December 01, 2015

A primer on the technologies building the IoT

The choice of a network technology depends largely on the geographical range to be covered. When data have to be transferred over short distances (for example, inside a room), devices can use wireless personal area network (PAN) technologies such as Bluetooth and ZigBee as well as wired connections through technologies such as Universal Serial Bus (USB). When data have to be transferred over a relatively bigger area such as an office, devices could use local area network (LAN) technologies. Examples of wired LAN technologies include Ethernet and fiber optics. Wireless LAN networks include technologies such as Wi-Fi.


'Composable' Synergy Infrastructure Is Biggest HPE Breakthrough In Last Decade

The new unified architecture is being billed as the first ever designed to bridge traditional and cloud-native applications into fluid resource pools that can be deployed at "cloud speed." That could eliminate the big advantage that Amazon Web Services has had over internal IT departments that have struggled to provision workloads instantly like AWS can. At the heart of the Synergy infrastructure, which will be available starting in the second quarter next year, is a set of open APIs that bring software intelligence to deploying workloads based on the business demands of the application. Hence the term "composable" infrastructure.


When Smart Things Rule the World

While autonomous business will enrich our lives, it also raises concerns about the impact on human employment. As with all technologies there will be an impact as it replaces jobs in some areas, and creates new jobs in others. However, the elimination of all, or most, employees is not a plausible scenario for most organizations in the future. “The dehumanized organization may be efficient, but it will fail to foster the emotional loyalty that characterizes the most successful organizations of our time,” Mr. Prentice said. “It’s likely that the role of humans will shift to less routine work that requires creativity and emotional intelligence, or involves complex motor skills that machines struggle to master.”


What do business people think of their CIO?

CIOs are in a race to redefine the role of IT in an era of digital transformation. While this change occurs, it is important to remain clear that the perception of business benefit is a primary reference point against which IT is evaluated. In other words, corporate functions and lines of business expect IT to deliver practical and useful benefit. Given the importance of business perceptions toward IT and the CIO, it is worthwhile to examine data on this topic. Unfortunately, the results clearly show that IT must improve its image and reputation as a provider of business value. While looking at the data, one surprising trend emerged. Although the CIO and folks in IT view themselves positively, the self-perception of IT is still extremely low. Self-loathing in IT seems to be a reality, unfortunately.


Between private cloud heaven and hell

“That was considered to be a bit too negative. So I’ve changed it to ‘stairway to heaven,'” said Waite, a Gartner analyst, at the research shop’s 2015Catalyst convention in San Diego. “Anyway, my points are exactly the same.” The truth is, Waite said, public cloud providers like Amazon Web Services and Microsoft Azure can host most everything far more efficiently than you can — no matter what size organization you run. So before anything else, think carefully about your data and whether it needs to be in a private cloud. When you’re crystal-clear on that, start climbing the stairway. Here are Waite’s milestones on the way to private cloud success.


3 Ways Conventional BI Analytics Will Fail Retailers this Holiday Season

Conventional BI analytics can’t give you those answers to help optimize distribution and merchandizing. You need real-time analytics that can examine millions of questions, build hundreds of models and help you understand the subtle differences. Conventional prediction models take too long to manually craft and update. If your predictive modeling takes a month to complete and mine takes a day, I could decide based on the latest data possible, while you are deciding based on months-old data. And, since we know that consumer behavior is fickle, every extra day of data matters. When a model can be created, updated and acted upon faster—in days or hours, not weeks or months, you end up acting based on more current data.


Where Fin-Tech Is Struggling With Regulation

... many of these regs and rules were pre-mobile, pre-eCommerce, pre-Internet. Because many of the fintech models are introducing innovative and new methods of delivering financial services, it can create confusion on the applicability of which regs/rules apply. ... the number of fintech startups has increased significantly as more investment dollars have poured into this sector. Venture investing in fintech has gone up approximately three times in the past 18-24 months, so the sheer number of new startups in this sector has created more regulatory concerns. ... there has been a lot of new financial services regulation introduced in recent years such as Dodd-Frank, the Foreign Account Tax Compliance Act, Durbin amendment and other new regs and even banks are challenged with keeping up with all the new regulations that they need to be in compliance with.


Divya Jain: Machine learning maven. Startup founder. Women in tech advocate.

In addition to machine learning, Jain is interested in the growing IoT market. "Making smart watches, and buildings, and all kinds of little things is really going to be very helpful—not just as a business, but I think in our daily work lives these things are going to make a big difference," she said. When asked for her thoughts on some of the biggest issues affecting enterprise IT, Jain said it's a matter of relevant information. Even with advances in technology, finding information on the internet is still easier than finding information within an organization, she said. We have some of the technology available, but it has to be secure and properly managed because of the sensitive nature of enterprise data.


Building Flat Organizations with Cross-functional Teams and Fewer Managers

It all means that organizations deal with more complex problems in a rapidly changing environment. It demands intelligence and mobility. This leads to so many changes within the organizations! Command and control barely work for intelligent people, so you have to invent new ways. ... The company strategy can't be created by a single person, since he or she doesn't know everything, it should emerge from successful initiatives at the lowest levels. Flatness is just one characteristic of a “new generation” companies. It helps to make decisions faster, run more experiments, fail faster and find new solutions faster. The truth is that we don't have proven best practices how to create flat organizations and what "new generation" means in general. We have just some working examples and many critique quarrels.


How this cloud BI CEO is working hard to stand out from the analytics crowd

At the time, the IT team was struggling with its own legacy, homemade system and teams had to wait in line for their data extractions. Those needing more data had to wait again, causing a bottleneck in the IT department. "The systems were not agile and queries were slow to be resolved," she says. Frustrated, it was this experience as a young, female controller who had to "wrestle with an all-male IT department over unfettered access to fresh data" that led her to start her own business. "I had to do something to modernise business intelligence and create the product of my dreams," she says. What she was about to learn, and fast, was that her struggle lay not just in being a woman in a male-dominated industry, but it was also because her vision of business intelligence as a service ran against the grain.



Quote for the day:


"None of my inventions came by accident. I see a worthwhile need to be met and I make trial after trial." -- Thomas Edison


November 30, 2015

10 tips to protect your files from ransomware

What makes ransomware a particularly vicious scam is that the encrypted files being held ransom are still being stored on the user’s computer. This unto itself is a very sad and frustrating reality as the files are not retrievable without the unique encryption key. It is becoming obvious that ransomware is a big issue that Internet users should pay more attention to in order to preventing infection. After all, it is much harder to deal with the consequences afterwards. ... If you discover a rogue or unknown process on your machine, cut off the Internet connection immediately. If the ransomware did not manage to erase the encryption key from your computer, there’s still a chance you can restore the files.


Evolving to the Next Generation of ERP Systems

ERP systems must be able to handle the specific needs of users, which can differ considerably from one industry to another and even between specific micro-verticals that might span multiple business units in a range of industries, locations and jurisdictions. If the software cannot be configured to meet the customer’s feature, functionality and process requirements, and if the customer cannot adapt its operations to these limitations, a cloud-based product isn’t a feasible solution. Many manufacturing and product-centric businesses have found it difficult because their requirements are often too specific and diverse. Unlike with on-premises software, there is no option to customize multitenant SaaS offerings to the needs of a single customer unless the vendor is willing to make the necessary changes to the core code base and the timing of those changes is acceptable to the customer.


State CIOs will focus on security and cloud in 2016

While security and the cloud headlined the CIOs' ranking of their priorities for 2016, it's a crowded field. Respondents to NASCIO's survey also indicated their plans to focus on consolidating and optimizing services and operations, business intelligence and analytics, modernizing legacy IT, and establishing an "enterprise vision and roadmap for IT." Other CIO priorities included efforts to cut or contain costs, recruit and retain top IT talent, improve the development and delivery of software, and advance their plans for disaster recovery and business continuity. In many of those areas, CIOs could benefit from stronger support from key personnel in the executive branch and the legislature, Robinson says, stressing the importance of tech leaders winning the buy-in of top brass in the budget and procurement processes.


Four CIO rules for building a mobile future

Before we go too far, let's think about how to take a somewhat balanced approach to mobile apps for business. And, by balanced, I mean an approach to mobile app development that considers factors besides hype and urgency. After all, I am old enough to remember the hype and urgency of the dotcom craziness. I don't want to offend any of my readers, but who really thought that creating a Web business called Pets.com made that much sense? Did that many people really need to go online to order and have shipped across the country a 10-pound bag of kitty litter? Now that we've agreed on the prudence of a balanced approach to developing mobile apps for business, let's talk tips.


DataOps and three tips for getting there

Like DevOps, the impetus for DataOps is to blend teams together to increase collaboration and agility. While DevOps combines the development and operations teams, DataOps is "the set of best practices that improve coordination between data science and operations," according to consultant Lenny Liebmann,founding partner at Morgan Armstrong in Teaneck, N.J., and contributing editor to technology publications. Andy Palmer, CEO and co-founder at Tamr Inc., based in Cambridge, Mass., provided more detail in a recent blog post: "DataOps is a data management method that emphasizes communication, collaboration, integration, automation and measurement of cooperation between data engineers, data scientists and other data professionals."


The Hidden Pitfalls of Going Freelance in IT

“In order for a project to be successful, the client has to buy into you and the vision for the project,” says Nick Brattoli, founder and lead consultant at Byrdttoli Enterprise Consulting. “This is exacerbated in the IT world, because more often than not, you are going to be working remotely,” says Brattoli, who’s been freelancing on and off for his entire IT career. “Technology is wonderful in that it makes it possible for us to work from anywhere with an Internet connection. But there is still value in being able to meet face-to-face, and many companies are hesitant to trust someone they haven’t met.” In addition, at many companies the tech-savvy people running a project will know what needs to be done to meet the desired outcomes.


Microsoft's new premium Office 365 subscription for businesses is here

Skype for Business is essentially a rebranding of the company's Lync communication software, which Microsoft launched earlier this year. Tuesday marks the general availability of features including a PSTN Conferencing service that lets users dial into a meeting being held using Microsoft's communication service. E5 subscribers also get a new Cloud PBX feature that lets IT administrators replace on-premise PBX systems with a cloud-based management portal provided by Microsoft. Microsoft has offered PBX services through its Lync and Skype for Business Server products for several years, but Cloud PBX is a fully managed system that doesn't require company administrators to provision and manage a server whether that's on-premises or in the cloud.


Driving The Automaker Into The Future

"You need people who can be deep architects, who can be deep cyber-security experts, who can be deep in application development and agile methodology," she explained. "You also need people who can be strategic, who can understand business concepts, who can help lead the business to innovative solutions." Klevorn described the struggle to recruit fresh young talent and is taking a new approach to hiring IT pros. Ford started using Facebook and Twitter to engage with students, for example, and changed its on-campus presence. Having an office in Palo Alto has strengthened its connection to Stanford University and a community of talented people who may not otherwise consider the Michigan-based company.


DevOps at Seamless: The Why, How, and What

The key thing about DevOps is understanding under which circumstances it should be introduced to your organization. Starting with “why” is crucial as there is probably no greater (and more expensive) failure than choosing the wrong tool for a problem on an organizational level. Nevertheless, let us assume that you know the “why”. The next question to ask is how to address the challenge. Let us assume that DevOps may be the answer. What remains is determining what to do to get there. Microservices architecture, continuous integration, continuous deployment, test automation, monitoring automation, infrastructure automation etc. are frequently associated with DevOps but to consider DevOps as only the tools risks having those practices withdrawn, replaced, or diminished whenever your company faces a crisis.


Email Data Breaches: The Threat That Keeps On Giving

CIOs should create a process for retrieving leak data when large leaks happen, because our analysis shows that the very appearance of someone's email address in a leak exposes them to more abuse after the leak occurs. Attackers use leaks to build their database of targets for all sorts of fraud - not just fraud related to the leak itself. ... Security is never given enough attention until there is a major problem - this has always been true and probably always will be. Enlightened organizations invest more in security because they know that the cost of doing nothing is to guarantee - at some unknown time in the future - an incident that is very costly.



Quote for the day:


"Every problem has a solution. You just have to be creative enough to find it" -- Travis Kalanick


November 29, 2015

How To Create an Effective Software Security Training Program For Agile Teams

Although not unique to agile projects, there’s also the issue that the focus of information security has traditionally been at the network layer and not on the software itself. This can (and does) lead to an over-reliance on perimeter security: firewalls, SEIMs, traffic fingerprint devices, etc. The problem is many recent software breaches have been affected at the application layer or data layer and have gone undetected, sometimes for months(!), by perimeter defenses. Software security is a distinct practice within the information security world. It is enough of an emerging concern that many in software development, testing and product owner roles are not aware of the need to build defenses into the code itself.


5 Things Enterprises with Mature Security Programs Should be Thankful

In addition to having a thorough understanding of the systems in place, you’re grateful for having taken the time to understand the nature, motivations, and capabilities of the adversaries that could target your enterprise. You know what data apps and systems hold information that would be of financial gain to cybercriminals, as well as what data would be of interest to your primary competitors. You also know which data you hold that could likely be targeted to be used as part of a two-stage attack aimed at partners or other third parties. Thankfully, when it comes to threat modeling new apps and systems, you are able to swiftly review new apps for how those systems work and what risks may be involved, what data they touch, how access is granted and other security-related attributes.



MailSystem.NET


MailSystem is a suite of .NET components that provide users with an extensive set of email tools. MailSystem provides full support for SMTP, POP3, IMAP4, NNTP, MIME, S/MIME, OpenPGP, DNS, vCard, vCalendar, Anti-Spam (Bayesian , RBL, DomainKeys), Queueing, Mail Merge and WhoIs This project licensed under LGPL, you are free to use the compiled binaries in your personal or commercial project for free. If, for some reasons, you want to keep your changes for yourself, you must acquire a commercial license.


The core principle behind the SAFECode framework is that a software assurance assessment should primarily focus on the secure software development process and its application to the product being assessed, while taking into consideration the context of a product’s intended operating environment. There is no single practice, tool, or checklist that acts as a silver bullet and guarantees better software assurance. Rather, the efficacy and efficiency of software security practices and tools varies based on how they are applied and whether they are implemented as part of a holistic software development process within each unique organization. With that principle understood, we recognize that the maturity of secure development practices varies among technology suppliers.


Robust Security Planning Requires Change in Mindset

Ensuring device security often does not stop with meeting just the set of regulatory requirements. Firms generally search for ways to enhance security further, as they are very concerned about the cost of potential security breaches and the ever-changing landscape of sophisticated attacks. The cost of a security breach and violation of your trust relationship with your customers can be high. It can also have a large impact on your firm’s reputation as well as sales, which can alter how the market views your other products. Legislation now requires firms to disclose breaches with possible financial penalties. The number of sophisticated attackers is also increasing as more robust attack tools become available, in turn increasing the overall risk of a security breach.


Moving towards an Intelligent, Networked and Boundary less World

IoT will herald an evolutionary change in appliances, systems, devices and utilities that people use on a daily basis. From refrigerators, washing machines, microwaves, ACs, TVs, cars to the electrical grids, transport systems, surveillance systems, this change will touch everything. To support such an eco-system the infrastructure vendors are already in hyper-drive to develop and market products that are IoT enablers e.g. SDN, NFV, multiprotocol aggregators, wearable devices, iPV6 based architecture, etc. ... The premise of Smart Cities emanates from a planned city that manages and monitors civil utilities, power grids, communication, transport and traffic systems, citizen services and security and requires a synchronized operation of a complex and automated systems.


3 Reasons Why the Most Common OWASP Risks Are STILL On the List After 10 Years

In the past, security professionals have warned against M&M security—security that is hard and crunchy on the outside but soft and gooey on the inside. Back when network security was the primary concern, enterprises focused most of their effort on protecting the perimeter. Firewalls, intrusion detection systems, and proxies became necessary tools to keep the bad guys out. However, in order for software to be useful, there has to be an entry point for our users (i.e. the front-end web applications running on port 80 or 443). In order to extend the concept of perimeter security to the application layer, many firms rely on web application firewalls or WAFs to protect their sensitive, internal assets.


So, what steps can the CIO take to ensure that its cloud provider staff members are doing their jobs properly? Data analytic tools are emerging that help businesses identify system aberrations, and better identify and potentially thwart insider threats. However, cloud customers need to be proactive in their use of such tools. Often, the vendor is unwilling to let the customer access the data analytics system or talk directly with its employees. But such steps can be written into the customer's service level agreement. "In the SLA, the customer should have the ability to audit the service on occasion, examine system logs, and hire an outside firm to investigate any potential internal breaches," explained Security Architects' Blum.


A Data Model Describes a Business

In many ways the mind of a good businessperson is similar to that of a good data modeler—continually asking questions and looking for areas of improvement. A recent example at a client of mine brought this to light. In building a conceptual data model for a manufacturing company, I was working with a senior engineer to understand the underlying data model for several functional business areas. As he had some previous experience with data modeling, in addition to the logic of engineering, I found this session particularly productive. The data modeling process asks a series of questions that are almost childlike in their simplicity, but when done in a methodical way, can highlight important business rules that might not have come to light.


Considering the number of major security breaches we’ve suffered, and the creative ways that cyber criminals are finding into supposedly secure systems, the good guys could use a break. Could that advantage come from machine learning? It very well could, says Patrick Townsend, CEO and founder of security software vendor Townsend Security, says. “Now that we’re starting to get systems that can really effectively handle examining large amount of very unstructured data and detecting patterns, I’m hoping that the next wave of security products will be based on cognitive computing,” he says. “Look at Watson. If it can win Jeopardy, why can’t it parse all these security events worldwide and make sense of them? I think we’re on the very early cusp of the use of cognitive-based computing to help ramp up security.”



Quote for the day:


"An overburdened executive is the best executive, because he or she doesn't have the time to meddle." -- Jack Welch


November 28, 2015

How to stop IT woes hurting your M&A plans

If you allow what I like to call ‘the right of infinite appeal’, where the decisions keep getting questioned and nothing gets implemented, that can kill an integration project. It’s the nature of the beast that you typically have two great CIOs, their hand-picked lieutenants, great employees and they can’t all keep the same jobs that they had in the standalone company. In some cases, the team of the company doing the buying will tend to end up in the roles, but there are also cases where part of the allure of the acquisition is an extremely strong team that can fill holes in the parent organisation, essentially where they are also buying a management team. When the best person is selected for each position regardless of where they came from, it can send a very positive message to the rest of the employees and help to retain the best and brightest.


In-Memory Graph Database API for .NET

Data is represented as a directed acyclic graph of “datums” connected by “is” links. Because DatumTron API represents data at such a fundamental level, we are able to manipulate data in generic ways. We discuss how inheritance, time, and code are represented in the graph. We explain how to import an SQL database (Northwind) into memory as a DatumTron graph database. Then we show how to query, and mine the database in a fast in-memory graph using a simple set of operators. In DatumTron, finding all rows that have the same column value is achieved in constant time. For example, a query to get the customers who live in Paris is written in the following C# statement. Where CustomerCity is the datum representing the customer city column in the graph.


Online tracking by news organizations is excessive, say researchers

"The surprising extent to which news organizations subject readers to third-party tracking deserves closer attention," write Pickard and Libert in this The Conversation commentary. "As a society, we often hold news organizations to higher ethical standards. They're not just businesses; they are supposed to provide a vital public service, and they depend on public trust." With a nod towards Apple's recent decision, the two authors mention, "While the ethics of readers unknowingly 'paying' for content with their privacy are certainly questionable, the practice is also indicative of the precarious situation in which the news industry finds


How IT Plays a Critical Role in Health Care

By investing in IT, we are now able to offer patients a level of engagement and involvement in their own care that just wasn’t possible before. Whether it’s orders and results flowing seamlessly between our clinics and hospital, or their entire patient health summary being viewable to them in near real-time on our new patient portal, one of our biggest goals has been to make it easy and intuitive for our patients to be involved in, and informed about, their own care. We don’t just make it easy for the patients to get their own information, though, we also make it easy for that information to get to other outside providers who need it for that patient’s care as well. When you’re dealing with the kinds of geographic distances between facilities that we have to, the ability to get potentially life-saving information to another provider at the click of a button is a real game changer.


Eight tips for working more efficiently in the Visual Basic Editor

Office uses Visual Basic for Applications (VBA), an application development language, to extend functionality beyond its standard features. You might write a simple printing macro or use more complex procedures to perform custom tasks or even apply business rules. To add VBA code to a project, you use the Visual Basic Editor (VBE), a built-in interface. It's adequate, but some tasks seem harder than necessary. Here are some tips that can help you fine-tune your coding sessions. You'll spend less time with routine tasks and more time actually coding. The VBE, shown in Figure A, is essentially the same across all of the Office products, and there's been little to no change for several versions.


Fighting Frauds using Big Data Visibility and Intelligence

Organizations are struggling hard to find significant and effective methods to combat frauds happening internally in these enterprises. To give you a better idea, we are talking about a small fraud in an organization that has an enormously huge amount of information- a little fraud-search can be compared to searching for a needle in a haystack. It can turn out to be time and effort consuming. Traversing through such huge information is cumbersome. This type information is usually a sum of complex correlations and aggregations and as such, ‘little’ mistakes can be very crucial. With this blog, we will stress how big data analytics can help in overcoming the frauds happening within various type of organizations.


