Daily Tech Digest - July 26, 2019

IoT’s role in expanding drone use

IoT̢۪s role in expanding drone use
Iris Automation, not surprisingly, is in the business of creating workable collision avoidance systems for drones in an attempt to solve this issue. Variously called “detect and avoid” or “sense and avoid” technologies, these automated solutions are required for “beyond visual line of sight” (BVLOS) drone operations. There are multiple issues in play. As explained on Iris’ website, “Drone pilots are skilled aviators, but even they struggle to see and avoid obstacles and aircraft when operating drones at extended range [and] no pilot on board means low situational awareness. This risk is huge, and the potential conflicts can be extremely dangerous.” As “a software company with a hardware problem,” McKenzie said, Iris’ systems use artificial intelligence (AI), machine learning, computer vision, and IoT connectivity to identify and focus on the “small group of pixels that could be a risk.” Working together, those technologies are creating an “exponential curve” in detect-and-avoid technology improvements, she added. The result? Drones that “see better than a human pilot,” she claimed.


How artificial intelligence can tackle climate change

AI can also unlock new insights from the massive amounts of complex climate simulations generated by the field of climate modeling, which has come a long way since the first system was created at Princeton in the 1960s. Of the dozens of models that have since come into existence, all represent atmosphere, oceans, land, cryosphere, or ice. But, even with agreement on basic scientific assumptions, Claire Monteleoni, a computer science professor at the University of Colorado, Boulder and a co-founder of climate informatics, points out that while the models generally agree in the short term, differences emerge when it comes to long-term forecasts. “There’s a lot of uncertainty,” Monteleoni said. “They don't even agree on how precipitation will change in the future.” One project Monteleoni worked on uses machine learning algorithms to combine the predictions of the approximately 30 climate models used by the Intergovernmental Panel on Climate Change.


How the CIO role in healthcare has evolved at Northwell Health


It's a lot about how these new innovative technologies are going to take hold as time goes along and how they're going to change the model of how we deliver healthcare. One example might be bed throughput in our hospitals. Our hospitals are very busy, so how quickly we can get patients through them is very important to us so they're not sitting in the ER longer than they need to be. There have been bed management programs on the market for a lot of years. Many hospitals use them, big and small. And they operationally help you to move patients through your hospital faster. If we could take new technologies that are artificial intelligence-based with machine learning algorithms behind them and we can start to predict, in addition to the actual management of the beds, how likely is it they're going to get admitted, how likely is it they're going to go to the ICU, how likely is it that a patient is going to be discharged over the next few days.


Louisiana declares emergency over cyberattacks targeting schools

It’s the first time in Louisiana’s history that a cyberattack is being addressed like a disaster, but there is precedent for this approach. Colorado became the first state to treat a cyberattack like a major disaster in March 2018 after its Department of Transportation was compromised by the ransomware virus known as SamSam. That declaration, by then-Gov. John Hickenlooper, came after more than a week of the Office of Information Technology struggling to repair nearly 2,000 infected devices with a small staff working long hours and subsisting on junk food. Following Hickenlooper’s emergency declaration, oversight of the response to the cyberattack was given to the Colorado Office of Emergency Management, which adapted its natural-disaster playbook for an IT security situation, creating a unified command structure and bringing in the National Guard and support personnel from other states.


How to cautiously reap the benefits of DevOps as a service


Before DaaS adoption, carefully weigh its unique benefits and challenges. A DaaS provider offers access to more mature reporting tools out of the box that inform developers, as well as product and technical stakeholders, about ongoing project health and security. Additionally, cloud-based DevOps tools support collaboration between on-site and remote team members and facilitate data-driven processes, since staff can more easily work with the same data sets. DaaS also facilitates faster testing and deployment because it enables developers to scale compute and data storage on demand based on project requirements. But outsourcing to a DevOps-as-a-service provider isn't without its challenges. First, in-house development and operations teams still must manage the complexities of integration and workflow orchestration.


Transitioning GDPR preparations into successful operations

GDPR is also about value and trust in data, a central element of information governance. Information governance encompasses, among other things, information security or, at a digital level, cybersecurity. There are many organizations that were taken in with checklists and companies offering one-stop technological solutions, without taking the necessary steps to understand how personal data flows through the organization, as opposed to designing and implementing a framework that will fit with the culture and ways of working of your organization. Then there are those organizations that complained “it’s not fair” and placed it on the “too difficult to do” pile. On many occasions, senior stakeholders have told me that they could not see how GDPR affected them as they didn’t collect, store or process personal data – in all cases they had failed to grasp that employment data was personal data. Absorbing GDPR into business as usual requires a holistic approach to information governance.


A data breach forced this family to move home and change their names


As reported by the Hackney Gazette, a family in the area adopted a child and the details of who they were and where they lived were meant to be withheld from the birth parents.  However, during the adoption process in 2016, a solicitor appointed by Hackney Council mistakenly included an unredacted copy of the application form. The publication says that the exposed, sensitive data included the couple's names, addresses, phone numbers, dates of birth, and occupations. The scope of the breach was serious enough that the couple spoke to both the council and police, and ultimately decided that moving home and changing their names was the safest option for their adopted child.  Hackney Council acknowledged their mistake and paid out £106,000 ($131,000) in damages, which also helped facilitate the house move. The council apologized to the couple for the "human error." The UK's Information Commissioner's Office (ICO) was also notified. The data watchdog said that the breach had "potential to cause significant distress and detriment," but no further action was required beyond the council's compensation offer.


Why investment is needed in the cyber insurance market


While insurers are missing out on a considerable business market and will look to stop silent cyber, companies that use these commercial policies may also be putting themselves at risk of a complicated claims process that may be ultimately rejected. As such, businesses and insurance firms must work together to develop the cyber insurance market. Insurance policies can be a lifeline for companies when unexpected events or issues occur, that lead to significant damage or loss to the company in some capacity or another. Standard insurance policies can cover several categories, including public liability and property. Yet when a cyber attack on a business damages property or stops business operations, it is unclear whether a company’s business insurance policy will cover the resulting claim.  This lack of clarity has come to a head in the Mondelez vs Zurich legal battle currently taking place. Insurance firm Zurich is refusing to pay out a $100m claim from food conglomerate Mondelez following a cyber attack. 


The Mesosphere Data Center Operating System (DC/OS) is a distributed OS that runs across a cluster. It's based on the open source kernel Mesos -- similar to the Linux kernel -- which abstracts IT hosting resources. Mesos uses a master/agent architecture, whereby a master daemon controls the agent daemons that run on nodes within the cluster. Because DC/OS is a distributed system, it lends itself to distributed applications. For example, an enterprise could use Mesosphere and its distributed architecture to run large and complex data processing software for a big data initiative, such as Apache Cassandra database or Apache Spark data analytics engine, across abstracted virtual and physical resources that act as a single entity. Mesosphere DC/OS enables greater scalability for those systems, since the OS spans more than one machine, and also simplifies node configuration across a cluster. 


smart city / internet of things
Worse still, some legacy systems can be downright impossible to manage and update in a safe way. Older technology often contains no provision for live updates, and its vulnerabilities can be severe, according to the report. Physical access to some types of devices also remains a serious challenge. The report gives the example of wastewater treatment plants in remote locations in Australia, which were sabotaged by a contractor who accessed the SCADA systems directly. In addition to the risk of compromised control systems, the generalized insecurity of smart city IoT makes the vast amounts of data that it generates highly suspect. Improperly configured devices could collect more information than they’re supposed to, including personally identifiable information, which could violate privacy regulations. Also, the data collected is analyzed to glean useful information about such things as parking patterns, water flow and electricity use, and inaccurate or compromised information can badly undercut the value of smart city technology to a given user.



Quote for the day:


"Your greatest asset is your earning ability. Your greatest resource is your time." -- Brian Tracy


Daily Tech Digest - July 25, 2019

Beyond software development: the power of low code

Beyond software development: the power of low code image
The more efficiently the apps are developed and deployed, the better. Sometimes, businesses don’t need a Mercedes when a reliable Volkswagen will do the job just fine. The low code movement is indicative of how development is changing. Platforms including VisionX can be used by different types of users at various levels of expertise. Experienced developers can create apps faster using less time and resources, and without getting sidetracked iterating on problems that are not core to what the application is designed to do. On the other hand, less technical users can build apps in a controlled way via a visual design interface. The result is a repeatable process throughout the organisation to create sound applications faster. The easily replicable templates are at the core of the process, but along the way are powerful tools for greater customisation, advanced data modelling, automated logic, and flexible deployment so that the responsive applications work seamlessly across desktop, mobile, and other form factors.


Humanity at Work: Interview With Rich Sheridan, Author of Chief Joy Officer

In order to truly begin to understand what joy means in the workplace, we need to delve into the sort of things that are less visible, into questions such as: Why do we exist? What do we believe about ourselves? Who do we serve, and what would delight look like for them? Human energy lifts the spirit of your team, and purpose drives it forward. A shared purpose gives us that sense of why we work so hard every day on a particular goal, which in Menlo’s case is to delight those people we intend to serve. Energy and purpose are really at the root of what makes Menlo a joyful place to work — and then of course there are the other things we do as well that add joy to the room. There's no question that laughter, as an example, is part of joy. there is a component of joy that is happiness and while we may not be happy every minute of every day because the work we do can be challenging, I think we do need to carve out space and activities for having fun, being playful, cheerful and supportive.



Most digital transformation efforts do not have visibility. If anything, consumers underestimate the number of businesses that are investing heavily in every customer experience outcome by at least 50 percent. Consumers also are not giving businesses credit for the level of investments they are making. Conversely, businesses are not listening to – or understanding – the needs of customers. Most digital transformation is internally focused -- 68 percent of initiatives are business process centered, while only 28 percent were customer experience centered. A meager handful, four percent, consider their initiatives to be employee experience centered. It appears that a greater outward focus pays off for the business. A majority of customers, 62 percent, would spend more money if their digital experiences "feel effortless." The leading companies in the study "consistently recognize the need for change and they are prepared to take risks," the researchers report. "They have agile, customer-focused organizations that recognize digital transformation is a cultural change, not just a technological change."


Answer These 9 Questions to Determine if Your Data Is Safe

Do you incorporate "privacy and security by design" in your environment? - Privacy and security by design are methodologies based on proactively incorporating privacy and data protection from the very beginning. This approach follows seven principles for implementing growing processes within your IT and business environments. Advocating privacy and security early on in your design process for specific technologies, operations, architectures, and networks will ensure you are building a mature process throughout the design life cycle; Is sensitive data encrypted during transit and at rest? - Encryption keys are vital to the protection of transactions and stored data. Key management should be deployed at a level commensurate with the critical function that those keys serve. I strongly recommend encryption keys be updated on a regular basis and stored separately from the data. Essentially, data is always being pushed and pulled and protecting that information as it moves across boundaries should require strong encryption at rest and while in transit.


Predictive Analytics & Insights Discovery Were Made For Each Other


With the combined power of predictive analytics and prescriptive analytics (derived from insights discovery in big data), we can explore more insightful data-driven “what-if” decision scenarios. This type of “what-if analysis” can foresee the ripple effect of various alternative decisions that adjust different elements in our operations. When we use prescriptive analytics to turn the dials of those elements—either singly or in combination—we can see the implications across the entire landscape. The outputs of prescriptive analytics are particularly helpful in assessing risk, such as when making a strategic decision, or in deciding whether to make cuts or investments. Predictive analytics evaluate the risk of current conditions continuing on their current path, expressing the risk as a mathematical probability. Prescriptive analytics evaluate risk in new scenarios that unfold based upon different decisions, treatments, and options that we might choose to take. This is powerful insight when balancing priorities and considering tradeoffs.


Transformation Without Technology

When legacy companies mistakenly believe that adopting new technology is itself the central strategy for adapting to a digital world, they miss the important organizational and strategic changes that are legitimately essential to survival and prosperity in a dramatically changing environment. Focusing first on the nontechnological changes required for adapting to a digital world — those involving talent, leadership, culture, organization structure, and strategy — helps companies better understand the problems they face and explore other changes that may be necessary before locking into a technological solution. Yes, these same companies may also need to invest — often substantially — in new technology, but when they do, those investments will be focused quite differently than if they had dived headlong into technology as the starting point. In our book, we use the metaphor of the cyclone in The Wizard of Oz to describe the role of technology in digital transformation. We ask, “How much of the story of The Wizard of Oz is about the cyclone?” On the one hand, all of it is.


Kubernetes policy project takes enterprise IT by storm


"Treating compliance as code means adopting best practices from the software development process," Ryan wrote. "One of these is Don't Repeat Yourself. Decoupling policy from applications, and reusing policy definitions in multiple locations, is a good implementation of this rule." As Kubernetes environments grow to encompass Istio service mesh and Knative event-based orchestration in what Google calls the open cloud stack, the fact that OPA lends itself to Kubernetes policy enforcement but can expand to include those adjacent utilities boosts its appeal. "There's a lot of promise in how we might scale and better leverage OPA as the ecosystem grows," said Andy Domeier, senior director of technology operations at SPS Commerce, a Minneapolis-based communications network for supply chain and logistics businesses, which uses OPA in production.


Does Your Company Need That Chatbot?

uncaptioned
In using chatbots, you’re relinquishing control of a wide range of customer data to AI. How will you keep it safe? What outer boundaries have you established to ensure it won’t be shared beyond your chat or phone call? What pieces of the chat will you keep, and which will you ditch in the name of data security? Companies like Bank of America have chosen to service customers on their own site or app, where they have complete control of the chatbot experience. Others, like Butterball, have decided to work with established platforms like Alexa, to field customer questions through Alexa’s “skill” platform. Obviously, questions about one’s personal finances need higher security than those about one’s Thanksgiving turkey recipe. Only you know the security requirements that will best fit your customers and industry. Just by the nature of AI taking time to learn what it needs to know, you need to understand that your chatbot won’t work perfectly straight out of the gate. As noted above, it may need to field thousands of inquiries to understand a customer’s intent or desire perfectly. Only you can answer the question: Is it really worth the effort?


Public cloud winners take all

Public cloud winners take all
As before, AWS, Microsoft, and Google make it into the Leaders quadrant. And as before, everyone else is largely a rounding error. For example, Alibaba gets credited as the top cloud in China, but Gartner also points out that “Alibaba Cloud’s financial losses are increasing and may prevent the company from continuing to invest in necessary expansions.” Not good. Meanwhile, Oracle keeps selling almost entirely to existing Oracle accounts (who presumably can’t escape), with little hope of expanding: “Oracle is unlikely to ever be viewed by the market as a general-purpose provider of integrated IaaS and PaaS offerings.” IBM gets much the same treatment. Which leaves us with the three leaders. Little has changed in Gartner’s assessment of AWS, Microsoft Azure, and Google Cloud. AWS, unsurprisingly, gets credited as “the most mature, enterprise-ready provider” and, as such, “enterprises make larger annual financial commitments to AWS” than other cloud providers. Microsoft keeps using its enterprise heft to drag Azure into its hitherto on-premises customers, while Google Cloud keeps getting noted for innovative technology


Informatica makes the case: Why data needs AI and vice versa


In a briefing a few weeks back, Informatica made a case for why data quality and data integration has outgrown the ability of humans. It starts with the torrents of data and the nature of the data. When you are tapping the social media or IoT firehose, you are often dealing with ingesting terabytes of data at a time. As multi-structured data, schema is far more complex. So far, this is not a case of ordinary CSV customer or product order files where, even if the schema is not consistent, it may be fairly straightforward to identify what's a name or what's a numerical field such as an order number, SKU, part number, phone number, tax ID, or social security number. Here, data prep tools emerged that used a modest level of machine learning to conduct pattern matching to identify the columns and how the columns of different data sets should be transposed or merged. Instead, the challenge is munging files where the data structure is far more cryptic and variable to the point where humans may not be able to parse it without some machine assist.



Quote for the day:


"What I've really learned over time is that optimism is a very, very important part of leadership." -- Bob Iger


Daily Tech Digest - July 24, 2019

Business Intelligence in Microservices: Improving Performance

microservice design
One of the main benefits of the microservice design is its scalability. You can scale several services without changing the whole system. So, you save resources and keep the app less complex. One of the most famous cases that prove this fact is Netflix user base. The company had to cope with the growing subscribers’ database. The microservice design was a great solution for scaling it. Each microservice needs its own database. Otherwise, you can’t use all the benefits of the modularization pattern. The variety of databases leads to challenges in the reporting process. We will discuss the problem later. Microservice design speeds up app development and allows us to launch the product earlier. ... The process of generating reports required engagement with different services. Thus, it caused performance issues. That’s why Freshcode team decided to optimize the app architecture by creating a separate reporting microservice. It received data from all the databases. Then, it saved them and transformed into custom reports.



Supervised Learning

Supervised Learning is one of the two major branches of machine learning. In a way, it is similar to how humans learn a new skill: someone else shows us what to do, and we are then able to learn by following their example. In the case of supervised learning algorithms, we usually need lots of examples, that is, lots of data providing the input to our algorithm and what the expected output should be. The algorithm will learn from this data, and then predict the output based on new inputs that it hasn’t seen before. A surprising number of problems can be addressed by using supervised learning. Many email systems use it to classify emails as either important or unimportant, automatically whenever a new message arrives in the inbox. More complex examples include image recognition systems, which can identify what an image contains purely from the input pixel values.


Ransomware: Why cities have become such a big target for cyberattacks


While some cities, such as Baltimore and Atlanta have opted to spend millions on rebuilding systems rather than giving into the demands of attackers, others have made the decision to pay, authorising their insurers to negotiate with the cybercriminals because it appears to be the simplest short-term option. It's possible that criminals aren't targeting cities on purpose, rather they're searching for any internet facing vulnerabilities they can find. However, it's also possible that groups have become aware that cities are easy pickings. Councils running small and medium-sized cities aren't flush with funds, meaning IT security doesn't have the investment it requires and security holes are left open. And, with a population totalling over 327 million people, there are thousands of small cities in the USA which make perfect targets for attackers. "These organisations are usually less secure then private institutions, they're not as cybersecurity-orientated. They're very prone to cyberattack -- and if something goes wrong, they can lose everything," says Marina Kidron, director of threat intelligence at Skybox Security.



Best practices for building an information governance program that will last

You need to make the case for change by creating the conditions that cause change. The best way to do this is through policies and procedures driven by laws, rules, regulations, standards, guidelines and best practices for managing the lifecycle of information. For example, I recently identified that a group within the agency had a process for storing information that resulted in multiple copies of PDFs being stored in multiple locations. I pointed out the IG issues with the process, but there was some resistance to change: “This is how we’ve done it for a long time, and there are good reasons for doing it this way.” Instead of arguing about process, I focused on changing the RIM policy to address how document drafts and extra copies are managed and disposed of. With that new policy in place, when I do assessments across the agency, I can point to the compliance policy as the rationale for change. Groups are far more receptive to change when compliance with clear policies are at stake.


Growing opportunities in the Internet of Things


The connectivity layer of the IoT technology stack is most tightly bound to mobile-network operators that offer standard cellular connectivity. A small number of well-financed start-ups have targeted this layer of the stack and have made progress in subsegments such as low-power wide-area connectivity. Connectivity technology occupies a still-growing market that’s strongly influenced by international standardization in this technology layer. In the third layer of the stack is cloud computing (which facilitates central processing and storage of data) and enablement platforms (which facilitate access to devices, data across devices, and connectivity standards). Complementary analytics and computational tools have emerged to interpret, visualize, and produce insights from device data. Together, these platforms have proliferated and developed over the past five years and now simplify device integration and application implementation—a favorable growth outlook for key players. The final and top layer, business applications, will continue to be highly fragmented, with many disparate solutions and established companies coexisting with significant start-up activity. 


Malware-based Attacks Dropped 20% Worldwide

Much of the malware decline has to do with the popularity of so-called fileless attacks and attackers using legitimate Windows and security tools to drill down deeper into their victim's network. Some regions had very different stats, the study found: the US experienced the most dramatic drop in malware attacks - 17% - while Switzerland was hit with a 72% jump in malware attacks. They're also abusing encrypted channels such as HTTPS and SSL-based VPN channels to camouflage their traffic and malicious code. SonicWall has seen some 1,100 encrypted attack attempts per day per customer, Conner says. Many organizations mistakenly assume encrypted traffic is legit traffic, he notes. The attackers are able to place malware in a file and "come through that Web channel and via that VPN," he explains. "They either go to the HTTPS site or right to the end user's desktop."


Businessman touching internet of things in 5G network showing the push of 5G IoT market towards edge computing
Technology has evolved over time from storing data on a central mainframe, then to personal computing, and later to cloud computing. Edge computing is the next logical step in this progression. This next evolution is only possible because devices are stronger yet cheaper to produce. The expectation of perennial internet connection means modern devices come loaded with additional computing power, and progressing to these agile devices is simply not as expensive as it once was. Consider the retail prices of small SD or USB flash drives, then reverse calculate for factory prices. Contemporary cloud data is primarily hosted by, well, cloud servers – which means it is primarily hosted by a handful of multinational tech companies. For example, Amazon’s public cloud accounted for 47 percent of the market in 2017. However, the increase to capable devices throughout the modern home makes edge computing not only viable, but practical. Instead of hosting personal data on the leased cloud storage of a company, why not keep it at home on the devices that produced the data?


Bosque: Microsoft’s New Programming Language

Bosque is heavily inspired by TypeScript syntax and types, as well as the semantics of ML and Node/JavaScript. If you have a JavaScript background, Bosque should look familiar and feel pretty natural. In an attempt to improve upon the structured model of the 70s that most people know and use in many programming languages, Bosque aspires to be a language for modern developers and shuns a lot of the complexity traditionally associated with programming languages. The team wondered if you started from a blank slate, with modern development needs in mind, how would you design a new programming language. Mark has always had an interest in semantic programming, creating a compiler is a natural extension of this interest. One of the other aims of Bosque is to create a language that is easier for machines to understand, and by reducing some language boilerplate, this is simpler. It also aids the development of developer tooling such as IDEs and IDE plugins; an important area of business for Microsoft.


Zuckerberg responsible for Facebook privacy compliance after $5bn FTC fine


Facebook CEO Mark Zuckerberg will also be personally responsible for the company’s data protection practices, having to report to the FTC every three months to prove that user data is being safeguarded adequately. The order also imposes other significant privacy requirements on Facebook, including prohibiting it from using telephone numbers obtained to enable two-factor authentication for advertising, requiring it to provide clear and conspicuous notice of its use of facial recognition technology, and forcing it to establish and maintain a comprehensive data security programme. “The magnitude of the $5bn penalty and sweeping conduct relief are unprecedented in the history of the FTC,” said FTC chairman Joe Simons. “The relief is designed not only to punish future violations but, more importantly, to change Facebook’s entire privacy culture to decrease the likelihood of continued violations. ...”


Do you really know what’s happening with your servers?

As performance optimization is pushed from an ever more demanding user base, the need to use the right platform for the right jobs is becoming key. With the demand for more servers on more platforms increasing, the ability to spin these up (and down) in the cloud becomes an easier route than on-premises hosting. In fact, there has been a 15% increase in people using SQL Server in the cloud for at least part of their estate in the last year, with the use of hybrid estates becoming ever more common. For example, it may be that organizations chooses to retain sensitive data on on-premises servers, while data that is not classed as personally identifiable information (PII) is located in the cloud. With your data spread across different server platforms in different locations in such a way, maintaining an overview of estate health becomes a lot more difficult. As a result of all these changes, migrations are also becoming a headache. From ensuring servers are on the latest version, to transferring data to cloud platforms, respondents to the survey revealed that migrating servers will be their biggest challenge this year.



Quote for the day:


"Effective team leaders realize they neither know all the answers, nor can they succeed without the other members of the team." -- Katzenbach & Smith


Daily Tech Digest - July 23, 2019

How to establish a security culture within IT

network security lock padlock breach
In the current age of widespread security awareness, almost every enterprise has established a security program. A security program consists of policies established by the CISO or ranking security leader, operational controls that enforce the policies, work rules and procedures that implement the controls, tools that support the rules and procedures, and a security operations team that employs the tools to monitor the rules and procedures and audit the consistency and effectiveness of the controls. This sounds complicated but the key components of a successful security program are well understood by most IT shops and have been implemented to one degree or another in most enterprises. A security program and a security culture are two different things. In a security culture employees have an informed understanding of the cybersecurity threats that confront their companies. They understand the motivations and intents of the malicious actors that operate within their industries or markets. Cybersecurity issues and concerns are routinely discussed in normal business meetings such as quarterly business reviews, business strategy sessions, budget planning meetings, M&A evaluations, etc.



Google debuts better transcription, endless streaming, and more in Contact Center AI


Increased contextual awareness and enhanced speech-to-text aren’t the only new natural language understanding improvements coming down the Contact Center AI pipeline. Google debuted in beta today “richer” manual speed adaptation and entity classes, in addition to expanded phrase limits, endless streaming, and more. There’s a trio of new features within SpeechContext parameters, the collection of Cloud Speech-to-Text settings and toggles that tailor transcriptions to businesses’ and verticals’ vernaculars. SpeechContext classes — prebuilt entities reflecting concepts like digit sequences, addresses, numbers, and money denominations — optimize ASR for a list of words at once. As for SpeechContext boost, it helps adjust speech adaptation strength while cutting down on the number of false positives — i.e., when a phrase wasn’t mentioned but appears in a transcript. Lastly, SpeechContext now supports up to 5,000 phrase hints per API request, increasing the probability uncommon words or phrases will be captured by ASR.


Data breach costs on the rise and the financial impact will be felt for years ⁠— IBM

Data breach costs on the rise and the financial impact will be felt for years ⁠— IBM image
Those organisations that experience data breaches, whether large or small, and aside from the reputational damage will experience the financial impact of a data breach for years. The report found that while an average of 67% of data breach costs were realised within the first year after a breach, 22% accrued in the second year and another 11% accumulated more than two years after a breach. The ‘longtail’ costs were higher in the second and third years for organisations in highly-regulated environments, such as healthcare, financial services, energy and pharmaceuticals. “Cybercrime represents big money for cybercriminals, and unfortunately that equates to significant losses for businesses,” said Wendi Whitmore, Global Lead for IBM X-Force Incident Response and Intelligence Services. “With organisations facing the loss or theft of over 11.7 billion records in the past three years alone, companies need to be aware of the full financial impact that a data breach can have on their bottom line and focus on how they can reduce these costs.”


Major Improvements Are Coming To Blockchain In 2020

Credit: Getty
Everyone in the enterprise world already has a blockchain strategy. If they don’t have one now, they risk the chance of staying behind or simply missing an opportunity. For the last few years, the benefits and correlated risks of fully adopting blockchain technology have been estimated, analyzed, and discussed at large. One thing is clear – despite the potential for a big upside, embracing a newly developed technology presents numerous risks that shouldn’t be underestimated. Blindly introducing new technology stack into an already working production environment means exposing that environment to potentially dangerous security breaches, hacks and data loss. So, where we are now? Most blockchain protocols claim some level or maturity … but are they, in fact, sufficiently mature? Are they ready for full on-premise deployment in large-scale enterprises? Will CIOs and other business executives enjoy the same comfort as that of the tooling they already have? Let’s review what it takes to move a blockchain protocol from open source to enterprise.


New Cyber Security Directive Forces Federal Agencies to Patch Vulnerabilities Twice as Fast

Console on data center rack showing new cyber security directive which requires U.S. federal agencies to patch vulnerabilities twice as fast
Agencies that fail to patch vulnerabilities during the required time window are given three days to get a complete remediation plan in place. They are asked to provide a reason as to why they cannot update in time, to document any intermediary mitigation methods they put in place and provide an estimate of when their systems will be patched. Though these requirements do apply to all federal agencies (with the exception of the Pentagon and intelligence agencies), the DHS has stated that some systems that are no longer receiving security updates will be exempt from these rules. Under the terms of the new cyber security directive, administrative penalties are possible for agencies that fail to respond in a timely manner. CISA is a recent reorganization of the National Protection and Programs Directorate (NPPD), tasked with protection of both the nation’s physical and cyber infrastructure. Under the Cybersecurity and Infrastructure Security Agency Act of 2018, the department has been restructured with a renewed emphasis on cyber security.


From fashion to Fintech — how Manchester’s leading the way in digital tech

From fashion to Fintech — how Manchester’s leading the way in digital tech image
It’s not just startups and scaleups that are attracted to the bright lights of Manchester. Major digital players are being drawn to the North West and away from London thanks to lower rents and a large pool of graduate talent. GCHQ has chosen to locate its new cutting-edge intelligence facility in Manchester. Moonpig has announced it will open a new tech hub in Manchester city centre, designed to “turbo-charge” innovation and personalisation for its business. The Hut Group is building a one million sq ft business campus at Airport City south of Manchester, the largest development of its kind in the UK, and fellow online retail giant Amazon is rumoured to be taking another 91,000 sq ft of space in Manchester. Greater Manchester has become a main stage for leaders in the industry. It is one of the UK’s most successful city-regions; home to more than 2.8 million people and with an economy bigger than that of Wales or Northern Ireland. 


7 mobile security threats you should take seriously in 2019

Mobile security
A staggering 91% of cybercrime starts with email, according to a 2018 report by security firm FireEye. The firm refers to such incidents as "malware-less attacks," since they rely on tactics like impersonation to trick people into clicking dangerous links or providing sensitive info. Phishing, specifically, grew by 65% over the course of 2017, the company says, and mobile users are at the greatest risk of falling for it because of the way many mobile email clients display only a sender's name — making it especially easy to spoof messages and trick a person into thinking an email is from someone they know or trust. Users are actually three times more likely to respond to a phishing attack on a mobile device than a desktop, according to an IBM study — in part because a phone is where people are most likely to first see a message. Verizon's latest research supports that conclusion and adds that the smaller screen sizes and corresponding limited display of detailed information on smartphones (particularly in notifications, which frequently now include one-tap options for opening links or responding to messages) can also increase the likelihood of phishing success.


How botnets pose a threat to the IoT ecosystem


Although there is no silver bullet solution for mitigating the risk of botnets, there are a number of helpful best practices. “When deploying an IoT device of any type, the three most important questions need to be: Have we configured strong credential access? What is our update strategy for firmware changes? What URLs and IP address does the device need for its operation?” says Tim Mackey, senior technical evangelist at Synopsys. “When IoT devices are deployed within a business environment, best practice dictates that a separate network segment known as a VLAN should be used. This then allows for IT teams to monitor for both known and unknown traffic impacting the devices. It also allows teams to ensure that network traffic originates from known locations. “For example, if a conference room projector is accessible via Wi-Fi, the network the device uses should be restricted to only internal and authenticated users. Public access to the device should always be restricted. ...”


Digital Transformation Challenges IT Leaders

Image: Timestopper - stock.adobe.com
For many organizations, legacy technology could ultimately become a hindrance to everyday business operations, Lequin warned. "The larger the enterprise, the likelier the challenge of implementing change quickly, potentially cutting into the bottom line," he observed. Lequin believes that large enterprises can help build agility by pushing decision making out to the edge, using technologies such as artificial intelligence (AI) to transform loads of data into working intelligence that will give them the ability to move faster and more readily adapt rapidly changing demands. Enterprise technology is expanding ever more quickly. "It’s an exciting time to be involved in the industry," Lequin said, pointing to key long-term trends, such as robotic process automation (RPA), which automate workloads and frees-up teams to focus on value-add projects. Half of the enterprises responding to the Intelligent Technology Index cited advanced analytics, AI, and machine learning (ML) as critical to their transformation projects. "Technologies that optimize the use of data will be key difference makers moving forward," Lequin stated.


Security pros are paranoid. Maybe we should all follow suit

It’s a war out there – a fight between companies that want to leverage technology to improve the condition of humankind, and the bad actors, cyber criminals, nation states, hackers, and black hats who want to make a little cash, gain a little notoriety, or potentially destabilize a western economy. I’m in the business and I’m actually more worried than ever about the threats we face. The attackers are able to evade detection, disappear without a trace, automate their attacks, never leave the same set of fingerprints and fool even the savviest among us with spear phishing and social engineering schemes. This anxiety, even among us who know what state-of-the-art security software is capable of, was reinforced by a survey that Lastline completed at the 2019 RSA conference in San Francisco. We surveyed 136 random security professionals and the term that best comes to mind when reviewing the results is “paranoid.” These are smart people who understand what they’re fighting against, and as a result they’re distrustful, worried, and yes, paranoid.



Quote for the day:


"The great leaders have always stage-managed their effects." -- Charles de Gaulle


Daily Tech Digest - July 22, 2019

Will complexity kill Kubernetes?

Will complexity kill Kubernetes?
Kubernetes, unlike Hadoop, is an easier system with which to become familiar, in part because of where it can run. As Gareth Rushgrove writes, “You can run Kubernetes locally much, much easier (Docker Desktop, Kind, MicroK8s) than the other similar examples. Lowering the barrier to entry makes it easier to become familiar, which combats perceived complexity.” It also helps, as Cloud Native Computing Foundation executive Chris Aniszczyk stressed, that while “distributed systems are inherently complex, the upside with Kubernetes is that every major worldwide cloud provider and multiple vendors offer a managed conformant/certified version of it (no forks) which helps most users with complexity of managing at scale.” Even so, perhaps the right question, Tamal Saha indicates, is whether “Kubernetes [is] complex given the problem it tries to solve.” For him, the answer is no. That is the same answer to the question, “Will Kubernetes get Hadooped?” Kubernetes is already well past that stage.


Microsoft's Chromium Edge browser
In a special enterprise-focused section of the Edge Insider site, Microsoft has posted a .zip-format file that contains all the files - including ADMX and ADML files, and an HTML document - for using group policies on Windows and macOS machines to configure Edge in a managed environment. Last month, Microsoft had previewed those same files and most of the group policies. It wasn't easy to find the files, though, since Microsoft had hidden them in a post on the Insider forum. The current collection of group policy objects (GPOs) also includes those for managing Edge updates, something missing from the bunch previewed in June. One update-related policy, UpdateDefault, for example, lets administrators specify whether and how workers' copies of Edge use the Microsoft Edge Update service, a spin-off of the updater that handles Office. Policy configurations include disabling updates entirely, allowing manual updates and offering only periodic background updates. Other policies can be set so that some or all users are allowed to, for instance, update the beta and stable channel builds of the browser, but not the rougher dev and canary versions.


HMRC makes cloud and data progress 


According to the department, achievements of the new Data Governance Board so far include the introduction of “foundational” elements, such as a data audit on its high-risk systems and services to identify risks of non-compliance with the General Data Protection Regulation (GDPR), whereby asset owners are informed about the risks around non-compliance and take responsibility for managing them. HMRC’s Voice ID service is an example where a specific risk of non-compliance has been identified as the department collected data with consent from five million UK taxpayers. An enforcement notice to delete the unlawfully collected data was then issued in May 2019 by Information Commissioner’s Office (ICO). The ICO’s instruction was to delete the data within 28 days. According to HMRC, the process was about 40% of the way through when the enforcement notice was issued and the deletion was completed one week before the deadline of 6 June 2019.


Private channels slated to launch in Microsoft Teams this fall


Private channels would help businesses streamline how users are organized within Teams. For example, instead of having an "IT Department" team and an "IT Director" team, Chapman University could have one team for the entire department with a private channel for its managers. Microsoft reaffirmed its commitment to private channels in a keynote address at the Enterprise Connect conference in March, saying the feature would launch sometime in 2019. The company is currently testing private channels with a limited group of beta customers. Microsoft has blamed the delay on the technical difficulty of engineering private teams. The company needs to make private not only the chats but also the files, which requires tinkering with the integration between Teams and Office 365 apps such as the file storage service SharePoint. "We can only speculate as to why it's taking so long," said Raúl Castañón-Martinez, analyst at 451 Research. "Regardless, Microsoft needs to make this issue a priority."


AI Ethics Come Into Focus as the Workplace Evolves


Prominent risks can emerge associated with ethical AI design, development, and deployment. For example, companies are already using AI to automate tasks, with some aiming to reduce their workforces in the process. The survey also noted that 36% of respondents saw job cuts from AI-driven automation rising to the level of an ethical risk. Even jobs that are not eliminated may be affected in some way by AI, prompting some organizations to find ways to use the technology to increase opportunities for employees while mitigating negative effects. Bias is another area of risk. AI systems learn from the datasets with which they are trained. Depending on how a dataset is compiled or constructed, the potential exists that the data could reflect assumptions or biases—such as gender, race, or income—that could influence the behavior of a system based on that data. Generally, these systems’ developers intend no bias, but many have reported AI-driven instances of bias or discrimination in application areas such as recruiting, credit scoring, and judicial sentencing.


Life after artificial intelligence

digital transformation man looking up at sky change future forecast by greg rakozy unsplash
Is it moral to augment our abilities with technology if we use those enhanced abilities to end suffering? This isn’t some half-baked grad school discourse, but a question that deserves our thoughtful consideration. AI methods and technologies are improving on a daily basis, so there’s a moral and ethical reckoning waiting for us right around the corner. We’ll have to answer questions exactly like this one sooner instead of later. “Morality” broadly refers to the lowest common denominator of appropriate behavior for the planet’s 7.5 billion people. This is a suboptimal understanding of such an important concept because it allows for massive suffering, but if we had access to a higher level of intelligence, we could use it to address and end that suffering. I think we’ll furthermore see the end of the 40-hour workweek, and I’m not even talking about grand political ideas like basic income. The nine-to-five paradigm is a myth that was invented by humans, and it tends to stand in the way of us achieving personal goals and ambitions. With a new brand of intelligence automating low-level cognitive tasks across the board, we’re going to inevitably generate more downtime in our workdays.


The tech startup scene in India: growing fast as a mobile first economy

The tech startup scene in India: growing fast as a mobile first economy image
India was a bit late to the tech party. But in the last few years, the country has ramped up its efforts. “In terms of growth, the numbers are more impressive than any other economy in the world,” said Turakhia. This rapid growth has led to a mobile revolution — and that has “opened up the possibility of a lot of B2C-focused tech plays around e-commerce, whether that’s transportation, mobility or retail,” he explained. These type of things have played out in the US, UK and elsewhere for some time now — e-commerce in these regions, for example, has been in the mainstream for the last three to five years. Compared to more mature economies “there are cultural and structural differences in a mobile first economy,” Turakhia continued. He also pointed to the whole notion of B2B SaaS as a particular focus in India — the majority of engineering and product development takes place in-house, while sales and marketing is a global activity. “We built our banking technology by leveraging India as a human resource,” said Turakhia, referring to on of his own companies, Zeta.


Network Management: 4 Questions You Need to Ask Yourself

Network Management: 4 Questions You Need to Ask Yourself
Just like any other business-critical technology, it’s important for enterprises to manage each network in their infrastructure. Network management policies ensure that a network team can strategically examine their network at every stage on a multi-layered level. Studying the efficiency of your network and adapting network administration, operation, and provisioning to meet your current business goals is essential for proper network performance. By managing their network, enterprises can meet all those criteria. Network management practices help enterprises intelligently design and operate their networks. It encompasses a series of concepts and ideas that enterprises can employ to effectively maintain every network they operate. While the specific management functions your company focuses on will depend on your business needs, there are some aspects of network management that everyone should adopt. Below, we’ve listed 4 network management questions that your business needs to ask itself if it hasn’t already.


Kubernetes underpins Docker container technology dominance


The big mission of containers turned out to be something totally different than that of VMs. As we evolve toward componentized applications that consist of synchronized, separately hosted components that work cooperatively to do something, these individual components are small, relative to the whole application. VM overhead -- a different OS for every VM instance -- means that, in most cases, the software component you're trying to run uses significantly less resources than the system software that you're trying to run them with. You're wasting more than half of your total resources on multiple copies of an OS. In componentized applications, the mission became, 'I need to do this really efficiently in terms of resources,' so container technology came to focus on these componentized applications. VMs focus on IaaS and true multi-tenancy. And that's what changes the dynamic, because for containerization, there are other considerations that are so much more critical than the minimal potential differences in security.


Hexagonal Architecture in Java

Hexagonal architecture is a model or pattern for application design. It is also known as a ports-and-adapter architecture. The core logic is embedded inside a hexagon, and the edges of the hexagon are considered the input and output. It divides the application into the inside and outside parts. Inside parts are the core logic of the application. The outside part could be the UI, database, messaging connectors, etc. Thus, the application's business logic is isolated from outside concerns. Communication between the two happens using so-called ports and adapters. ... Application users want to connect to the system or core application. The application has exposed the inbound ports; however, application users are presented with primary adapters, which use the inbound port to connect to the system. The system, in turn, uses the outbound port to connect to some external system for its data needs, etc. An outbound port is implemented by secondary adapters to expose a way to connect to the external system.



Quote for the day:


"Real friendship is shown in times of trouble; prosperity is full of friends." -- Euripides