Centennial Man

Thursday, January 10, 2019

Those who don’t have the resources (time & treasure) to do it right must find the resources to do it over. If I was a cruel professor, I’d have my students read and summarize the report (no more than 50 pages, please)

SingHealth breach review recommends remedies that should already be basic security policies

Eileen Yu reports:

A culmination of bad system management and undertrained IT staff, amongst other gaps, had resulted in Singapore’s most severe cybersecurity breach last July, according to the committee formed to review the events leading up to the SingHealth incident.

[…]

The 454-page report published today outlined 16 recommendations the committee said were made in light of its findings, testimonies from witnesses and Singapore’s Cyber Security Agency (CSA), and public submission, as well as feedback from the Solicitor-General and key organisations including Ministry of Health, SingHealth, and the IT agency responsible for the local healthcare sector, Integrated Health Information System (IHIS).

Wednesday, January 09, 2019

Inevitable.

https://www.reuters.com/article/us-vietnam-facebook/vietnam-says-facebook-violated-controversial-cybersecurity-law-idUSKCN1P30AJ

Vietnam says Facebook violated controversial cybersecurity law

Facebook has violated Vietnam’s new cybersecurity law by allowing users to post anti-government comments on the platform, state media said on Wednesday, days after the controversial legislation took effect in the communist-ruled country.

… In a statement, a Facebook spokeswoman said, “We have a clear process for governments to report illegal content to us, and we review all these requests against our terms of service and local law.”

She did not elaborate.

I can’t get a warrant, so I go another route.

https://motherboard.vice.com/en_us/article/nepxbz/i-gave-a-bounty-hunter-300-dollars-located-phone-microbilt-zumigo-tmobile

I Gave a Bounty Hunter $300. Then He Located Our Phone

… The bounty hunter sent the number to his own contact, who would track the phone. The contact responded with a screenshot of Google Maps, containing a blue circle indicating the phone’s current location, approximate to a few hundred metres.

… The bounty hunter did this all without deploying a hacking tool or having any previous knowledge of the phone’s whereabouts. Instead, the tracking tool relies on real-time location data sold to bounty hunters that ultimately originated from the telcos themselves, including T-Mobile, AT&T, and Sprint, a Motherboard investigation has found. These surveillance capabilities are sometimes sold through word-of-mouth networks.

Whereas it’s common knowledge that law enforcement agencies can track phones with a warrant to service providers, IMSI catchers, or until recently via other companies that sell location data such as one called Securus, at least one company, called Microbilt, is selling phone geolocation services with little oversight to a spread of different private industries, ranging from car salesmen and property managers to bail bondsmen and bounty hunters, according to sources familiar with the company’s products and company documents obtained by Motherboard.

This makes no sense to me.

https://www.bloomberg.com/news/articles/2019-01-08/samsung-phone-users-get-a-shock-they-can-t-delete-facebook

Samsung Phone Users Perturbed to Find They Can't Delete Facebook

… On certain Samsung Electronics Co. smartphones, users aren’t allowed to delete the Facebook app.

Winke bought his Samsung Galaxy S8, an Android-based device that comes with Facebook’s social network already installed, when it was introduced in 2017. He has used the Facebook app to connect with old friends and to share pictures of natural landscapes and his Siamese cat – but he didn’t want to be stuck with it. He tried to remove the program from his phone, but the chatter proved true – it was undeletable. He found only an option to "disable," and he wasn’t sure what that meant.

… which brings up more questions,” Winke said in an interview. “Can they still track your information, your location, or whatever else they do?

...and we don’t even get a discount?

Kiss What Is Left of Your Medical Data Privacy Goodbye

Yves Smith writes:

Matt Stoller warned back in 2012 that insurers would increasingly induce, then force, customers to agree to surveillance. But a Wall Street Journal story describes how insurers and medical providers, meaning your doctor’s employers, are actively cooperating, so as among other things, to help Big Pharma peddle more drugs to you.

