclosure & Data Protection: Best Practices, Recommendations & Principles for Addressing the Preservation & Discovery of Protected Data in U.S. Litigation. Together we will delve a little deeper into the development of IoT, the role of analytics in a complex IoT environment and what companies should be considering before embarking on a project.


A 21st Century Way of Life: From 20th Century Work-Life Balance to Lifeworking
The reason that organizations have been slow to truly rethink the concept of work-life is due more to cultural inertia than any other factor. The industrial-age assumptions about technology, organization and processes have become deeply ingrained within society, and have been reinforced through general and business education and the media. In most organizations these deeply entrenched assumptions have become orthodoxy, and this is why the question of work-life balance remains. Some enlightened organizations have made progress in some areas, especially with regard to virtual working and flexible working time, but in most cases these initiatives only patch the much deeper underlying problems


Nearly 1 million new malware threats released every day
Directed attacks and data breaches also grew, according to Symantec. Five out of six large companies were targeted by cybercriminals, a 40% rise on the previous year. The mining industry was the world's most targeted sector. Samir Kapuria, a Symantec executive, recalled one case in which hackers snuck into an energy company's computer network and stole a draft report. The report detailed the secret discovery of a potentially lucrative energy drilling spot. Hackers were trying to sell the information on a black market website to stock traders, Kapuria said. But they were foiled when the energy company (operating under a pseudonym) told prospective black market buyers that the information was false. Kapuria declined to mention the name of the company.


Data breaches may cost less than the security to prevent them
In a March 2015 column on The Conversation, Dean provided a hard to disagree with defense of why things security-wise "ain't gonna change" soon. "When we examine the evidence, though, the actual expenses from the recent breaches at Sony, Target and Home Depot amount to less than 1% of each company's annual revenues," wrote Dean. "After reimbursement from insurance and minus tax deductions, the losses are even less." Dean then administered the knockout punch: "This indicates that the financial incentives for companies to invest in greater information security are low and suggests that government intervention might be needed."


The Hybrid IT Enterprise Demands an End to Network Guessing Games
As visibility, control, and optimization are brought to hybrid networks it will become increasingly important to construct an analytics-driven infrastructure that can take action when problems occur anywhere in the network. We’re already seeing more IT organizations instrumenting network architectures with predictive analytics to create self-correcting, self-generating networks that respond to business needs and intents. Well-instrumented infrastructures provide the foundation for introducing automation. Such automation helps infrastructures react to changing demands without requiring manual intervention. Visibility tools can help to discover and map dependencies in application workloads, a necessary element for true workload portability.



Quote for the day:

"Courage is to never let your actions be influenced by your fears." -- Arthur Koestler

April 14, 2015

Enough With the Silos – Connect, Connect, Connect
It was the year that interest in Service-Oriented Architecture (SOA) exploded and began to influence the way developers built software. It was the year that virtual machines took off like a rocket. From a technology perspective, it was a busy year. Before then it usually made sense to drop applications into silos, no matter whether the silo was a cluster of powerful machines or a single server. You could provision enough hardware to ensure reasonable performance, configure the application for backup and recovery, wrap it all up in a bow and dump it in a dark corner of the data center. Windows and Linux both encouraged the silo approach because neither operating system shared resources efficiently between co-residing apps. It had become a one-app-per-server world.


Cloud machine learning wars heat up
Machine learning is the next frontier in Big Data innovation. And the cloud is the next frontier within that frontier. Almost five years ago, Google launched its Prediction API cloud-based machine learning service. This past July, Microsoft launched its Azure Machine Learning (Azure ML) service as a preview, and brought it into general availability in February. That service had (and has) surprisingly good integration with code written in the open source R programming language. ... They also provide APIs for developers to send input variable values and receive a predicted value for the target variable. The attraction of putting this all in the cloud is that any client application can run a prediction by making a single web service call.


Multi Threaded PowerShell Cookbook
I had the idea to try to directly leverage the TPL from within Powershell and effectively tackle the problem in exactly the same way as one would if writing multi threaded code in .NET, e.g., instantiating Task objects, etc. ... My preference was to use the TPL but I quickly found that things didn't quite work. Although we can write .NET code directly from within Powershell, that doesn't mean we should try to follow the same patterns in both. They are both markedly different and at the thread level I found that trying to instantiate and manipulate threads from within a Powershell script was a recipe for disaster. That left me using the System.Management.Automation.Runspace namespace and the results were quite pleasing.


Pivotal sets the stage for open-source in-memory computing
Releasing the code is the first step in Pivotal's plan,formulated earlier this year, to open-source components of the company's Big Data Suite, which includes GemFire. Later this year, the company plans to release the code for its Pivotal Hawq SQL engine for Hadoop and the Pivotal Greenplum Database. Not all of GemFire is being open-sourced. The company is holding back some advanced features for its commercial edition, such as the ability to stage continuous queries and establish wide-area network connectivity between clusters. Those who pay for the commercial edition will also receive enterprise-level support.


Digital Lumens: Why CIOs should 'lean in' to the IoT
The first thing that CIOs need to do is lean forward into IoT. I think in many cases CIOs are watching it happen without their control and management. I think that engenders fear, engenders fear about management of data, engenders fear about products and organization, I'm sure engenders fear about security. ... It's the role of the CIO to lean forward, talk about the security and policy procedures of the company but then say, 'Well, once you have those in our building, how can we help you? How can we think about that data flow? How can we store that reliably for you? What are other integration points?'


Wearable devices - now a reality for the workplace
The primary reasons for wearable devices are to gain access to IT resources without encumbering the user and getting in the way of the task in hand. So many other items of technology involve varying degrees of significant physical commitment - sitting down to use a desktop or laptop, two hands to use a tablet while standing and even cradling a smartphone requires a hand and at least one eye or ear. Something worn on the wrist, accessed by a glance, tap or spoken word not only fits a Dick Tracey wish-list, it also frees up hands, is out of sight and allows the user to be 'footloose'.


Metadata-Driven Design: Designing a Flexible Engine for API Data Retrieval
From plain flat files to structured XML files to the more esoteric ones (like ISO 2709), developers and administrators have been shuffling these files and ingesting their data for decades. There are both advocates and naysayers on the time-honored practice of ingesting data files. Critics point out that data files are not real-time sources of information, and depending on the chosen format, it may require a certain amount of coordination and finesse in order for them to be handled properly. Advocates, on the other hand, would make the argument that data files have been used for decades, and as a result, the accrued cornucopia of libraries and commands for handling them can empower even the untrained novice.


3 best practices for bootstrapping an open source business
That open source startups are hard to find in the investment-first ecosystem is not surprising, because they're usually started by people who actually build the product. Most of the time, seeking early stage investment for an open source product doesn't make financial sense. On the other hand, there's much to be gained from the business and marketing knowledge in local startup communities, so being sequestered from them can put open source developers at a disadvantage. If you're bootstrapping your open source company, here are three tips to help you prepare for that ultimate transition from development project to fully fledged business.


IBM Creates Watson Health to Analyze Medical Data
The Watson Health announcement is also the latest in flurry of initiatives IBM has announced this year that include new corporate partnerships as well as moves in cloud computing, data analytics and Watson. They are evidence that IBM is intent on investing for future growth, and showing it is doing so, in a year when its financial performance is likely to lag. IBM has reported disappointing earnings recently, and Virginia M. Rometty, IBM’s chief executive, has told industry analysts and investors that 2015 would be a transition year in which new growth businesses like Watson did not yet overcome the profit erosion in some of its traditional hardware and software products.


Government IT over the last five years – the good, the bad and the digital
“The landscape has changed significantly under the Government Digital Service. GDS has had a significant impact, and what’s happened which has been good is the dynamic and disruptive leadership shown by GDS in tech and digital and IT,” said Adam Thilthorpe, director of professionalism at BCS, the Chartered Institute for IT. “Some of the things they’ve done have had real impact on people’s lives and have made things better. Some of the things that they’ve done would actually be a great lesson to be listened to in the private sector.”



Quote for the day:

"It is always safe to assume, not that the old way is wrong, but that there may be a better way." -- Henry F Harrower

April 12, 2015

Balance exploitation & exploration within your organization with TOGAF
Every organization is confronted with ambidexterity. Ambidexterity is about achieving a healthy balance between the management of operations, the daily work, exploitation vs. the management of innovation, discovering, incubating and accelerating new products and services, exploration. Ambidexterity within organizations means "exploiting the present and exploring the future". Consider financial services providers, for example consumer banks. As illustrated in the figure below the daily operations of a consumer bank involves activities such as – and certainly not limited to – the management of:


A community distribution of OpenStack
It's worth pointing out that RDO is a community effort, so when it comes to support, the project's mailing lists, IRC channels and ask.openstack.org site are your best options. If you need professional support for your production environment, a commercial distribution like Red Hat Enterprise Linux OpenStack Platform (RHEL-OSP) would be the way to go. ... The rest of the work performed in RDO is done within the community boundaries. We follow most of the OpenStack and Fedora development conventions and practices, so sometimes the line between one and the other is blurred. Needless to say, everything done in RDO is open and committed to public repositories as it's being developed.


Data Viz Pioneer Nicholas Felton: "There Is A Real Shadow Over Data"
Ryan and I went out to California for some meetings about Daytum and about starting this pursuit of getting funding so we could work on it full-time. We went and talked to Mark and found out they were working on Timeline. We were especially interested in Open Graph, which was basically the ability to plug anything into Facebook. This included data sources that we were pretty interested in, like music, being able to visualize what you were listening to, or things that you’re watching from Netflix. At that point, the question for us was, "Do we want to work on Daytum and try and bring it to a grand scale, or have even a tiny influence on what 600 or 700 million people are using?" That was a hard conversation.


The Battle For Your Wrist Has Begun: Android Wear Versus Apple Watch
On the bright side, improvements to security could be coming in short order for Android Wear devices. Liviu Arsene, Senior Security Analyst at Bitdefender, explains, “These security risks could easily be fixed with stronger or better methods for ensuring the safety of the entire communication.” His suggestions include the use of Near Field Communication (NFC) to safely transmit a PIN code during pairing, but he warns that using NFC “would likely increase the cost and complexity of the devices.” An alternative method would be to “supersede the entire Bluetooth encryption between Android device and smartwatch and use a secondary layer of encryption at the application level.”


Containers Explained: 9 Essentials You Need To Know
At the most basic level, containers let you pack more computing workloads onto a single server, and let you rev up capacity for new computing jobs in a split second. In theory, that means you can buy less hardware, build or rent less data center space, and hire fewer people to manage that gear. Containers are different from virtual machines - which you probably already run using VMware or Microsoft Hyper-V virtualization software, or open source options KVM or Zen. Specifically, Linux containers give each application running on a server its own, isolated environment to run, but those containers all share the host server's operating system. Since a container doesn't have to load up an operating system, you can create containers in a split-second, rather than minutes for a virtual machine.


Strategic Torque: Enterprise Architecture & Portfolio Management
Practical application of integration based on theoretical foundations shows that the implementation of portfolio management is facilitated by enterprise architecture practices and in doing so contributes to the realisation of strategic planning and the overall improvement of cross-competency IT effectiveness. This discussion will show that there is a history of risk aversion, opportunity cost and siloed ‘think’ in the IT departments of tertiary educational institutions. ... This optimisation of organisation and organisational change combines service based value add client interaction, through streamlining process (through silo integration), and the reduction of opportunity cost and waste. This is in part an impact of risk appetite / tolerance. The ability to influence outside ones silo is perceived as riskier as control seems to be lacking.


Lean Documentation
People use documentation to find answers to the questions they have. The quality of the documentation can be measured by the time it takes to find the answers. We used Google Earth as a model. Have you ever tried to find your house on Google Earth (drilling down, not searching on address)? How long did it take? Maybe 30 to 60 seconds? Finding your house on the surface of the Earth is like finding 1 answer among 1,5 trillion (1,5 * 1012) answers. If you are looking for an answer it shouldn’t take more than 60 seconds, even if your system is complex and huge. How does this apply to documentation? We followed a hierarchy analogous to moving through the levels in Google Earth: moon level, satellite level, airplane level, helicopter level and so on.


Deep Gooses MySQL Performance with New Database Math
Instead of continually writing data to disk, CASSI uses machine learning algorithms to better predict the optimal moment to write data to disk, based on the particular configuration and capability of a computer, says Chad Jones, the chief strategy officer for Deep IS. “As things come in we’ll say, ‘What’s the best way to handle this by splitting up the in-memory and disk structures,'” Jones says. “We’re able to put an adaptive layer in between. It allows us to say ‘I’m not going to write this down right now because the data hasn’t quiesced. I keep seeing a lot of changes in this one column of data, so let’s defer writing until we know it’s ready to be written and then write it, so we eliminate a lot of extra work in the database.'”


You can’t have Big Data until you have Good Data
Rather than rushing in and trying to learn big data analytics by searching through irrelevant data collected by separate IT systems, companies should prepare the ground, start organising their data – show it some respect. Capturing data from lots of different places whether that be from emails, forms on the website and even manually, can cause mistakes, so that when it comes to analysing data companies are not always analysing the correct information – it might be old data or based on false inputs. Companies must stop measuring the wrong data; stop deceiving themselves about the accuracy of their data, and go back to basics. There are many data capture solutions available on the market. For example, in the finance department, accounts processing today should include scanning paper based invoices as standard and adding them to your PDF invoices from email.


What Are the Legal Concerns in a HIPAA Risk Assessment?
“There are handfuls of different reasons to have security folks look at your systems and audit you and give you various reports, and that’s fine,” Rostolsky said. “Ultimately, you need to have something that’s specifically looking at the security requirements and speaks and uses HIPAA language in the assessment.” Essentially, healthcare organizations should not rely on a false sense of security. It’s important that when their data systems and safeguards are being reviewed, that facilities try and keep in mind what the OCR would be looking for so no areas are missed. Having current physical safeguards, administrative safeguards, and technical safeguards is not only required by the Security Rule, but they work together to protect health information, according to Spencer.



Quote for the day:

"The old mantra of ‘be everywhere’ will quickly be replaced with ‘be where it matters to our business" -- Mike Stelzner

April 11, 2015

Big Data Platforms: How To Migrate From Relational Databases to NoSQL
With our discussion scope sufficiently narrowed, we'll start by tackling a relatively simple relational structure. The very first thing we'll need to do is to evaluate which entities can be de-normalized to become what I call super-classes. "Super-class" is not a standard big data term. It's my term and I find it makes things easier for the initial discussion. I'll explain why later. Each of these super-classes will be used to help define the new composite structure (an actual Big Data term). We'll be using the following Entity Relationship Diagram (ERD) to lay out the steps needed to identify our super-classes.


5 Competitive Strategies of Successful (and Ethical) Companies
Ethics becomes part of the competitive advantage that enables them to succeed. When I talk about a conscious strategy incorporating ethics, I am not thinking of a formal (written) strategic plan. Many organizations do not have formal strategic plans. But whether or not there is a formal plan, successful companies employ certain strategies to compete effectively. It is among these competitive strategies that ethics finds a place. I identify five competitive strategies common to companies that are successful and ethical on a sustained basis. None of these strategies considered alone guarantees ethical success. However, each strategy increases your chances of combined ethical and market success.


The App That’s a Breath of Fresh Air
Like many other innovations, BreezoMeter was born out of frustration. Its CEO, Ran Korber, was frustrated by the lack of centralized air quality information available when he was seeking a place clear of air pollution for his new home in Israel. As an environmental engineer with a pregnant wife, he was particularly concerned about the air quality. Finding nothing on the market provided all the answer he sought, he created his own solution. The app proved successful in Israel where 300 sensors sufficed to cover the most populated areas of an area roughly the size of New Jersey. Scaling up to cover an area hundreds of time bigger was a challenge for the startup. BreezoMeters’s CMO, Ziv Lautman, said it took half a year to collect air quality data from thousands of sensors scattered around the United States.


IS Audit Basics: Auditor: About Yourself (And How Others See You)
Technical expertise is necessary, but not sufficient to be or become a successful auditor. That is, a successful auditor is one who is credible, respected and personable enough to be considered a valuable source of information and advice. Having a good knowledge of oneself and the soft skills that facilitate human interaction is just as important as professional knowledge and, probably, harder to acquire. Being sensitive to how others perceive us is at least as important. “O would some Power with vision teach us to see ourselves as others see us! It would from many a blunder free us, and foolish notions.


10 minutes with… Two-Factor Authentication author Mark Stanislav
By combining different ‘factor classes’ (e.g. something you have, something you know, something you are), account security is greatly strengthened as the challenge of a criminal to get past two factors is a difficult hurdle. Because passwords are often poorly created, easily stolen, and commonly reused, their ability to protect our most important systems and services aren’t well matched for the needs and risks facing people today. Through the book I am able to educate my readers about not just what two-factor authentication is, but what choices they have to do it, what the upsides and downsides are to different methods, and what they should think about to make sound decisions regarding their security needs.


Intuitive Reasoning, Effective Analytics & Success: Lessons from Dr. Jonas Salk
To perceive something differently or even to know something as being true is of little or no value if you’re not willing to stand apart from the crowd. It’s very clear from his interview this was never an issue for Dr. Salk. He was extraordinarily thick-skinned, and had an exceptionally healthy attitude regarding criticism and rejection. And yet, he was fully willing to follow the hard road necessary for a new truth to be recognized and accepted. People lacking these high-EQ attributes are unfortunately likely to keep intuitive reasoning to themselves or just give up. ... the greatest insights, advances and innovations using big data will come from people with unique subject matter expertise and high intuitive reasoning skills – enabling them to “see” challenges very differently. And they will probably not be formally trained in data science or programming.


Burn Rate Doesn’t Matter
Too bad burn rate doesn’t matter. More specifically, burn rate (net cash outflow per month) is a vanity metric. Just as top-line revenue doesn’t tell you much about the health of a DJIA blue-chip, burn rate says very little about whether a startup is on track. Only by evaluating a company’s use of cash and long-term strategy can high burn be diagnosed as good or bad. In many cases, the low burn ideal is actually dangerous. At Founders Fund we avoid investing in companies unless they are consuming cash. We’re here to invest when doing so will bring about positive progress faster, which often manifests as the conversion of cash into assets and increased burn. Cash-flow-positive businesses are usually past this inflection point, or simply don’t have enough ideas about what valuable things to do with more money.


Self Service: A Data Scientist Productivity Boost
There are no less than six new and emerging roles within any organization, with data developers/engineers and business analysts being two of those, according to a recent Forrester webcast. The pool of data developers and engineers is roughly three million worldwide. These individuals count data modeling as a core skill; where data is in their DNA and the IT department is their home. Data developers have Excel, SQL, Microsoft Access and declarative dataflow diagrams down cold. They can work in declarative programming metaphors, draw dataflow mapping diagrams of what they want the system to do, but don’t necessarily do a lot of coding. The challenges this group faces are similar to those of the data scientist.


Surveys: Employees at fault in majority of breaches
"Security awareness is a must, but it's a slow and difficult task, and as CompTIA study shows human error is still the largest factor behind security breaches," said Igor Baikalov, chief scientist at Los Angeles-based Securonix, Inc. "The game changer," he said, "is continuous risk monitoring through automated analytics." It can detect human error, reduce false positives, and lower incidence response times, he said. "Humans were always considered to be the weakest point of the IT security chains -- and the more privileges they have, the more risk they pose to the corporate network," said Péter Gyöngyösi, product manager at Luxembourg-based BalaBit IT Security.


Asynchronous Programming in .Net with QnA
Task based Asynchronous Pattern (TAP) is based on concept of a task, represented by Task type inSystem.Threasing.Tasks namespace. It represents an asynchronous operation which you could wait for completion, cancel it, or specify a continuation to execute when this asynchronous operation is complete. It provides an object-oriented approach to writing asynchronous code. This frees up developer from worrying about semantics of language or execution environment for executing asynchronous operation and he can rather focus on functional aspects of application. Core idea here is to enable developer to execute methods on a separate thread seamlessly.



Quote for the day:

“Stories are the single most powerful weapon in a leader’s arsenal” -- Howard Gardner