Cyber Monday Is Dead. Long Live Cyber Friday

"Cyber Monday is dead," said Steven Skinner, senior vice president of Cognizant Technology Solutions in Teaneck, New Jersey. "People are no longer waiting until they get back to work to shop. I have a better connection on my phone right now than I do at my desk at work."More than three-in-four consumers have smartphones and 41 percent will use them to make online purchases this year, according to a holiday survey by Deloitte University Press that predicts the Friday after Thanksgiving will surpass Cyber Monday as the most popular online shopping day this year. The shift shows that holiday spending is alive and well even as some consumers and retail employees grumble about consumerism overshadowing family time.


When your ‘Agile’ Team Moves at Snail Pace: 5 Key Roadblocks and How to Overcome Them

The best way to avoid this situation is to have a trained and experienced Scrum Master at helm, who is able to visualize and predict future requirements, prioritize effectively, and create an optimized plan for product engineering.  ... Only when all the parts of development – design, JPGs, HTML, code, middle layers and DB – are joined together, can the product owner get a clear view of an actual useable product. Teams can deliver a functional, interactive product each sprint. The product is built layer by layer, giving a clearer picture to the product owner with every iteration. This helps deliver the MVP on time, reducing major changes in later stages of development.


The Role of KPIs in Managing Big Data

KPIs – Key Performance Indicators – are vital to help businesses, and especially CFOs, optimise performance. They provide insight into the here and now, and how it is directing what is to come – unlike a report on how you did in the past. As the example shows, these KPIs have a dynamic relationship – information from one set of performance indicators can suddenly draw attention to the key role of another indicator – so we need to access them in real time, not in a historical report. According to investopedia.com: a KPI is: “A set of quantifiable measures that a company or industry uses to gauge or compare performance in terms of meeting their strategic and operational goals”.


FileUtilities - a library for reading flat files into POCOs

Whilst many modern applications exchange data in well defined standard ways (such as XML or JSON) the reality is that a great deal of data is still packaged in flat files (by which I mean comma separated values, or fixed width text files).  This library is concerned with turning these files into arrays of type-safe objects and using semantic meaning in those objects to validate the files concerned. The use of attributes to tag properties of your classes is quite common in both Entity Framework and also in System.Runtime.Serialization. This library very much follows that model but if you are not familiar with it then I recommend reading this article to start with.



Quote for the day:


"If something is important enough, even if the odds are against you, you should still do it." --@elonmusk


November 27, 2015

How Robots Can Quickly Teach Each Other to Grasp New Objects

Tellex says robotics researchers are increasingly looking for more efficient ways of training robots to perform tasks such as manipulation. “We have powerful algorithms now—such as deep learning—that can learn from large data sets, but these algorithms require data,” she says. “Robot practice is a way to acquire the data that a robot needs for learning to robustly manipulate objects.” Tellex also notes that there are around 300 Baxter robots in various research labs around the world today. If each of those robots were to use both arms to examine new objects, she says, it would be possible for them to learn to grasp a million objects in 11 days.


Mobile Cyber Security: Minimizing Loss and Maximizing Profit

Another very realistic threat that’s emerging recently is mobile botnet. Pierre-Marc Bureau, Security Intelligence Program Manager from ESET explains what we’re dealing with here: The word botnet is made up of two words: bot and net. Bot is short for robot, a name we sometimes give to a device that is infected by malicious software. Net comes from network, a group of systems that are linked together. A botnet is a network of infected devices, where the network is used by the malware to spread. One potential advance in security currently being developed as a response to the number of cyber attacks rising 100% between 2013 and 2014, is the creation of artificial intelligence (AI) platforms.


Big Data Analytics: Unlock Breakthrough Results - Step 2

A set of tools and platforms which are ideal for Centralized Provisioning are usually terrible and completely unsuited for use within a Decentralized Analytics operating model. Critical capability essential to Embedded Analytics is very different from Governed Data Discovery. Yes there are some capabilities that cross operating models (e.g. metadata), and some that are far important than others. In general this is a truly sound way to determine where your investment in capability should be occurring – and where it is not. Along the way you will surely stumble across very clever professionals who have solved for their own operating model limitations in ways that will surprise you. And some just downright silliness; remember culture plays a real and present role in this exercise.


Many embedded devices ship without adequate security tests, analysis shows

Costin presented the team's findings at the DefCamp security conference in Bucharest on Thursday. It was actually the second test performed on firmware images on a larger scale. Last year, some of the same researchers developed methods to automatically find backdoors and encryption issues in a large number of firmware packages. Some of the firmware versions in their latest dataset were not the latest ones, so not all of the discovered issues were zero-day vulnerabilities -- flaws that were previously unknown and are unpatched. However, their impact is still potentially large, because most users rarely update the firmware on their embedded devices. At DefCamp, attendees were also invited to try to hack four Internet-of-Things devices as part of the on-site IoT Village.


The Definitive Q&A for Aspiring Data Scientists

Know what you are good at and what you care about, and pursue that. So, you might be good at math, or programming, or data manipulation, or problem solving, or communications (data journalism), or whatever. You can do that flavor of data science within the context of any domain: scientific research, government, media communications, marketing, business, healthcare, finance, cybersecurity, law enforcement, manufacturing, transportation, or whatever. As a successful data scientist, your day can begin and end with you counting your blessings that you are living your dream by solving real-world problems with data. I saw a quote recently that summarizes this: "If you think your scarce data science skills could be better used elsewhere, be bold and make the move."


The Target breach, two years later

Two years later, Target has largely recovered from the breach in terms of both consumer trust and financial impact. But no matter how grand its remediation efforts were, Target will be forever associated with the data breach and its lasting repercussions. "Target remains the most significant breach in history because it was the fist time the CEO of a major corporation got fired because of a data breach," said John Kindervag, vice president and principal analyst on risk for research firm Forrester. "You can't underestimate that in terms of getting people's attention. People started taking credit card security seriously -- before that, it was just a pain-in-the-neck compliance issue."


An Engineer’s Guide to GEMM

I’ve spent most of the last couple of years worrying about the GEMM function because it’s the heart of deep learning calculations. The trouble is, I’m not very good at matrix math! I struggled through the courses I took in high school and college, barely getting a passing grade, confident that I’d never need anything so esoteric ever again. Right out of college I started working on 3D graphics engines where matrices were everywhere, and they’ve been an essential tool in my work ever since. I managed to develop decent intuitions for 3D transformations and their 4×4 matrix representations, but not having a solid grounding in the theory left me very prone to mistakes when I moved on to more general calculations.


Ambient Intelligence: What's Next for The Internet of Things?

It could manage mass transit for optimal efficiency based on real-time conditions. It could monitor environmental conditions and mitigate potential hotspots proactively, predict the need for government services and make sure those services are delivered efficiently, spot opportunities to streamline the supply chain and put them into effect automatically. Nanotechnology in your clothing could send environmental data to your smart phone, or charge it from electricity generated as you walk. But why carry a phone when any glass surface, from your bathroom mirror to your kitchen window, could become an interactive interface for checking your calendar, answering email, watching videos, and anything else we do today on our phones and tablets?


Investing in Impact - Portfolio Management for Agile Deliveries

Rightly or wrongly, the role of Project Manager remained in place in some companies, the role was re-introduced by some others, particularly larger companies working with bigger bodies of work - programmes involving many ‘agile’ feature teams for example. Companies forgot to update the Project Management toolkit though and in lots of cases we’ve seen companies also forgot to update the people, by which I mean train, educate, inform them about the key principles of agility, how to support it and how to take advantage of it. This resulted in many Project Managers applying traditional thinking and tools into agile projects. This included things like tightly managing scope and trying to fix it down early on; managing project progress and success based only on scope and time; requesting very precise estimates; measuring just velocity or worse, effort.


Rant: Cloud applications are s-l-o-w. Too s-l-o-w.

Chances are the offline office suite will have been faster than the online one. In some of my tests, working offline is three to five times faster. That's mainly due to the overhead of running code in a browser. Then there's the issue of internet connections, which are rarely perfect. They should be, I know. This is 2015, after all. But we don't even have perfect video-conferencing yet, as highlighted by this humorous article (NSFW). A lost connection can be infuriating when you're halfway through updating a document using a cloud-based application. If you're outside a 20-mile radius from Silicon Valley, this will be a factor. Microsoft has the right idea here. Its office suite lets you work online if necessary, but the offline software remains the primary productivity tool. So you can work in a fast, internet-independent office suite for most of the time, only using the online version when you need to.



Quote for the day:



"Don't look for ideas to confirm your thinking, rather look for trends that will disrupt your thinking." -- Rich Simmonds