Stoller warned that over time, insurance companies would make it prohibitive and eventually impossible to refuse to agree to intensive monitoring:

Profit-driven surveillance does not start and stop with young adults. It is, in fact, becoming pervasive. The main theme of a recent IBM consulting document on the future of the insurance industry is how much more money an insurance company can make if it tracks and tags its customers. This is particularly true for auto insurance companies, some of whom like Allstate and Progressive are experimenting on new technologies. For instance, IBM suggests that “A “pay-as-you-live” product would trade some location and time-of-day privacy data for lower insurance bills overall.”

IBM is recommending these companies stick a sensor in your car, measure where you go and when, your speed, acceleration and deceleration, etc. The progression over time could be to withdraw traditional insurance products, so that you won’t be able to get an insurance product without sensors attached. As this presentation offers, “The aforementioned rising tide of technology also empowers insurance underwriters to bring their products closer to realtime interaction via sensor networks and enlightened privacy regulations.”…

Tuesday, January 08, 2019

By design, it does not rise to the level of cyberwar as we define it. An attack on three “fronts.”

https://www.securityweek.com/united-states-and-china-different-kind-cyberwar

The United States and China - A Different Kind of Cyberwar

China is Conducting a Low and Slow Cyberwar, Attempting to Stay Under the Radar and Maneuver the Global Economy

… The battle for economic supremacy is primarily if not entirely being fought in cyber. Given the West’s promise of retaliation for anything that meets its definition of cyberwarfare, China is largely avoiding the sort of destructive activity more usually ascribed to Russia (such as the attack on France’s TV5Monde and Ukrainian power companies), and North Korea (such as the attack on Sony, and WannaCry).

… China does not wish to provoke open conflict with the U.S.; either cyber or kinetic. But in order to be stronger than the U.S. economically, it must first close the gap in both business technology and military technology. This means that its cyber operations must be sophisticated, targeted and non-destructive.

There are three primary targets: people, military, and critical infrastructure.

People

People are often defined as the weakest link in security. While this has traction at a local level, it is peoples’ data that is important at an international level. Direct access to credentials that don’t get changed allows easy access to networks. If credentials are not available, then personal details will often be sufficient to frame compelling and potentially irresistible spear-phishing attacks.

Military

Military and associated technology secrets are a traditional target for international espionage of all categories.

Critical infrastructure

China Inc is unlikely to do anything too overt or dramatic with U.S. critical infrastructure – that would interfere with its long-term strategy. But it would be naïve to think it is doing nothing. “At a minimum, we must expect that China is seeking to map, model, and understand how to attack U.S. critical infrastructure. Doing so requires some level of reconnaissance,” comments TruSTAR’s Kurtz.

U.S. Companies Urged to Protect Against Foreign Government Hackers

The National Counterintelligence and Security Center began sending out detailed advisories, in brochure and video forms, to companies around the country to show them how to guard against cyber-incursions.

How to handle hecklers?

https://www.reuters.com/article/us-virginia-facebook-decision/politicians-cannot-block-social-media-foes-u-s-appeals-court-idUSKCN1P11SC

Politicians cannot block social media foes: U.S. appeals court

A federal appeals court said on Monday a Virginia politician violated the Constitution by temporarily blocking a critic from her Facebook page, a decision that could affect President Donald Trump’s appeal from a similar ruling in New York.

In a 3-0 decision, the 4th U.S. Circuit Court of Appeals said Phyllis Randall, chair of the Loudoun County Board of Supervisors, violated the First Amendment free speech rights of Brian Davison by banning him for 12 hours from her “Chair Phyllis J. Randall” page.

The ban came after Davison had attended a 2016 town hall meeting, and then under his Facebook profile “Virginia SGP” accused school board members and their relatives of corruption and conflicts of interest.

… Circuit Judge James Wynn rejected Randall’s argument that her Facebook page was a private website, saying the “interactive component” was a public forum and that she engaged in illegal viewpoint discrimination.

Giving passengers a choice takes time and effort. Claiming that “the government made me do it” is much simpler.

Amtrak thinks it’s OK to spy on passengers because it makes the trains run on time

Edward Hasbrouck writes:

Buried in the final 500-page PDF file of redacted and munged e-mail messages released by Amtrak in December 2018 in response to a FOIA request we made in 2014, we got the first hint at an answer to one of the questions that originally prompted our request:

What did Amtrak think was its legal basis for requiring passengers to show ID and provide other information, and for handing this data over to DHS components and other police agencies for general law enforcement purposes?

When US Customs and Border Protection (CBP) asked Amtrak to start transmitting passenger data electronically, it described this as a request for “voluntary” cooperation, noting that while the law requires airlines to collect and transmit this data to CBP, “these mandates do not currently extend to land modes of transportation” (as they still don’t today).

Read how Amtrak took “voluntary” cooperation and somehow morphed it into a federal mandate that was never mandated – on Papers, Please!

Should we worry about Jeff Bezos wandering through our homes? Will their employees/robots look in our refrigerators to suggest purchases?

https://techcrunch.com/2019/01/07/key-by-amazon-adds-garage-and-business-delivery-new-locks-and-ring-compatibility-c/

Key By Amazon adds garage and business delivery, new locks and Ring compatibility

… Key is getting a whole bunch of new features this week. In addition to the standard home and car delivery, the company is adding Key for Garage into the mix. Using the Key app, customers can remotely monitor the door and accept deliveries while they’re out.

It’s a nice addition to the existing offerings, for those looking to thwart package thieves or missed deliveries.

Kroger sees this as the future. Microsoft provides the IT Architecture, Kroger supplies the expertise.

https://venturebeat.com/2019/01/07/microsoft-and-kroger-to-create-data-driven-connected-grocery-stores/

Microsoft and Kroger to create data-driven connected grocery stores

Microsoft and Kroger are taking a leaf out of Amazon’s book by building futuristic “connected” grocery stores.

… What all of this helps generate, of course, is vast swathes of information — data on products and customer data. Microsoft’s Azure will take care of all the backend data storage and processing, but this wealth of data can be used by Kroger to target ads at the customer as they waltz around the supermarket. In addition to creating a more sophisticated shopping experience, the initiative is all about creating additional revenue streams.

… But what is perhaps most interesting about Kroger’s plans is that it’s packaging this as a “retail-as-a-service” (RaaS) offering for use by other retailers — yet another potentially gargantuan revenue stream.

Ford sees this as the future… The near future.

https://www.cnn.com/2019/01/07/tech/ford-c-v2x-pedestrian/index.html

Ford wants its cars to 'talk' with traffic lights and pedestrians

Ford is building cars that "talk" with traffic lights, road signs and pedestrians.

At CES 2019 in Las Vegas on Monday, the automaker announced plans to start selling cars that feature this type of technology in 2022.

The technology, called cellular vehicle-to-everything (or C-V2X for short), uses wireless signals to share road data, such as a car's location or the color of a traffic light, with other vehicles.

… But critics says the cost of installing the technology will be burdensome for cash-strapped governments. Corinne Kisner, deputy director of the National Association of City Transportation Officials, called the expense of installing and maintaining vehicle-to-everything technology a major concern. Many municipalities struggle to fill their potholes, let alone install smart city technology. She also described any effort to require a pedestrian to carry a smartphone to guarantee safety as a dangerous paradigm shift.

Monday, January 07, 2019

“Legally” must be assumed… Right?

When can the feds hack into your computer? Case involving scam targeting Wegmans could decide.

Phil Fairbanks reports:

When the FBI uncovered a scammer targeting Wegmans two years ago, agents hacked into the suspect’s computer in an effort to learn his identity.

The hacking, approved by a judge, involved an email and attachment that, when opened, connected the suspect’s computer to an FBI server.

A new lawsuit in Buffalo federal court says the Wegmans case is just one example of how the government is now using hacking in ordinary, day-to-day investigations, and not just in national security and foreign intelligence probes.

Read more on The Buffalo News. They don’t seem to give the case information, but I’m embedding the complaint, filed in federal court for the Western District of New York, below so you can read it all for yourself.

[From the article:

... the suit seeks evidence of what the groups call a "remarkable expansion of the government's surveillance powers."

This new tool, they argue in court papers, is so powerful and intrusive that it carries with it great risk to the privacy and security of both the individuals being investigated and the people around them.

"It's never before been the case that the government can accumulate so much important and sensitive personal information by accessing just one device," said Jonathan Manes, director of the UB Law School's Civil Liberties and Transparency Clinic.

I’m betting it’s not high on the “must have’ lists yet, but at least it is being mentioned.

https://phys.org/news/2019-01-privacy-tech.html

Privacy becomes a selling point at tech show

"What happens on your iPhone stays on your iPhone," Apple says in the message to be seen by tens of thousands attending the Las Vegas tech show.

… The data scandals "are like Christmas presents for us," by prompting more consumers to look for better security, said Winston founder Richard Stokes.

"As we see more things being connected I think that you'll definitely hear people talk about security more and really looking at how would you secure the data," said analyst Carolina Milanesi of Creative Strategies.

"More companies are going to take kind of a cue from the marketing that Apple has been doing."

I don’t think he likes it.

Amazon Alexa a “DEMON device” that gathers information that can be used to blackmail you for life

Ethan Huff writes:

Millions of unwitting “sheeple” have willingly outfitted their homes and offices with so-called “smart” speakers like Amazon’s Alexa device, which is marketed as a convenience assistant for getting things done simply using only your voice. But as revealed by Justus Knight in a recent video update to his YouTube channel, Alexa is, practically speaking, an always-listening demon device that can monitor, track, and record people’s conversations for blackmail purposes.

The epitome of Orwellian, Big Brother privacy invasion, Alexa is hardly the innocuous technological “advancement” that its proponents claim it is. Alexa is a far-Left purveyor of “progressive” ideologies such as those perpetuated by Black Lives Matter (BLM). It’s also a potential snitch device that authoritarian overlords can use to control the populations of the world.

Sunday, January 06, 2019

Once again I managed to stay off this list! Several of these threats are worth discussing in my Computer Security class. I list a few.

https://nationalinterest.org/blog/buzz/these-are-top-26-national-security-threats-facing-america-40412

These Are the Top 26 National Security Threats Facing America

The Government Accountability Office polled four government agencies on what they saw as the biggest threats to American security. The result was 26 threats identified by the Department of Defense, Department of State, Department of Homeland Security and the Office of the Director of National Intelligence.

New adversaries and private corporations. New states could arise that threaten the U.S. Interestingly, the GAO report worries about “private corporations obtaining resources that could grant them more influence than states.”

Information operations. Adversaries such as Russia, China and Iran will take advantage of social media, artificial intelligence and data crunching to wage information warfare.

Cyber weapons. In addition to Russia and China, Iran and North Korea are developing cyberattack capabilities that could target a variety of systems, such as air traffic control or health care.

If you had control of all of your personal data and all data about your activities, would that identify GDPR violations? As raw data, that might be overwhelming. A system to manage the data is going to be very complex. Might be fun for my Software Architects to consider.

https://www.zdnet.com/article/microsoft-is-privately-testing-bali-a-way-to-give-users-control-of-data-collected-about-them/

Microsoft is privately testing 'Bali,' a way to give users control of data collected about them

… The "About" page for Bali describes it as a "new personal data bank which puts users in control of all data collected about them.... The bank will enable users to store all data (raw and inferred) generated by them. It will allow the user to visualize, manage, control, share and monetize the data."

According to the About page, Bali is based on the concept of "Inverse Privacy," the subject of a paper authored in 2014 by Yuri Gurevich, Efim Hudis and Jeannette Wing, who all worked for Microsoft Research at that time. An item of personal information is inversely private if some party has access to it, but the creator/user of it does not. Health providers, police, toll-road operators, grocery chains and employers all create inversely private data, which, in many cases, users could benefit from owning, the authors noted.

Opinions vary.

https://www.newstatesman.com/politics/uk/2019/01/stop-scaremongering-about-kids-spending-time-their-phones

Stop scaremongering about kids spending time on their phones

How much should we worry about our children using screens? It’s hard, as a parent, not to worry. Not least because we’re constantly surrounded by doom-laden warnings about how smartphones have “destroyed a generation”.

… With all that in mind, it’s an enormous relief that the Royal College of Paediatrics and Child Health (RCPCH) has issued new screen time guidelines that are entirely sensible and acknowledge the weakness of the evidence. It says there is “essentially no evidence” to support the idea that screen time is directly toxic to health, despite wild claims in the media. It says there is some evidence that it can displace other activities such as exercise. But its main recommendations are simply to ask yourselves, as a family, whether your screen time is controlled, or whether it gets in the way of things you want to do – family time, eating together – and to try to control your use if it does.

Those who do not study history… (and a graphic worth framing?)

https://www.visualcapitalist.com/20-internet-giants-rule-web/

The 20 Internet Giants That Rule the Web

With each passing year, an increasingly large segment of the population no longer remembers images loading a single pixel row at a time, the earsplitting sound of a 56k modem, or the domination of web portals.

Many of the top websites in 1998 were basically news aggregators or search portals, which are easy concepts to understand. Today, brand touch-points are often spread out between devices (e.g. mobile apps vs. desktop site) and a myriad of services and sub-brands (e.g. Facebook’s constellation of apps). As a result, the world’s biggest websites are complex, interconnected web properties.

Today’s visualization, inspired by an earlier work published by WaPo, looks at which of the internet giants have evolved to stay on top, and which have faded into internet lore.

Saturday, January 05, 2019

It seems there are always people who didn’t get (or understand) the word.

KS: Wichita State U. employees fall victim to phishing scam, lose paychecks

Suzanne Perez Tobias reports:

At least three employees of Wichita State University did not receive their paychecks recently after they were targeted by computer hackers.

The employees were victims of an e-mail phishing scheme, which asked them to type in their university ID number and password, allowing scammers to access bank account numbers, student records and other personal information, according to university officials.

Friday, January 04, 2019

If When this happens here, will we get a GDPR-like law?

https://www.reuters.com/article/us-germany-politics-cyber/german-politicians-data-published-online-merkel-unaffected-idUSKCN1OY0IW

German politicians' data published online, Merkel unaffected

Personal data and documents from hundreds of German politicians and public figures have been published online, the government said on Friday, adding that no sensitive material from Chancellor Angela Merkel’s office was released.

An Interior Ministry spokesman declined to confirm that the data breach, which triggered an emergency meeting of the national cyber defense body, was the result of a hack.

… If the data release does stem from a hack, it would be the latest in a number of hi-tech assaults on Germany’s political institutions and key individuals.

Last year, lawmakers said a powerful cyber attack breached the foreign ministry’s computer network.

Security officials have blamed most previous attacks on a Russian hacking group APT28 that experts say has close ties to a Russian spy agency.

I’m still not convinced, but I’m getting closer to convinced.

https://www.cnn.com/2019/01/02/perspectives/big-tech-facebook-google-amazon-microsoft-antitrust/index.html

The case for why Big Tech is violating antitrust laws

Big Tech is behaving badly. And I'm not talking about Facebook handing over your personal data to the highest bidder or Amazon playing puppeteer in its HQ2 charade. Big Tech is violating the Sherman Act of 1890.

A true treasure, but finding gems among the stones is difficult.

https://www.bespacific.com/new-out-of-copyright-works-and-where-to-find-them/

New Out-of-Copyright Works and Where to Find Them

Fortune: “As for getting your hands (or smartphones, e-readers, etc.) on the works themselves, websites are highlighting some of the best cultural goodies. These include Duke University’s Center for the Study of the Public Domain, which has a list of prominent 1923 books (such as Kahlil Gibran’s The Prophet), films (The Pilgrim by Charlie Chaplin) and songs (“Yes, We Have No Bananas!”). Meanwhile, a scholarly repository known as the Hathi Trust has made over 50,000 titles from 1923 available: You can also find the newly-available works on non-profit sites like Project Gutenberg and the Internet Archive, or on Google Books’ website and via the company’s Books app, which lets Android users download the books to their phones or tablets. On Amazon’s Kindle service, the 1923 works do not yet appear to be available for free, though many other public domain works can be found there for free or less than $1. This is just the beginning. The first of January, 2020, will see another bonanza of works enter the public domain, including famous novels like F. Scott Fitzgerald’s The Great Gatsby…”

I thought we had finished with this years ago.

https://www.nbcnews.com/news/us-news/profit-college-cancels-500m-student-debt-after-fraud-allegations-n954486

For-profit college cancels $500M in student debt after fraud allegations

The settlement stems from allegations that Career Education Corporation lied about job placement rates and misled prospective students.

A company that owns two national for-profit college chains said Thursday that it will erase nearly $500 million in debt incurred by former students as part of a settlement with 48 states and the District of Columbia.

The deal with Career Education Corporation will resolve allegations that it lied about job placement rates and misled potential students to get them to enroll. State attorneys general began investigating the company in 2014 following complaints from students and a damning report by the U.S. Senate.

Company officials on Thursday said they deny any wrongdoing but called the settlement an "important milestone."

… Based in Schaumburg, Illinois, the company enrolls about 34,000 students across two chains, Colorado Technical University and American InterContinental University. More than 90 percent of its students are enrolled through online courses, according to the company.

Thursday, January 03, 2019

Has the fear of Cyberwar finally got their attention?

Japan’s government to urge infrastructure data be kept on servers in Japan

The Yomiuri Shimbun reports:

From April at the earliest, the government will ask operators of crucial infrastructure (see below) such as power and water suppliers to store their electronic data on servers located in Japan, as part of security measures against the threat of cyberwar.

The measure is aimed at protecting information indispensable for the security of people’s lives and for industrial competitiveness, with an eye on possible cyber-attacks by China and other countries.

Wednesday, January 02, 2019

Consider yourself (or your selfie) scanned.

Google Wins Lawsuit Over Face-Scanning Technology

Lorraine Bailey reports:

A federal judge ruled Saturday that Google does not violate Illinois privacy laws by automatically creating a face template when Android users upload photos taken on their smartphone to the company’s cloud-based photo service.

Tuesday, January 01, 2019

Should be interesting.

thedarkoverlord releases files related to 9/11 investigations and litigation; threatens to release more if companies don’t pay up

While most people in the U.K. and U.S. might have been preparing for New Year’s Eve celebrations, the hackers known as thedarkoverlord had their own plans for the evening, and their plans seemed to involve spoiling the plans of a number of corporative executives on both sides of the Atlantic.

Earlier in the day, the hackers, whose past hacks and extortion demands have been covered extensively on this site, announced that a law firm hack earlier in 2018 that had not garnered much notice had been one of their hacks. That hack, they claim, had reportedly given them access to files from major insurers such as Hicsox Group and Lloyd’s of London.

But it was in poring through the files they obtained that the hackers realized that they had acquired a treasure trove of files concerning the World Trade Center attacks and post-attack litigation. And as you might expect with such complex litigation involving subrogation, there were files containing Sensitive Security Information “from the likes of the FBI, CIA, TSA, FAA, DOD, and others.”

By the time they were done pillaging, thedarkoverlord had acquired what they described as 18,000 files relating to the litigation.

Consistent with their past methods, thedarkoverlord claims that they had offered to keep the files out of the public’s eye if their victim paid them . And the victim did pay, they say, but as in the Larson Studio case, the victim then allegedly cooperated with law enforcement, which thedarkoverlord viewed as a breach of their contract. When the victim was unwilling to pay an additional penalty, thedarkoverlord went public with a sample of files, a new Twitter account (@tdo_h4ck3rs) to tweet out some files, and some threats.

A good backgrounder for my students. (Have someone read this to a Congressman)

https://www.theguardian.com/commentisfree/2019/jan/01/the-guardian-view-on-the-future-of-ai-great-power-great-irresponsibility

Artificial intelligence can’t save us from human stupidity | Editorial

Looking over the year that has passed, it is a nice question whether human stupidity or artificial intelligence has done more to shape events. Perhaps it is the convergence of the two that we really need to fear.

… It is possible to make them represent their reasoning in ways that humans can understand. In fact, in the EU and Britain it may be illegal not to in certain circumstances: the General Data Protection Regulation (GDPR) gives people the right to know on what grounds computer programs make decisions that affect their future, although this has not been tested in practice. This kind of safety check is not just a precaution against the propagation of bias and wrongful discrimination: it’s also needed to make the partnership between humans and their newest tools productive.

Background for my Computer Security students.

8 Ways Google Can Track You and How to Stop or View it

A job my students should consider. (And some skills I have to teach.)

https://www.cpomagazine.com/2019/01/01/the-new-and-misunderstood-role-of-the-gdpr-data-protection-officer/

The New (And Misunderstood) Role of the GDPR Data Protection Officer

… Core competencies

Three areas of significant experience are absolute requirements for this position:

Knowledge of how GDPR regulations and all applicable national data protection law apply to the organization’s data processing practices;
Significant experience with IT security audits and threat assessment; and
Strong communication skills across a variety of organizational positions and departments.

Interesting and worth thinking about.

https://www.cpomagazine.com/2018/12/31/look-beyond-the-regulations-to-see-what-2019-has-in-store-for-the-privacy-industry/

Look Beyond the Regulations to See What 2019 Has in Store for the Privacy Industry

… here are my predictions concerning data privacy in 2019:

The Rise of the CISO and CTO – Privacy is a data issue, and that’s the responsibility of the CTO and sometimes the CISO.

The Data Protection Continuum – Privacy and security will start to be seen as a Data Protection Continuum, with privacy telling you “what” is important and “why,” and security telling you “how” to protect it

Privacy vs. Data Industrial Complex – In 2019, organizations will recognize they need to be concerned about the private data they hold – even if they themselves don’t intend to monetize it.

Growth of Data Privacy Automation – People will realize that automation at the data layer is the only feasible way to ensure continuous compliance related to data privacy laws. [This is why I changed so many of my lectures on Security and Software Architecture. Bob]

Perspective. The Luddites of 2019?

https://www.nytimes.com/2018/12/31/us/waymo-self-driving-cars-arizona-attacks.html

Wielding Rocks and Knives, Arizonans Attack Self-Driving Cars

… “They didn’t ask us if we wanted to be part of their beta test,”

At least 21 such attacks have been leveled at Waymo vans in Chandler, as first reported by The Arizona Republic. Some analysts say they expect more such behavior as the nation moves into a broader discussion about the potential for driverless cars to unleash colossal changes in American society. The debate touches on fears ranging from eliminating jobs for drivers to ceding control over mobility to autonomous vehicles.

“People are lashing out justifiably," said Douglas Rushkoff, a media theorist at City University of New York and author of the book “Throwing Rocks at the Google Bus.” He likened driverless cars to robotic incarnations of scabs — workers who refuse to join strikes or who take the place of those on strike.

If you really, really love movies…

The 5 Best Sites for Public Domain Movies