Apple’s security challenge

As Apple move into the internet of things, they are going to have to take cloud security more seriously.

This week’s news about celebrities’ personal photos being stolen from their iCloud accounts would be irritating Apple ahead of their September 9 media event.

Unfortunately for Apple they seemed to have walked into this by making things convenient for users rather than enforcing strong security measures.

As Arik Hesseldahl in Re/Code describes, this breach was probably due to Apple not encouraging two factor authentication and not limiting the number of password guesses.

The latter is particularly irritating as it shouldn’t be hard for a system to pick when a brute force attack — a computer guessing a password millions of times a second — is being staged against a user.

It’s also trivial to limit the number of guesses as most other services do.

For users, the best protection is to have complex passwords which reduces the effectiveness of brute force attacks. It’s also worthwhile being careful with your personal nudie photos.

The consequences of having your iCloud account compromised are more than just losing your embarrassing photos, Wired’s Mat Honan had his entire digital life hijacked through this method two years ago.

With Apple aspiring to control the smarthome and smartcar markets, the consequences of accounts being breached becomes exponentially greater. These are issues Apple and the rest of the internet of things industry need to take seriously.

Hopefully at Apple’s big media event next week, some brave journalist will stand out of the assembled masses of sycophant hacks and ask CEO Tim Cook some hard questions about security on the shiny new iDevices.

Similar posts:

  • No Related Posts

Can the Internet of Things survive a tumble?

Can the Internet of Things survive a fall into the trough of disillusionment?

That the Internet of Things is posed to fall into the depths of the trough of disillusionment according to Gartner’s latest Hype Cycle should come as no surprise to those following the industry.

For the industry, such a fall might not be a bad thing. During the upswing to the Peak of Heightened Expectations technologies attract the hot, dumb money along with the motley collection of shysters and opportunists a gold rush always lured in by the prospect of easy returns.

When a product, technology or industry falls into what Gartner calls the trough of disillusionment it’s usually the time when its real value is discovered. Without the distractions of hype or dumb money distorting the market, the industry finds a way of using a product that’s become somewhat passe.

For the Internet of Things, it won’t be a bad thing if the sector tumbles into the abyss. The sooner it happens, the faster industry will figure out where the real value and benefits lie.

The only damage might be to some of the more prominent boosters’ egos and the hip pockets of some of the more over eager investors.

Similar posts:

  • No Related Posts

Stages of hype – the Gartner Hype Cycle turns twenty

The Gartner Hype Cycle turns twenty

Gartner’s Hype Cycle has been a favourite of this blog as it’s been pretty accurate at describing where various technologies are in the tech media’s eye.

This year is the twentieth edition and the most notable aspect is the Internet of Things is shown as being right on the peak of industry hype.

Other sectors struggling on the cycle are cloud computing, big data and machine-to-machine technologies; all of them are tumbling into the trough of disillusionment.

gartner-hype-cycle-2014

In itself this isn’t a bad thing for these technologies as the ‘trough of disillusionment’ is where the true business cases are found, certainly for the Internet of Things this will not be bad for a sector that’s clearly overhyped.

There’s also the thought that not all troughs of disillusionment are the same as some concepts – such as Big Data – are actually trends which means they aren’t subject to the whims of corporate marketing departments.

How the hype cycle will look in five years will be fascinating as things like brain-computing interfaces and the quantified self start to take form. When they reach the peak of the hype cycle we can expect many of today’s disillusioned technologies will be on the plateau of productivity.

Similar posts:

  • No Related Posts

Reaching Peak Tablet as iPad and android sales begin to plateau

An electrical retailer’s financial results might mark turning points in two different economies.

Today Australian electronics retailer JB Hi Fi released its annual results. They confirm what’s been becoming apparent over the last year that tablet computer sales seem to have peaked.

A plateauing of tablet sales is bad news for retailers like JB whose stock price fell by 8% on the news.

It’s not surprising that tablet computer sales have peaked as the growth had been spectacular and, unlike PCs of a decade ago, there isn’t an obvious five year replacement cycle.

That the old PC industry business model doesn’t apply to tablets is why Apple is focusing on other revenue sources like the App Store and internet of things plays such as HomeKit and HealthKit.

Once again, the industry leaders are finding they have to pivot to stay up with a rapidly evolving market.

The other notable point from JB’s management was that Australian consumer confidence is tanking, which might indicate the economy is entering its first recession in twenty years.

If it is true that the Aussie economy is entering a recession, then it might be time for the adults to take charge in a very immature government. Some of the Liberal Party’s pampered princelings may have to start earning their salaries soon.

Similar posts:

Hacks on a plane

That avionic systems could be vulnerable to hacking is a wake up call for the internet of things industry.

One of the great concerns about the internet of things is what happens when older computer technology that was never designed to be connected to the net is exposed to the online world.

A presentation to the Black Hat Conference in Las Vegas this Thursday by researcher Ruben Santamarta promises to show some of the vulnerabilities in aircraft avionic systems.

Today’s aircraft are extremely smart devices with the downsides shown in the tragedy of AF447 where an Air France jet plunged into the Atlantic Ocean when two undertrained pilots didn’t understand what their plane was doing as it encountered severe ice conditions in a storm.

With aircrew increasingly dependent upon computers to help them fly planes, the risks of bugs or security weaknesses in aircraft systems is a serious issue and with the continued mystery of MH370’s fate adds an element of speculation that a glitch of some form was responsible for its disappearance.

It wouldn’t be the first time a passenger plane came to grief because of a computer error; most notably Air New Zealand flight 901 crashed into Antarctica’s Mount Erebus during a 1979 sightseeing trip due to wrong information being loaded into the navigation system.

The internet adds numerous risk factors to aircraft – Santamarta’s hack allegedly works through in plane WiFi systems – particularly given these avionics systems haven’t been designed to deal with unauthorised access into their networks.

Should Santamarta’s demonstration prove feasible, it will be an important warning to the aviation industry and the broader Internet of Things community that security is a pressing issue in a world where critical equipment is connected.

Similar posts:

  • No Related Posts

Blackberry’s quest for its future

BlackBerry stakes its future on increased enterprise security concerns and the internet of things

This is the unedited, submitted version of ‘is BlackBerry ripe for a comeback‘ that appeared in Technology Spectator on 30 July, 2014.

“What do we well?” is the question Blackberry CEO John Chen asked when he took the reigns of the Canadian communication company last November.

Chen was speaking on Tuesday at Blackberry’s Security Summit in New York where he and his executive team laid out the company’s roadmap back to profitability.

Since the arrival of the iPhone and Android smartphones, times have been tough for the once iconic business phone vendor as enterprise users deserted Blackberry’s handsets and the company struggled to find a new direction under former CEO Thorsten Heins.

Back to BlackBerry’s secure roots

In Chen’s view, the company’s future lies in its roots of providing secure communications for large organisations, “It became obvious to us that security, productivity and collaboration have to be it.”

“This is not to say we are not interested in the consumer, but we have to anchor ourselves around the enterprise.” Chen said in a clear move distancing himself from his predecessor and products like the ill fated Blackberry Playbook

An early step in this process of focusing on enterprise security concerns is the acquisition of German voice security company Secusmart which was the cornerstone of Chen’s New York keynote.

Blackberry’s acquisition of the company is a logical move says the CEO of Secusmart, Dr Hans-Christoph Quelle, who points out the two organisations have been working closely together for several years.

“It fits perfectly,” says Quelle. “We are not strangers having worked together since 2009,” in describing how Secusmart technology has been increasingly incorporated into Blackberry’s devices.

Secusmart’s key selling point has been its adoption by NATO and European government agencies; the Snowden revelations on the US bugging of Angela Merkel coupled with the Russian FSB leaking intercepted US state department conversations along with the release of Ukrainian separatist conversations after the shooting down of MH17 has focused the European view on the security of voice communications.

Launching new services

Along with the acquisition of Secusmart, Blackberry will also be launching an new enterprise service in November, the new Passport handset in December along with a range of security applications including BlackBerry Guardian, a new service that will scan Android apps for malicious software.

Blackberry’s executives were at pains to emphasise their products aren’t focused on any single smartphone operating system and not dependent on customers buying their smartphones although to get the maximum security benefits.

“We will provide the best level of security possible to as many target devices out there as possible,” said Dan Dodge who heads Blackberry’s QNX embedded devices division.

Longer term plans

In the longer term, Blackberry sees QNX division as being one of the major drivers of future revenues as the Internet of Things is rolled out across industries.

QNX was acquired by Blackberry in 2010 to broadband the communication company’s product range, now it is one of the pillars of the organisation’s future as Chen and his team see that connected devices will need secure and reliable software.

Dodge says: “With the internet of things, you can have devices that can change your world.”

While QNX is best known for its smartcar operating system – it underpins Apple’s CarPlay system being rolled out for BMW as well as its own system deployed in Audis – the company’s products are used for industrial applications ranging from wind turbines to manufacturing plants.

Despite Blackberry’s announcements in New York, the company still facing challenges in the marketplace with the Ford Motor Company announcing earlier this week it will drop the Blackberry for its employees by the end of the year and replace them with iPhones.

Chen’s though is dismissive about Apple’s and IBM’s moves into Blackberry’s enterprise markets, “what we do and what they do is completely different.”

Focusing BlackBerry

The focus for Chen is to differentiate Blackberry and play on its strengths, particularly the four markets it calls ‘regulated industries’ – government, health care, financial and energy that the company claims makes up half of enterprise IT spending.

Whether this is enough to bring Blackberry back on track remains to be seen but Chen says this is where he sees the company’s future, “This is why we are so focused on enterprise and so focused on these pillars.”

For Blackberry, the emphasis on enterprise communications is a step back to the profitable past. It may well be successful as businesses become more security conscious in a post-Snowden world.

Paul travelled to the Blackberry Security Summit in New York as a guest of the company.

Similar posts:

  • No Related Posts

The internet of insecure things becomes a problem

Security with the internet of things is becoming a serious issue warns HP

Following yesterday’s posts on BlackBerry, security and the Internet of Things, HP Fortify released a report saying seventy percent of IoT devices are vulnerable to hackers.

The list of weaknesses is chilling and illustrates why IoT security is an issue that has to be resolved now.

It may well be that John Chen, BlackBerry’s CEO, has backed the right horse for his company.

Similar posts:

  • No Related Posts