Friday, August 21, 2020

I’d say he misjudged this risk. How did senior management not catch it? Did they rely entirely on his summary?  

https://www.securityweek.com/former-uber-cso-charged-over-2016-data-breach-cover?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Securityweek+%28SecurityWeek+RSS+Feed%29

Former Uber CSO Charged Over 2016 Data Breach Cover-Up

The U.S. Department of Justice announced on Thursday that former Uber Chief Security Officer (CSO) Joe Sullivan has been charged over his alleged role in the cover-up of the 2016 data breach that resulted in the information of millions of Uber drivers and users getting stolen by hackers.

Sullivan has been charged with obstruction of justice and misprision of a felony. During his time at Uber — he served as the company’s CSO between April 2015 and November 2017 — the ride-sharing giant’s systems were breached and the attackers managed to steal information belonging to 57 million users and drivers.

… “The criminal complaint also alleges Sullivan deceived Uber’s new management team about the 2016 breach. Specifically, Sullivan failed to provide the new management team with critical details about the breach,” the Justice Department said. “Sullivan asked his team to prepare a summary of the incident, but after he received their draft summary, he edited it. His edits removed details about the data that the hackers had taken and falsely stated that payment had been made only after the hackers had been identified.”

Before joining Uber, Sullivan worked at eBay, PayPal, and Facebook. Prior to starting his career in the private sector, he was a federal prosecutor in the Northern District of California.





Reaction to a change...

https://www.microsoft.com/security/blog/2020/08/19/microsoft-shows-pandemic-accelerating-transformation-cyber-security/?&web_view=true

New data from Microsoft shows how the pandemic is accelerating the digital transformation of cyber-security

The importance of cybersecurity in facilitating productive remote work was a significant catalyst for the two years-worth of digital transformation we observed in the first two months of the COVID-19 pandemic. In this era of ubiquitous computing, security solutions don’t just sniff out threats, they serve as control planes for improving productivity and collaboration by giving end-users easier access to more corporate resources. Microsoft recently concluded a survey of nearly 800 business leaders of companies of more than 500 employees in India (IN), Germany (DE), the United Kingdom (UK) and the United States (US) to better understand their views of the pandemic threat landscape, implications for budgets and staffing, and how they feel the pandemic could reshape the cyber-security long-term.

Among the key insights are data showing that an alarming number of businesses are still impacted by phishing scams, security budgets, and hiring increased in response to COVID-19, and cloud-based technologies and architectures like Zero Trust are significant areas of investment moving forward.





Something to learn.

https://teachprivacy.com/the-deal-with-data-rights-an-interview-with-heather-federman/?utm_source=rss&utm_medium=rss&utm_campaign=the-deal-with-data-rights-an-interview-with-heather-federman

The Deal with Data Rights: An Interview with Heather Federman

I recently had the opportunity to interview Heather Federman, the VP of Privacy & Policy at BigID, where she manages and leads initiatives related to privacy evangelism, product innovation, internal compliance and industry collaboration.

SOLOVE: What are some interesting trends you’re seeing around Data Rights and DSARs?

FEDERMAN: The costs related to fulfilling a DSAR request are considerable – a study from Gartner found that the average cost is $1400. Just think about the manual hours required to process a single request — in which you would need to establish some form of consistent communication with the data subject, conduct extensive searches of the data held (and do double or triple checks) while also making sure to exclude any information that could fall under an exemption like attorney-client privilege, and present this to a data subject in an easily readable format — all within a predefined, limited amount of time.

There’s a useful whitepaper on the subject over at BigID’s website, Automate Data Access Rights Fulfillment, if you want to learn more about the topics in this interview.





Have anything to say?

https://www.insideprivacy.com/artificial-intelligence/ai-standards-update-nist-solicits-comments-on-the-four-principles-of-explainable-artificial-intelligence-and-certain-other-developments/

AI Standards Update: NIST Solicits Comments on the Four Principles of Explainable Artificial Intelligence and Certain Other Developments

In a new post on the Covington Inside Tech Media Blog, our colleagues discuss the National Institute of Standards and Technology’s draft of the Four Principles of Explainable Artificial Intelligence (NISTIR 8312), which seeks to define the principles that capture the fundamental properties of explainable AI systems. Comments on the draft will be accepted until October 15, 2020. To read the post, please click here.





Who could do a better job? I have no answer.

https://www.bespacific.com/most-americans-think-social-media-sites-censor-political-viewpoints/

Most Americans Think Social Media Sites Censor Political Viewpoints

Americans have complicated feelings about their relationship with big technology companies. While they have appreciated the impact of technology over recent decades and rely on these companies’ products to communicate, shop and get news, many have also grown critical of the industry and have expressed concerns about the executives who run them. This has become a particularly pointed issue in politics – with critics accusing tech firms of political bias and stifling open discussion. Amid these concerns, a Pew Research Center survey conducted in June finds that roughly three-quarters of U.S. adults say it is very (37%) or somewhat (36%) likely that social media sites intentionally censor political viewpoints that they find objectionable. Just 25% believe this is not likely the case. Majorities in both major parties believe censorship is likely occurring, but this belief is especially common – and growing – among Republicans. Nine-in-ten Republicans and independents who lean toward the Republican Party say it’s at least somewhat likely that social media platforms censor political viewpoints they find objectionable, up slightly from 85% in 2018, when the Center last asked this question. At the same time, the idea that major technology companies back liberal views over conservative ones is far more widespread among Republicans. Today, 69% of Republicans and Republican leaners say major technology companies generally support the views of liberals over conservatives, compared with 25% of Democrats and Democratic leaners. Again, these sentiments among Republicans have risen slightly over the past two years…”



(Related)

https://www.reuters.com/article/us-facebook-india/india-parliamentary-panel-to-question-facebook-on-content-controversy-idUSKBN25H0NH

India panel to quiz Facebook amid row over political posts: source

An Indian parliamentary committee will question Facebook executives on how the social media giant regulates content in the country, a panel member told Reuters on Friday, following a controversy over political posts.





Harvard is doomed?

https://www.bespacific.com/google-has-a-plan-to-disrupt-the-college-degree/

Google Has a Plan to Disrupt the College Degree

Inc. – Google’s new certificate program takes only six months to complete, and will be a fraction of the cost of college. Google recently made a huge announcement that could change the future of work and higher education: It’s launching a selection of professional courses that teach candidates how to perform in-demand jobs. These courses, which the company is calling Google Career Certificates, teach foundational skills that can help job-seekers immediately find employment. However, instead of taking years to finish like a traditional university degree, these courses are designed to be completed in about six months. “College degrees are out of reach for many Americans, and you shouldn’t need a college diploma to have economic security,” writes Kent Walker, senior vice president of global affairs at Google. “We need new, accessible job-training solutions–from enhanced vocational programs to online education–to help America recover and rebuild.”

Walker then revealed the following on Twitter: “In our own hiring, we will now treat these new career certificates as the equivalent of a four-year degree for related roles.”..



No comments: