Tuesday, October 27, 2020

It’s not rocket science, but it does take a commitment from management.

https://www.cpomagazine.com/cyber-security/how-disaster-recovery-planning-can-help-avoid-government-sanctions/

How Disaster Recovery Planning Can Help Avoid Government Sanctions

Cyberattacks are disruptive. From dealing with data loss to frustrated customers, any company that has suffered an attack knows the impact reaches far beyond the original breach. And, for companies that are dealing with a ransomware attack, another issue arises: the question of whether or not to pay your attackers a large sum of money to recover systems, applications and data being held “hostage”.

What’s more, research commissioned by Arcserve has shown that consumers are growing increasingly intolerant of cyberattacks and the downtime that’s often associated with them. The report found that 37% of consumers would switch to a competitor if a company isn’t up and running within 24 hours following an attack, and an additional 41% would walk away from the business within two to three days. That’s some serious pressure for businesses to recover quickly.

Paying a ransom doesn’t just mean taking a hit to your bottom line anymore. In an effort to curb cybercrime, the U.S. government has started imposing sanctions against paying ransoms to certain hacking groups, like the Evil Corp gang that recently attacked smart watch manufacturer Garmin and demanded a $10 million ransom. Evil Corp ultimately got their payout – but at what cost to Garmin? Not only are they short $10 million and still dealing with the fallout from the attack and its impact on customers, but they’re now also facing potential sanctions from the government.





No shocking new revelations.

https://www.cpomagazine.com/data-protection/3-things-businesses-need-to-know-about-the-shifting-privacy-landscape-of-2020/

3 Things Businesses Need To Know About the Shifting Privacy Landscape of 2020

Over the last couple of years, consumer and regulatory pressure has forced corporate legal departments to adopt higher and more methodical standards when it comes to protecting and managing consumer data.

Here are three major trends and events to look out for as we close out the year and head into 2021.

1. A new California privacy law is on the way, and the federal government is up for grabs.

2. The EU continues to change how companies will transfer data internationally

3. Big tech players are responding to new consumer expectations





Hacking privacy.

https://www.schneier.com/blog/archives/2020/10/reverse-engineering-the-redactions-in-the-ghislaine-maxwell-deposition.html

Reverse-Engineering the Redactions in the Ghislaine Maxwell Deposition

Slate magazine was able to cleverly read the Ghislaine Maxwell deposition and reverse-engineer many of the redacted names.

We’ve long known that redacting is hard in the modern age, but most of the failures to date have been a result of not realizing that covering digital text with a black bar doesn’t always remove the text from the underlying digital file. As far as I know, this reverse-engineering technique is new.





Another tool that’s been flying under my radar.

https://www.forbes.com/sites/thomasbrewster/2020/10/26/grayshift-the-startup-that-breaks-into-unlocked-iphones-for-the-feds-raises-47-million/#1a3247451738

Grayshift, The Startup That Breaks Into Unlocked iPhones For The Feds, Raises $47 Million

Grayshift’s Graykey, the existence of which was first revealed by Forbes in 2018, is used by a wide range of federal agencies, from Immigration and Customs Enforcement and Customs and Border Protection to the FBI and the Oval Office. As revealed in recent research from nonprofit Upturn, it’s also used by a massive number of local police agencies across America.

The GrayKey is believed to be capable of hacking iPhones up to the iPhone 11, though it’s unclear how effective the tool is against the iPhone 12. “It’s most likely they can’t do much, if anything at all, with the iPhone 12 and iOS 14,” said Vladimir Katalov, CEO of another forensics company, Elcomsoft. “Perhaps they just want to cash out.”





Thinking about regulating AI thinking.

https://www.bbva.com/en/opinion/what-should-be-taken-into-account-if-artificial-intelligence-is-to-be-regulated/

What should be taken into account if Artificial Intelligence is to be regulated?

In this article, Juan Murillo, Senior Manager of Data Strategy at BBVA, and Jesús Lozano, Manager of Digital Regulation at BBVA, analyze the potential implications of Artificial Intelligence regulations and share their insights into the considerations that should be taken into account to ensure that regulatory aspects support the proper development of this discipline in the future.





In my case, that’s a long list...

https://techxplore.com/news/2020-10-figure-dont.html

How to figure out what you don't know

… When it comes to forecasting the weather or predicting trends in the stock market, any model that makes good predictions is valuable. But Engel says that for biologists, the goals are different:

"Because we are interested in scientific interpretation and actually discover hypotheses from the data, we not only need to fit the model to the data, but we need to analyze or understand the model which we get, right? So we want to look, as I said, we want to look into model structure and the model mechanism to make inference that this is maybe how the brain works."

It's possible to make good predictions using wrong assumptions, Engel said, pointing to the ancient model of the solar system that accurately predicted the movements of celestial bodies while positing that those bodies revolved around the Earth, not the Sun. So it was important to consider how well particular models of neural networks could be trusted.





Perspective.

https://techcrunch.com/2020/10/26/the-no-code-generation-is-arriving/?guccounter=1

The No-Code Generation is arriving

… Older generations were going to be wiped out by younger workers who were more adaptable to the needs of the modern digital economy, upending our routine notion that professional experience equals value.

Of course, that was just a narrative. Facility with using computers was determined by the ability to turn it on and log in, a bar so low that it can be shocking to the modern reader to think that a “divide” existed at all. Software engineering, computer science and statistics remained quite unpopular compared to other academic programs, even in universities, let alone in primary through secondary schools. Most Gen Xers and millennials never learned to code, or frankly, even to make a pivot table or calculate basic statistical averages.

There’s a sociological change underway though, and it’s going to make the first divide look quaint in hindsight.

Over the past two or so years, we have seen the rise of a whole class of software that has been broadly (and quite inaccurately) dubbed “no-code platforms.” These tools are designed to make it much easier for users to harness the power of computing in their daily work. That could be everything from calculating the most successful digital ad campaigns given some sort of objective function, or perhaps integrating a computer vision library into a workflow that calculates the number of people entering or exiting a building.

… Projects that once took a team of engineers some hours to build can now be stitched together in a couple of clicks through a user interface.



No comments: