Imperial Violet

NOVEMBER 27, 2016

In July my colleague, Matt Braithwaite, announced that Chrome and Google would be experimenting with a post-quantum key-agreement primitive in TLS. One should read the original announcement for details, but we had two goals for this experiment: Firstly we wanted to direct cryptoanalytic attention at the family of Ring Learning-with-Errors (RLWE) problems.

Paper 60

Paper IT 60

Hunton Privacy

NOVEMBER 30, 2016

On November 19, 2016, the French government enacted a bill creating a legal basis for class actions against data controllers and processors resulting from data protection violations. The bill, which aims to facilitate access to justice for French citizens, establishes a general class action regime and includes specific provisions regarding data protection violations.

GDPR 58

GDPR Compliance Government Access 58

Collaboration 2.0

DECEMBER 1, 2016

With clients and new digital markets slow to scale up, activist investor pushes vision of more profits from legacy IT, may kill the golden goose

Marketing 51

Marketing IT 51

Adam Shostack

DECEMBER 2, 2016

Over the decade or so since The New School book came out, there’s been a sea change in how we talk about breaches, and how we talk about those who got breached. We agree that understanding what’s going wrong should be a bigger part of how we learn. I’m pleased to have played some part in that movement. As I consider where we are today, a question that we can’t answer sufficiently is “what’s in it for me?

Insurance 40

Insurance Cybersecurity IT Government 40

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

IT

CGI

DECEMBER 2, 2016

Vérification de la sécurité du logiciel service – Meilleures pratiques. shobana.lv@cgi.com. Fri, 12/02/2016 - 03:47. Le logiciel service (SaaS) est un modèle de prestation de services très prisé pour accroître l’efficacité des services en TI axés sur les activités opérationnelles. La facilité de mise en œuvre et les faibles coûts en TI des modèles de paiement à l’utilisation se sont avérés très attrayants pour les entreprises désireuses de bénéficier d’applications modernes sans devoir faire d’i

Security 40

Security Cloud Access 40

Preservica

DECEMBER 1, 2016

Recently the Preservica team had the pleasure of attending the prestigious Digital Preservation Awards (DPA) at the Wellcome Trust, London. The awards run by the Digital Preservation Coalition (DPC) are the most prominent celebration of achievement representing people and organisations who have made significant and innovative contributions to protecting the value of digital information.

Digital preservation 40

Digital preservation Archiving Risk Marketing 40

Adam Shostack

NOVEMBER 30, 2016

There’s a really interesting podcast with Robert Hurlbut Chris Romeo and Tony UcedaVelez on the PASTA approach to threat modeling. The whole podcast is interesting, especially hearing Chris and Tony discuss how an organization went from STRIDE to CAPEC and back again. There’s a section where they discuss the idea of “think like an attacker,” and Chris brings up some of what I’ve written (“ ‘Think Like an Attacker’ is an opt-in mistake.”) I th

Risk 40

Risk IT 40

CGI

DECEMBER 2, 2016

Open APIs: A coming of age. shobana.lv@cgi.com. Fri, 12/02/2016 - 04:15. One of the hottest topics at this year’s Sibos conference in Geneva, Switzerland was open APIs (application programming interfaces), and how their introduction is causing concern among some financial institutions, while offering promising opportunities for early adopters. Regulations, such as Europe’s revised Payment Services Directive (PSD2) and others, is driving the move toward open APIs in financial services, and this b

Financial Services 40

Financial Services Digital transformation Marketing Data structuring 40

Hunton Privacy

NOVEMBER 29, 2016

On November 21, 2016, against the backdrop of the EU General Data Protection Regulation (“GDPR”) and Brexit, UK Information Commissioner Elizabeth Denham delivered a keynote speech at the Annual Conference of the National Association of Data Protection and Freedom of Information Officers. During the address, Denham discussed the UK ICO’s ongoing preparations for the GDPR, reiterating the government’s position that the GDPR will be implemented in the UK. .

GDPR 53

GDPR Big data Data Privacy Privacy 53

Advertisement

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

Risk

Robert's Db2

NOVEMBER 27, 2016

Over the past several years, I have reviewed DB2 for z/OS systems running at quite a few client sites. Part of the analysis work I do in performing these reviews involves looking over a DB2 subsystem's DSNZPARM values (or ZPARMs, for short -- the parameters through which the set-up of a DB2 system is largely specified). I have seen that certain ZPARM parameters are very regularly set to values that are not ideal.

Archiving 48

Archiving Access Mining IT 48

Adam Shostack

NOVEMBER 28, 2016

In September, we shared the news that for its 50th year, the people of Gävle paid an extra $100,000 to secure the goat. Sadly, it seems to have not helped. Today, the goat tweeted: Oh no, such a short amount of time with you my friends. The obvious lesson is that the Swedes have a ransomware problem, and the goat should stop clicking on links in email.

Security 40

Security Ransomware IT 40

Hunton Privacy

NOVEMBER 28, 2016

Recently, German Chancellor Angela Merkel spoke at Germany’s 10th National IT Summit, and called for EU Member States to take a pragmatic approach to the application of EU data protection laws. Chancellor Merkel warned that a restrictive interpretation of data protection laws risks undermining the development of big data projects in the EU. Ahead of the introduction of the General Data Protection Regulation throughout the EU in May 2018, Merkel argued that, more than simply preventing the excess

Big data 45

Big data Personal data Risk IT 45

Hunton Privacy

NOVEMBER 30, 2016

On November 22, 2016, the Department of Health and Human Services (“HHS”) announced a $650,000 settlement with University of Massachusetts Amherst (“UMass”), resulting from alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules. . On June 18, 2013, UMass reported to HHS’ Office for Civil Rights (“OCR”) that one of its computer systems at its Center for Language, Speech, and Hearing (the “Center”) had been infected by a malware

Computer and Electronics 40

Computer and Electronics Insurance Privacy Risk 40

Advertisement

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

Security

Adam Shostack

NOVEMBER 29, 2016

[ Dec 15 : Note that there are 4 updates to the post with additional links after writing.]. The Green Party is driving a set of recounts that might change the outcome in one or more swing states. Simultaneously, there is a growing movement to ask the Electoral College to choose a candidate other than Donald Trump to be the next President of the United States.

Government 40

Government IT 40