August 24, 2016

A Portable Hard Drive Made For Mobile Streaming

Unlike its very thick predecessor, the My Passport Wireless Pro could easily be mistaken for a portable optical drive (you remember those, right?). Except that this enclosure sports a micro-USB 3.0 connector, a USB 2.0 Type A port (for charging other devices from the drive’s battery), and an SD memory-card slot (for transferring files—automatically on insert, if you so choose. You can push a button if you don’t.) The new model weighs in at nearly a pound--that's four ounces heavier than the original--and we're pretty sure it's attributable to the 6400 mAh battery. ... Streaming was a mixed bag of easy and not so easy. This wasn’t the Wireless Pro’s fault, but the uneven implementation of streaming protocols across platforms.


Android 7.0, Nougat: The complete FAQ

The way split-screen mode works in Nougat is pretty simple, though the function is a bit hidden: While using an app, you press and hold the Overview key (the typically-square-shaped button next to Back and Home). That splits the screen in two, with your current app on top (or left) and a list of your most recently opened apps on bottom (or right). ... Updated appearances aside, notifications in Nougat are bundled by app -- so if you have, say, three new email alerts from Gmail, they'll all appear within a single card in your notification panel. ... Android's Quick Settings gets far more useful with Nougat, thanks to a new set of always-present toggles on top of the regular notification panel (illustrated above) and a newly customizable set of tiles when you swipe down from that view.


Google's Cloud Bigtable Database Handles Petebyte-Scale Workloads

Google this week alsoannounced general availability of its Cloud Datastore managed NoSQL database service and talked up its existing and forthcoming support for applications built in Microsoft's ASP.Net environment. Cloud Bigtable is a technology that Google has used internally for several years. It powers many of Google's most heavily used services, such as Gmail, Search, Maps and Analytics. It is designed to handle very large data sets at high speeds. According to Google, that makes it well-suited for analytical and operational applications, such as financial data analysis, internet of things and user analytics. Google has previously described Bigtable as delivering more than double the performance of other NoSQL technologies, such as Cassandra and Hbase, while running faster and delivering a lower total cost of ownership.


IT Investment Uptick Triggered By Productivity Goals

"In the long-run, productivity gains are mostly generated through innovations in technology and in the way that businesses manage people and technology," Ira Kalish, chief global economist for Deloitte Touche Tohmatsu, wrote in the report. "One problem is that new innovations, while always exciting, don't necessarily lead to productivity gains immediately. Rather, it can take years before innovations are absorbed into the way businesses operate, only then causing gains in productivity that lead to faster economic growth." Looking ahead, those companies surveyed noted that the greatest opportunity is in internet of things-powered technology that tracks business processes, with the ability to track customer behavior and the possibility of tracking employee productivity high on the list of capabilities businesses said they were pursuing in this area.


34 Most Disruptive Technologies of the Next Decade

For those who associate the term "hype" with failure, realize that that's what this report is bringing into focus. Instead, it highlights "the set of technologies that is showing promise in delivering a high degree of competitive advantage over the next five to 10 years," Mike J. Walker, research director at Gartner, said in a statement. The phases of the hype cycle, as outlined in a graph created by Gartner, are as follows: Innovation Trigger, Peak of Inflated Expectations, Trough of Disillusionment, Slope of Enlightenment, and finally, Plateau of Productivity. Basically: There's a breakthrough, a flurry of press coverage touting successes, a bunch of failures that ultimately contribute to disillusionment, then people start to understand the technology more, and it goes mainstream.


Deconstructing the development mindset

A development mindset is a pattern of thinking and a way of looking at the world that invites ongoing opportunities for continuous individual and organizational transformation. It’s an abundant perspective that recognizes significance that others might overlook. Those with a development mindset appreciate that development is a state of mind, not a series of discrete activities or classes. ... Given the environmental impediments to promoting a development mindset, it would be easy to simply throw our hands up and declare defeat. But savvy leaders who understand the long-term benefits to individuals and the organization can choose to take steps to create more hospitable and supportive conditions for their employees.


Cisco well positioned to dominate cybersecurity market

The “big data” approach is the foundation of Cisco’s “Network as a Sensor” and “Network as an Enforcer” strategy. Because of its dominant share in networking, the company has more devices in more places than any other vendor. Also, it has a wealth of information available to it, including log files, NetFlow, DNS information, identity, IP address records and other network-related data that can help it quickly find anomalies and breaches. Industry-wide, the average time taken to find a breach today is 100 days. Cisco’s senior vice president and general manager of networking and security, David Goeckeler, told me Cisco could find breaches in 17 hours. I challenged him on this point and said 17 hours is still far too slow.


How to get your network and security teams working together

So, for a team focused on speed and availability, security can often be seen as a roadblock in reaching those goals -- and vice versa. "This becomes a problem when network professionals feel that security measures are red tape getting in the way of their processes, and security professionals feel that network team's expansion and development of complex architectures are opening up the system to potential attacks," says Vigna. It's not that security isn't important to networking professionals, it's just that it isn't necessarily their focus. And the same goes for security pros. They don't want things to run slower or to create more steps for people, but it is their job to keep things as secure as possible. And as it becomes increasingly important for businesses to avoid any security breaches -- both teams will need to shift their priorities.


An iPhone feature has exposed a biometrics security flaw

The vulnerability is unlikely to present a serious threat to security, for now. Banks that employ facial recognition technology generally use it alongside other security measures — like requiring users to have a lock on their phone or only allowing a customer's account to be accessed from a single registered device. Exploiting the weakness would also require a hacker to have both the victim's phone and a Live Photo of them, which is an unlikely scenario. But this development suggests that banks should think carefully about how they use biometrics. Only 9% of UK consumers are happy to use facial recognition as a means of identification, according to Experian, and stories like this are likely to further dent consumer confidence. This implies that banks should continue to use biometrics as an additional or optional security measure, rather than a replacement for existing methods.


New report confirms you need NoSQL, and probably in the cloud

NoSQL is not an option—it has become a necessity to support next-generation applications. And increasingly, enterprises of all types and sizes are embracing NoSQL to support their business technology (BT) agenda. A key strength for NoSQL is the ability to support scale-out architecture leveraging low-cost compute servers that are clustered to deliver performance of large, high-end SMP servers. In addition, its flexible schemaless model offers the ability to store, process and access any type of customer and business data. ... NoSQL delivers one side of the business agility equation, allowing for disparate data types at high velocity and volume. Public cloud takes care of the infrastructure side of the equation, enabling enterprises to grow or shrink resources according to data demands.




Quote for the day:

"A vision needs to be shared in a consumable way and integrated into business plans, each decision, each procedure and each employees' tasks." -- @RichMcCourt


August 23, 2016

Tiny $35 computer gets major new release of HypriotOS

The stripped back Debian-based OS comes pre-installed with a number of Docker tools for Raspberry Pi versions 1, 2, and 3, as well as the Pi Zero and the compute module. HypriotOS utilizes the pre-installed Docker Engine 1.12.1, and Docker's Swarm Mode helps spread containers between a multi-node Pi cluster, which could be helpful for developers looking to build a network of Internet of Things devices. To get up and running, users will need to install the HypriotOS flash tool on an SD card, which is then inserted into a Raspberry Pi. Booting up takes less than five minutes, according to Hypriot. HypriotOS developers have optimized the toolset to only require 600MB of disk space and have reduced the size of the download packages to 232MB. They're also promising security out of the box by, for example, removing the 'root' user by default.


Using an Agile Software Process with Offshore Development

Although world-wide Continuous Integration is resoundingly popular, we have run into some problems. Communication pipes aren't as wide and reliable as we'd like, so many source control operations can get awkward from a remote site. In general we keep the build servers in the same site as the majority of developers, but remote sites can find it takes an annoyingly long time to get a fresh update from the mainline. The longer the communication lines are, the more they are prone to anything from glitches to lines being down for a while. Having the repository accessible 24 hours makes it annoying to take it down to do backups. All of these issues would mitigated by a clustered code repository, but we haven't experimented with anything like that yet.


How Bitcoin Makes Each Of Us As Powerful As A Bank

“Bitcoin and the concept of the internet of money that it creates are this new model for a payment network that spans the globe, that has no borders, very much like the internet, that allows you to run financial applications that are controlled by software and, rather than political rules, are controlled by mathematical rules.” He says the fact that the network can process payments as small as hundredths of a penny or as large as billions of dollars will enable all kinds of applications that are impossible with the traditional financial system. Tune in to our fun and chock-filled conversation to hear why he says, “Bitcoin doesn’t care if you’re a person, a piece of software or an automatic dog-feeding bowl,” and for his far-out descriptions of how taxis and disaster relief could operate in the future.


Disrupting beliefs: A new approach to business-model innovation

Every industry is built around long-standing, often implicit, beliefs about how to make money. In retail, for example, it’s believed that purchasing power and format determine the bottom line. In telecommunications, customer retention and average revenue per user are seen as fundamental. Success in pharmaceuticals is believed to depend on the time needed to obtain approval from the US Food and Drug Administration. Assets and regulations define returns in oil and gas. In the media industry, hits drive profitability. And so on. These governing beliefs reflect widely shared notions about customer preferences, the role of technology, regulation, cost drivers, and the basis of competition and differentiation. They are often considered inviolable—until someone comes along to violate them. Almost always, it’s an attacker from outside the industry.


How to Mitigate the Top 3 Risks of Cloud Migration

Operational excellence is a key success factor for enterprise IT. However, building operations to support growth and business innovation, while maintaining day-to-day operations can be challenging. Clearly, the public cloud offers compelling agility to support rapid change and growth. But successfully moving existing applications to the cloud requires good process, along with good technology that can bridge the gap between heterogeneous cloud environments. As enterprise IT departments attempt to match data center supply with growing and often fluctuating demand from users, balancing between a situation of under-utilized resources and that of over-commitment, becomes essential. The cost-effective, pay-as-you-go nature of the public cloud can complement existing private cloud computing resources.


Across the pond: the EU-US Privacy Shield

For most companies, these requirements will mean updated privacy policies in dealings with customers and employees. Another key principle – the ‘choice’ principle – requires companies to offer individuals the opportunity to choose whether their personal data will be disclosed to a third party or used for a purpose that is different from the purpose for which such personal data was originally collected or subsequently authorised. Companies must respect individual choices and implement technical mechanisms so that data subjects may be informed, and be given the opportunity to opt out, of uses of their personal data. In addition, contracts with third party data processors will need to be reviewed to ensure that personal data will only be processed in a manner consistent with the basis on which the data was collected in the first place and with the level of protection required by the Privacy Shield.


Distributed Ledger Technology: What We Can Learn from Recent Blockchain Attacks

The security around private keys is a particularly relevant topic now given the recent hacking of the Bitfinex exchange in which bitcoins worth about $70 million were stolen. Although the exact details of the attack are not yet available, it is clear that the hackers were somehow able to access the private keys that secured customers’ accounts and steal the bitcoin.  Private keys can be thought of as secret codes or passwords that prove ownership of digital assets. Technology companies developing permissioned blockchains for financial services will need to completely rethink the multi-sig/cold storage approach currently employed by digital currency exchanges.


Security Soars As a Priority, But Many Struggle to Use Tech for Protection

“With tens of thousands of malware variants being generated each day, this lack of defense may leave an organization wide open to compromise,” the report notes. Hospital data security professionals continue to fight for adequate budgets and resources, Kim notes. On the non-acute side, which includes physician practices and other providers such as long-term care facilities, the data suggests they are paying more attention and money to address security, but there is not yet a trend of small providers fortifying their cyber defenses. These providers are aware of looming threats, “but may not yet be aware of the pervasiveness of cyberattacks,” Kim says. Further, only 42 percent of surveyed non-acute providers have intrusion detection technology, so they may not even be aware that an attack has occurred.


Third-party vendors -- your weakest link?

Corporate leadership must make third-party risk management a priority for it to be successful. Such a program requires resources, and often involves delays in the purchase of products and services while the related risk is assessed. Without strong support from the C-Suite, managers will simply ignore third-party risk, and just buy whatever they want whenever they get in a hurry. Third-party oversight should begin with a structured program, with proper documentation and procedures. The program must be an ongoing effort, rather than a one-time review. This should include complete analysis of each vendor BEFORE a contract is signed. For ideas on how to structure such a system, I would suggest that you review "Third-party risk management -- not just papering the file."


C Programming Language's Tiobe Rating Drops To Lowest Level

One of the main reasons for this drop is that C is hardly suitable for the booming fields of web and mobile app development. Moreover the C programming language doesn't evolve like the other big languages such as Java, C++ and C#. There is a "new" C11 standard available but this contains only minor changes. The constraint that C object code should remain small and fast doesn't help here. Moreover, adding C++ like features is also out of the picture because that's what C++ is for already. So C is a bit stuck. Yet another reason why C is getting into trouble is that there is no big company promoting the language. Oracle supports Java, Microsoft supports C++, C# and TypeScript, Google supports Java, Python, Go, Dart and JavaScript, Apple promotes Swift and Objective-C, etc. but none of them supports C publicly.



Quote for the day:


"Gratitude is absolutely the way to bring more into your life." – Joe Vitale


August 22, 2016

Why I should own enterprise mobile application development

The stand-alone apps can exist and operate without connecting to back-end data and services. My calculator app is an example of a stand-alone, as is my camera app. The enterprise mobile apps get data from and send data to my complex back-end applications for transaction processing. A mobile banking app does not store transaction histories or process payments on a mobile device. Instead, it connects to the heavy-weight, back-end transactional systems and acts as a mobile interface to those systems. Since my life revolves around enterprise applications, I spend the bulk of my time and attention on enterprise mobile apps. This makes me the right person -- perhaps the perfect person -- to take on enterprise mobile application development.


The NSA hack proves Apple was right to fight the FBI

While the company's legal team fought the order, Apple CEO Tim Cook published a letter arguing against being forced to build a so-called "backdoor" that would subvert the encryption that not only kept the shooter's phone secure, but millions of other users of Apple's smart phones. Most in the technology community rallied around Apple at the time, arguing that weakened encryption might help government investigators, but it would also make customers vulnerable to hackers. Now, with a massive top-secret archive of some of the NSA's own exploits having been leaked online, it appears they were right.


Mobile payments get Isaca’s security approval

The report points out that if a mobile device containing a mobile wallet is lost, the mobile device can be erased remotely. In addition, as the consumer’s payment card information is not on the mobile device, the payment cards do not need to be replaced. However, the report notes that users should have strong authentication for their mobile wallet applications, preferably a complex password and a biometric. The mobile wallet should use tokenisation and the number of transactions that can be processed with the phone should be limited to a small number of tokens stored in the phone. Mobile device owners should also set up or turn on the device locator/remote erase feature, so that they can remotely erase their device if it is lost or stolen.


ITSM: The 'what' and 'how' of digital transformation

When it comes to digital transformation, mobility is key. While most organisations have implemented an enterprise mobility strategy, risk, and security concerns are still preventing organisations from realising value from it. Having the right tools to manage risk and ensure security has never been more important. Over half of respondents said mobile ITSM is somewhat important to their digital transformation plans while just over a quarter said it’s 'highly important'. In the middle, just 12 percent said mobile ITSM was 'neither important or not important' while the naysayers who said it was 'not very important' or 'not relevant' were 7 per cent and 3 per cent respectively. Some of the key reasons why ITSM is changing the workplace of the future include the fact that service quality and customer satisfaction have become the biggest technology priorities for organisations.


The Most Critical Skills Gap: Cybersecurity

A new study released today by Intel Security with the Center for Strategic and International Studies (CSIS) takes a closer look at the cybersecurity workforce shortage across eight countries including Australia, France, Germany, Israel, Japan, Mexico, the U.K., and the U.S. Overall, it confirmed that the talent shortage was very real and widespread. The CSIS study revealed that 82% of participants report a shortage of cybersecurity skills in their organizations. One in four confirmed that their organizations were victims of cyber thefts of proprietary data due to this lack of qualified workers. The researchers reviewed open-source data, targeted interviews with experts, and a survey of 775 IT decision makers in both public and private sector organizations in eight countries.


Windows 10 browser beatdown: Who’s got the edge?

Not all web browsers are created equal. In fact, it might startle you a little to realize how diverse the range of top-end browser software has become, if you came of age in the era of “Internet Explorer or go home.” With about a third of all Windows traffic on the web coming from Windows 10 installs, according to figures from U.K.-based analytics firm GoSquared, and with Microsoft distancing itself from Internet Explorer in favor of the Edge just as fast as it can, it seems like as good a time as any to survey a few of the best browsing options for Windows 10 users. A word on methodology – I ran each contestant here through three benchmarks (higher scores are better in all of them – see graphic below) to give a broad sense of overall performance, and put each of them through their paces by using them for both work and play.


Why Online Retailers Should Be On High Alert For Cyber Attack

When we delve into the actual types of attacks seen by IT and security professionals in retail, we see some trends that on the surface may seem positive, but could point towards more troubling longer-term impacts. At Radware, we tend to consider attacks across three parameters: frequency, duration and complexity (generally measured by number of vectors). The retail space reports one of the lowest rates of frequency across the industries we survey. Only 17% say they see daily or weekly attacks, versus on average about 25% for other industries. Almost 40% say they only get attacked once or twice a year. These numbers could represent an over-reliance on certain attack detection technologies, or simply that many of the leaders in this space have effectively made themselves an expensive target for attackers.


Airbus to complete a self-driving, flying-car prototype next year

"We need to prepare for the greater use of unmanned aircraft in our urban environment to help address the new and future needs of our society," Kevin Shum, director-general of CAAS, said at the time. "We want to facilitate their use by industry and the public sector, and also hobbyists, but we must at the same time ensure that the regulatory regime keeps apace with these changes to enable such uses, whilst ensuring public and aviation safety and security." Up until recently, Airbus's autonomous flying vehicle project has been kept on the down low. Developers in several countries have taken on various aspects of the flying vehicle project. For example, in France and Germany, Airbus engineers are developing a bus-like flying vehicle under the project name CityAirbus.


ARM Has A New Weapon In Race To Build World's Fastest Computers

The new ARM processor design will be based on the 64-bit ARM-v8A architecture and have vector processing extensions called Scalable Vector Extension. Vector processors drove early supercomputers, which then shifted over to less expensive IBM RISC chips in the early 1990s, and on to general-purpose x86 processors, which are in most high-performance servers today. In 2013, researchers said less expensive smartphone chips, like the ones from ARM, would ultimately replace x86 processors in supercomputers. But history has turned, and the growing reliance on vector processing is seeing a resurgence with ARM's new chip design and Intel's Xeon Phi supercomputing chip. The power-efficient chip design from ARM could crank up performance while reducing power consumption.


Software Safety Ratings Could Help Cyber Insurers on Pricing

The initiative, if it catches on, could lead to major changes in the business practices of some of the world’s largest software companies. It could also, he says, help deliver something that decades of the free market, the open-source movement, government commissions and well-paid lawyers have not: software that is consistently secure, or at least very expensive to compromise. On Wednesday at the annual Black Hat security conference in Las Vegas, the duo were to xplain how their system works and point out some of the early winners and losers in their analysis. Among the preliminary findings: on Apple’s Macintosh computers, Google’s Chrome web browser is significantly harder to attack than Apple’s Safari, which in turn is much more secure than Firefox. Many Microsoft products have scored quite well so far, but its Office suite for Mac did terribly.



Quote for the day:


"To keep the body in good health is a duty... otherwise we shall not be able to keep our mind strong and clear." -- Buddha


August 21, 2016

The risky side of project management

Not all risks can or should be completely avoided. There will be times where this simply can't be done and other strategies should be considered. Getting to the point of knowing the best strategy can be dependant on many things such as priority, company policies, management outlook, external factors, stakeholder preference etc. ... Again, there really aren't any lone wolves in risk management, project outcomes impact everyone involved, and this makes each person accountable for playing a role in the execution of the risk management plan. That said, the project manager serves a pivotal role in identifying, documenting, communicating, preparing for, and managing the project risks.


Beyond bitcoin: the legacy of blockchain

Aside from currency, blockchain technology could be used to create secure exchanges of other high value assets or information in a peer-to-peer or business-to-business environment. For example, smart contracts could allow parties to enter into binding agreements, the terms of which are transparent to the anonymous parties, and property transactions could be carried out in online marketplaces with the removal of the estate agent intermediary. Banks are actively looking at blockchain technologies because of their ability to streamline processes and increase efficiency (particularly in areas like remittance, transfers, shareholder management and trading), and investors are increasingly backing start-ups developing blockchain applications or software.


Agencies face cyber concerns as apps rely on aging systems — report

“Cybersecurity, from a discussion perspective, has reached such a tenor that it’s a mainstream discussion across the entire United States,” Chehreh said. “The normal American… recognizes the value and importance of cybersecurity.” He added: “We must now operate in a very different manner to assure the privacy information that the civil agencies have is protected with the utmost that we can offer, and the most modern techniques and technologies.” Both Microsoft Windows 7 and Windows 8 have passed their "end of life," the release notes, but many respondents reported still using one of the two systems.  “We’re at a point and time within agencies' histories that we can no longer look at delaying modernization strategies,” Chehreh said.


Developing a global financial architecture

The lack of trust architecture is the defining stumbling block that keeps money from moving more easily to the developing world. In their Insights article A World Awash in Money, Bain & Company define trust architecture as strong property rights protections, reliable legal systems and institutional depth. What this really boils down to is safety and transparency: People want to see that the money they send across borders is going where it is supposed to. ... Much of the developing world has a ledger problem. Unsurprisingly, checking account penetration is significantly lower in developing countries, where only 41 percent of the population have accounts, than in the developed world, where 89 percent do. The differences are even more stark when you look at adults with only primary education (10 percent) or credit card holders (7 percent) in the developing world.


Blockchain Real Use Case: Land Inventory in Africa and Beyond

“As a decentralized exchange, OpenLedger allows digital currencies to be exchanged with each other as well as with fiat currencies. CCEDK is a partner who help with marketing and PR. They have a team of specialists who make B2B and B2C contacts, as well as produce literature and content related to the projects using OpenLedger. Kottackal is a company in India that helps tech companies enter the market and get prepared to scale with the global market. We are hoping that having them as auditing partners will help Bitland move into markets outside of the African continent with ease.” Bates also hints to Cointelegraph that his company will be meeting with government officials in another country next month, and while the name of the country cannot be disclosed at the moment, Bates says that it is a Western country not in Africa.


Data without Context is No Data At All

Information analysts and scientists are well aware of the importance of reference data. Every year, the Association of American Medical Colleges holds a conference focused on information technology in medical education and research. The event brings together leading academics and practitioners from medical centers across North America, and it’s always interesting and inspiring to see their forays into the frontiers of medical IT. This year, I had the opportunity, along with a wonderful colleague, to present on reference data management and ontologies, but it turns out that we were hardly the only ones thinking about reference data. Several presenters spoke of the necessity to corral enterprise taxonomies, ontologies, and controlled vocabularies to facilitate data integration, analytics and – above all – data governance.


Will the Internet of Things be bigger than the Industrial Revolution?

The Internet of Things (IoT) has been labeled as "the next Industrial Revolution" because of the way it will change the way people live, work, entertain, and travel, as well as how governments and businesses interact with the world. In fact, the revolution is already starting.  That brand new car that comes preloaded with a bunch of apps? Internet of Things. Those smart home devices that let you control the thermostat and play music with a few words? Internet of Things. That fitness tracker on your wrist that lets you tell your friends and family how your exercise is going? You get the point. But this is just the beginning. BI Intelligence, Business Insider's premium research service, has tracked the growth of the IoT for more than two years, specifically how consumers, businesses, and governments are using the IoT ecosystem.


Machine Learning Becomes Mainstream: How to Increase Your Competitive Advantage

You already know that machine learning is essentially a form of data analytics, but where did it come from and how has it evolved to become what it is today? In the past couple of decades, we have seen a rapid expansion and evolution of information technology. In 1995, data storage cost around $1000/GB; by 2014 that cost had plummeted to $0.03/GB (2). With access to larger and larger data sets, data scientists have made major advances in neural networks, which have led to better accuracy in modeling and analytics. As we mentioned earlier, the combination of data and analytics opens up unique opportunities for businesses. Now that machine learning is entering the mainstream, the next step along the path is predictive analytics, which goes above and beyond previous analytics capabilities.


Cyber espionage: A new cold war?

According to three cyber security companies that declined to be identified, the Shadow Brokers is mostly likely run by Russian intelligence. “There is no digital smoking gun,” said one analyst. But the circumstantial evidence is compelling, analysts say. And the list of other potential nation-state actors with the capability, wherewithal and motive is short. “The fact that the Shadow Brokers did not exist before, appeared at this time and are using intelligence that has been saved up until now suggests this is all part of some deliberate, targeted operation, put together for a particular purpose,” says Ewan Lawson, a former cyber warfare officer in the UK’s Joint Forces Command and now senior research fellow at RUSI, the think-tank. “That purpose looks like it is to highlight perceived US hypocrisy.” Russia, he says, is the obvious perpetrator.


Is blockchain revolutionary, or just another infrastructure support technology?

Stefan Thomas, one of the moving forces behind Bitcoin, is having second thoughts on the technology that underpins the cryptocurrency. In a recent piece posted on Medium, he stated that "as a blockchain grows, the larger and highly vested user base becomes more and more difficult to shepard." Thomas' doubts have grown since watching the progress of Ethereum, the blockchain-based smart contract and cryptocurrency platform open for all to use. Achieving "shared state" across a massive developer and user base is proving problematic, he opines. "In any protocol, everyone has to act the same. But in a blockchain like Ethereum, everyone has to think the same. Everyone's memory has to be exactly the same and evolve according to the same rules.



Quote for the day:


"The easiest way to lose power is to cling to it too tightly." -- Gordon Tredgold


August 20, 2016

Respect Your Organisational Monoliths

DevOps and agile initiatives (like Scrum) are being more widely adopted in our organisations. However, to successfully enable these methodologies and way of working, it is important to engage the teams and departments in the company that are responsible for "protection". Like your partner, these are the teams where you need to show the love. Without engaging these teams you are working against your own group and run the risk of creating an “us vs. us” environment. To enable DevOps to be successful in my organisation I had to engage with many such groups. I will specifically mention the security group. Most (financial) organizations have a dedicated security group. I went to my security group with a DevSecOps story. ... To get engagement from group security we had to examine and explain our product testing and test driven development strategy more closely.


The 3 Scariest Infosec Threats

“The high-profile hacks are usually pretty sophisticated, but the reality is far more of the threats to information come from human beings doing dumb things,” Tuma said. “Failure of the basics of blocking and tackling of infosec, not the ultra-sophisticated stuff, is where we see the most incidents. Yet companies spend more time and resources focusing on addressing the sexy stuff instead of the basics.” ... Another looming threat comes from the Internet of Things “and the lack of standards that exists as we start to connect these devices, sensors, mobile computers (and more) to our existing major networks and enterprise technology stacks,” said Adrian Bridgwater (@ABridgwater), a software technology journalist.


Report finds health, fitness apps lag in privacy polices

“While consumers might reasonably expect that any app that collects health and fitness information would be more than likely than general purpose apps to describe its privacy policies and practices, that is not always the case,” the authors write. “Given that some health and fitness apps can access sensitive, physiological data collected by sensors on a mobile phone, wearable, or other device, their below-average performance is both unexpected and troubling.” Top paid health apps trail behind general apps, the report found, with free apps marginally better at offering privacy polices. When the researchers examined sleep-tracking apps, only 66 percent had any privacy policy, and only a little more than half of those apps linked to their privacy policy from the app store.


How the internet of energy will herald in the hybrid home

That vital combination of digital intelligence and analysis will enhance the performance of energy systems and improve energy efficiency. It’s why the Government is putting so much effort behind the smart metering scheme – with everyone in the country equipped, householders will get information about how much they are spending on energy in real-time. That way, they can do something about it, save money and reduce their emissions into the bargain. Instead of energy being under someone else’s control, we are entering an era where householders have a choice. But while meters have been hailed as one of the key smart solutions that will transform the energy industry, there’s so much more that smart technology can do, which brings us to the hybrid home.


Riding on the Internet of Things to become a smart nation

The adoption of IoT technologies will be a key component for smart nation services and enable the exploitation of technology and innovation to address challenges, such as the increased strain on healthcare facilities and resources, traffic planning and congestion prevention, with the aim of enhancing residents' quality of life. As business cases are refined, you can scale technology solutions to the enterprise. There is no need to reinvent the wheel for IoT initiatives. Activating and connecting existing infrastructure could also leapfrog some implementation steps. Establishing appropriate protocols to ensure connectivity, public safety, cybersecurity and fairness will be a complex undertaking, but essential for future success. In line with this, our government must also transform how it regulates industries, develops new policies and undertakes procurement.


AI is booming, but can the benefits live up to the hype?

"This is not hype; it's real and sustained progress, which accelerates research," he said. He's also not convinced that funding will be impacted. "Funding is currently diversified between government agencies and industry, so it is unlikely to dry up," he said. "The market has a huge appetite for new AI capabilities and government is very interested in military and security applications. If anything, the funding will become even greater." "Plus," Yampolskiy added, "now it is possible to crowdfund good ideas." Aside from potential concerns about funding, some believe that conflating machine learning with AI is a problem. "There's likely a lot more involved in building intelligent systems than deep learning," said Toby Walsh, professor of AI at the University of New South Wales. "Unlike humans, deep learning needs lots of data."


Cybersecurity Is Broken And The Hacks Are Going To Just Keep Coming

If any evidence was needed for cybersecurity’s growing importance as an industry, you wouldn’t need to look much farther than the overcrowded booths on the stage floor at Black Hat and the VIP parties thrown by various corporations, ranging from Nike to Microsoft, that surround the event. The annual conference began as the more formal, industry-focused, sister to the unruly DefCon, or as it is sometimes called, hackers’ summer camp. If it seems weird that a conference for security professionals would be held back-to-back with the world’s largest hackers conference, then you don’t understand just how symbiotic the two groups are. Cybersecurity companies need hackers like defense companies need former army generals.


JUnit 5 - An Early Test Drive - Part 2

In the olden days test methods were not allowed to have parameters. That made sense then, because after all, what could JUnit possible pass for them? For version 5 the team answered this question with “Whatever you want!”. So now test methods can have parameters. For each parameter, JUnit will search for an extension to provide a value. Two such extensions are built in, and they can be used to inject aTestInfo or a TestReporter, but neither is terribly useful for everyday test writing. More interesting is the MockitoExtension, which will inject a mock into each parameter that is annotated with @InjectMock. It demonstrates how the extension API, although still a work in progress, can already be put to good use.


SurFlow: Data at 6Gbps across your table, walls or the wings of a spaceship

By creating a fast networking technology that works on the fabric of a construction, the owner of the patent, TWI could make a fortune. Being a UK company, the technology won’t be ruthlessly exploited in the country of origin, but the benefits will be enjoyed in many other industrial nations, if past experience is anything to go by. British companies have a habit of inventing things and allowing others to exploit their commercial benefits to the full. For example Graphene, an extraordinary allotrope of carbon that is 100 times stronger than steel and conducts electricity highly efficiently, was isolated and characterised in 2004 by Andre Geim and Konstantin Novoselov at the University of Manchester, but today the majority of patents are held by non-UK companies.


How your contact lenses could talk to your phone

The research is funded by the National Science Foundation and Google Faculty Research Awards. Google has shown particular interest in the technology and was conducting its own research into smart contact lenses that can test diabetics' blood glucose levels two years ago. Using wireless chips and miniaturized glucose sensors embedded between two layers of soft contact lens material, the smart lenses were being designed to test blood sugar levels in the user's tears. When it announced the research in 2014, Google said its scientists were experimenting with using LED lights in the lenses to alert users if their glucose levels were off. The UW research could solve the communications problem for many devices, including sensors and credit card, as well as contact lenses.



Quote for the day:


"Small opportunities are often the beginning of great enterprises" -- Demosthenes