Wednesday, September 02, 2020

Another risk Computer Security must address?

https://www.zdnet.com/article/gartner-expects-more-ceos-to-be-personally-liable-for-cyber-physical-security-incidents/

Gartner expects more CEOs to be personally liable for cyber-physical security incidents

The liability for failing to protect systems from cyber incidents will fall directly onto many CEOs by 2024, Gartner is predicting.

The analyst firm expects liability for cyber-physical systems (CPSs) incidents will pierce the corporate veil to personal liability for 75% of CEOs.

"Regulators and governments will react promptly to an increase in serious incidents resulting from failure to secure CPSs, drastically increasing rules and regulations governing them," research vice president at Gartner Katell Thielemann said.





Something we can look forward to?

https://www.nytimes.com/reuters/2020/09/01/world/europe/01reuters-norway-parliament.html?&web_view=true

Norway's Parliament Says It Was Hit by 'Significant' Cyber Attack

The Norwegian parliament suffered a cyber attack during the past week and the e-mail accounts of several elected members as well as employees were hacked, the national assembly and a counter-intelligence agency said on Tuesday.

Several members and staff of Norway's main opposition Labour Party were affected, a party spokesman told public broadcaster NRK.





Similar to ‘security by design,’ but requiring ethicists – not many IT departments have them on staff.

https://techxplore.com/news/2020-09-qa-embedded-ethics-approach-ai.html

Q&A: The embedded ethics approach in AI development

The increasing use of AI (artificial intelligence) in the development of new medical technologies demands greater attention to ethical aspects. An interdisciplinary team at the Technical University of Munich (TUM) advocates the integration of ethics from the very beginning of the development process of new technologies. Alena Buyx, professor of ethics in medicine and health technologies, explains the embedded ethics approach.

The idea is to make ethics an integral part of the research process by integrating ethicists into the AI development team from day one. For example, they attend team meetings on a regular basis and create a sort of "ethical awareness" for certain issues. They also raise and analyze specific ethical and social issues.





Interesting that neither organization noticed until the FBI pointed it out.

https://www.zdnet.com/article/facebook-and-twitter-suspend-russian-propaganda-accounts-following-fbi-tip/?&web_view=true

Facebook and Twitter suspend Russian propaganda accounts following FBI tip

Facebook and Twitter said on Tuesday that they removed social media accounts for a news organization going by the name of PeaceData, which they linked to Russia's state propaganda efforts.

The two social networks said they started an investigation into accounts associated with this news site after they received a tip from the FBI earlier this summer.

In a report [PDF] published today analyzing PeaceData's operations, social media research group Graphika said the news site focused on publishing news articles in both English and Arabic, critical of the US, the UK, and France.





Let’s see who jumps aboard.

https://www.technologyreview.com/2020/09/02/1007921/apple-and-google-have-launched-coronavirus-exposure-notifications-without-an-app/

Apple and Google have launched coronavirus exposure notifications without an app

The news: Apple and Google have announced they’re expanding their coronavirus exposure warning system so health agencies can take part without needing to create a customized app.

All the agency has to do is provide Apple and Google with some basic information and set up servers to host Bluetooth keys and exposure verification.





The pendulum swings again? Is this fundamentally different from looking at surveillance video?

New Federal Court Rulings Find Geofence Warrants Unconstitutional

Jennifer Lynch and Nathaniel Sobel write:

Two federal magistrate judges in three separate opinions have ruled that a geofence warrant violates the Fourth Amendment’s probable cause and particularity requirements. Two of these rulings, from the federal district court in Chicago, were recently unsealed and provide a detailed constitutional analysis that closely aligns with arguments EFF and others have been making against geofence warrants for the last couple years.

Geofence warrants, also known as reverse location searches, are a relatively new investigative technique used by law enforcement to try to identify a suspect. Unlike ordinary warrants for electronic records that identify the suspect in advance of the search, geofence warrants essentially work backwards by scooping up the location data from every device that happened to be in a geographic area during a specific period of time in the past. The warrants therefore allow the government to examine the data from individuals wholly unconnected to any criminal activity and use their own discretion to try to pinpoint devices that might be connected to the crime. Earlier this summer, EFF filed an amicus brief in People v. Dawes, a case in San Francisco Superior Court, arguing that a geofence warrant used there violates deep-rooted Fourth Amendment law.

In Chicago, the government applied to a magistrate judge for a geofence warrant as part of an investigation into stolen pharmaceuticals. Warrant applications like these occur before there is a defendant in a case, so they are almost never adversarial (there’s no lawyer representing a defendant’s interest), and we rarely find out about them until well after the fact, which makes these unsealed opinions all the more interesting.

Here, the government submitted an application to compel Google to disclose unique device identifiers and location information for all devices within designated areas during forty-five minute periods on three different dates. The geofenced areas were in a densely populated city near busy streets with restaurants, commercial establishments, a medical office, and “at least one large residential complex, complete with a swimming pool, workout facilities, and other amenities associated with upscale urban living.”

Read more on EFF.





We been doing this all along...”

https://www.insideprivacy.com/artificial-intelligence/ftc-provides-guidance-on-use-of-ai-and-algorithms/

FTC Provides Guidance on Use of AI and Algorithms

What guidance has the FTC recently provided on the use of AI and algorithms? Our colleagues, former FTC Commissioner, Terrell McSweeny, and AI Initiative Co-Chair, Lee Tiedrich, explain in The Journal of Robotics, Artificial Intelligence and Law.

[From the PDF:

Based on prior FTC enforcement actions, studies, reports, and other sources of guidance, the post outlined five general principles for using AI and algorithms while adequately managing consumer protection risks, discussed below.





Interesting in a communication kind of way…

https://daily.jstor.org/the-linguistic-evolution-of-taylor-swift/

The Linguistic Evolution of Taylor Swift

With the surprise midsummer release of Folklore, it seems that Taylor Swift has finally put out an indie record much cooler than her others, one that even a Pitchfork editor could love. The critically acclaimed, aptly named Folklore feels like a cozy, autumnal, cardigan-wearing kind of album, homing in on the telling and retelling of stories of heartbreak and longing through the lyricism of language at the heart of Swift’s songwriting.





Something for Python learners...

https://www.zdnet.com/article/python-programming-microsofts-latest-beginners-course-looks-at-developing-for-nasa-projects/

Python programming: Microsoft's latest beginners' course looks at developing for NASA projects

Microsoft has teamed up with NASA to create three project-based learning modules that teach entry-level coders how to use the Python programming language and machine-learning algorithms to explore space, classify space rocks and predict weather and rocket-launch delays.

Students need a Windows, Mac or Linux computer to complete the modules, which teach the basics of what a programming language is, how to use Microsoft's Visual Studio Code (VS Code) code editor, install extensions for Python, and how to run a basic Jupyter Notebook within VS Code – some of the key ingredients to get started on a machine-learning project.

Microsoft's learning modules don't actually teach anything about how to code in Python but rather offer some ideas, focussing on NASA's space exploration activities, to illustrate how Python could be used in space exploration.



No comments: