Time to rethink IT security

Last weekend’s webcam launched cyber attacks are a warning that we need to take security seriously

Last weekend a cyberattack launched from compromised webcams crippled a number of high profile services. In response, the Chinese manufacturer has withdrawn the devices from the market.

That dodgy webcams should have been used to launch a massive DDOS doesn’t surprise anyone who’s spent any time in the home automation field. These problems are endemic in the Internet of Things.

In the early 2000s I became involved in a home automation company through my IT support business. Basically we were kitting out Sydney’s harbourfront mansions with state of the art technology.

Very quickly I realised something was wrong. Almost all the home automation and CCTV systems were running on outdated, insecure software. The leading brand of home security systems used servers running on an old version of Windows 2000 at a time when malware was exploding.

It wasn’t a matter of if, but when, these systems would become hopelessly compromised given the networks they were running on were shared with the home users.

The real concern though was when I raised this with the vendors, installers and designers – no one cared. It was clear security wasn’t a concern for the market and the industry.

We could have patched the systems and boosted their security policies but given the shoddy software being used – mainly DOS batch files – and the assumed file permissions we’d have completely broken the systems and it would up to us to fix it given the attitudes of vendors and clients.

After realising this problem was industry wide I pulled the pin on that business venture as I wasn’t prepared to carry the legal risk and moral obligation of helping install dangerous equipment into people’s homes or businesses.

I’ve since watched as the Internet of Things has become fashionable with the knowledge that the industry’s cavalier attitude towards customer security hasn’t changed.

Now we’re at the stage where script kiddies can launch massive attacks from compromised webcams – God knows what the serious bad guys like state sponsored actors, criminal organisations and commercial spies are up to with these things – which shows the industry’s robotic chickens have come home to roost.

What last weekend’s events show is we have to demand better security from our technology suppliers. That though comes at a cost – we’ll pay more, we’ll have to sacrifice some convenience and we’ll have to spend time maintaining systems.

Are we prepared to wear those costs? Is the tech industry prepared to move beyond it’s ‘good enough’ attitude toward security? Are governments prepared to legislate and enforce proper design rules?

We may not have a choice if we want to enjoy the benefits of technology.

Similar posts:

  • No Related Posts

What’s next for small business – trends in the modern workplace

What are the technology trends affecting businesses of all sizes?

This week’s The Future is now – Trends in the Modern Workplace webinar was an opportunity to look at the trends affecting small and micro businesses.

What’s notable is almost all the topics affecting small business are being felt by their corporate cousins. It shouldn’t be surprising the technology and social trends affecting society are equally being felt

Now the webinar is over, I’ve posted the presentation to Slideshare with the commentary below, we cover established trends like the shift to mobile then ponder the future of business with artificial intelligence and virtual reality.

The presentation ties up with the post I published a few days ago that provides the commentary to the slides.

Similar posts:

Lessons from the CIA investment fund

Dawn Meyerriecks, the CIA’s Deputy Director for Science and Technology, gives an interesting insight into the agency’s investment philosophies

One of the little discussed reasons for the US tech industry’s success is the role of military and intelligence spending by the government. Not only are various agencies funding research and enthusiastically buy technology, they are also being strategic investors in many companies.

In Sydney last week Dawn Meyerriecks, the CIA’s Deputy Director for Science and Technology, gave an interesting insight into the agency’s investment philosophies at the SINET61 conference.

The conference was aimed at drumming up interest in the technology security industry along with showcasing the connections between Australia’s Data61 venture and the US based Security Innovation Network (SINET).

SINET itself is closely linked to the United States’ security agencies with chairman and founder Robert Rodriguez being a former US Secret Service agent prior to his move into security consulting, venture capitalism and network-building.

Compounding the organisation’s spook credentials are its support from the US Department of Homeland Security along with the UK’s Government Communications Headquarters (GCHQ), so it was barely surprising the Australian conference was able to attract a senior Central Intelligence Agency officer.

Investing in flat times

“Flat is the new up,” says  Meyerriecks in describing the current investment climate of thin returns. In that environment, fund managers are looking for good investments and the imprimatur of the CIA’s investment arm, In-Q-Tel, is proving to be a good indicator that a business is likely to realise good returns.

“If you can predict a market – and we are good predictors of markets – then the return on investment is huge,” she says.

“In-Q-Tel really leverages capital funding for good ideas. We get a twelve for one return, for every dollar we put in it’s matched by twelve dollars in venture capital in emerging technologies.”

Attracting investors

For the companies In-Q-Tel invests in along with those that supply technology to the organization, the CIA encourages them to seek private sector investors.

“What we’re telling our supply chains is you go ahead and tap into the capital markets,” Meyerriecks says. “If you can turn that into a commercially viable product then will will ride the way with the rest of the industry because it’s good for us, it’s good for the country and it’s good for the planet.”

Adding to the CIA’s attractions as a startup investor are the opportunities for lucrative acquisition exits for the founders, she believes. “Not only are we using that venture capital approach for emerging technologies but our big suppliers are sitting on a ton of cash.”

Diversity as an asset

Another lesson that Meyerriecks believes will help the planet, and the tech industry, is diversity. “Globalisation has show isolationism doesn’t work,” she says.

“Back in the day when I was a young engineer the best way to make sure your system was resilient was to harden its perimeters. the best ways to be ‘cyber resilient in the old days was by drawing the barriers to keep the bad guys out.”

“The best way to be cyber-resilient in the old days was to draw big boundaries around yourself to keep the bad guys out. The latest studies look at other things because you want to be resilient, you want high availability.”

Now, system diversity is seen as an asset.“Biologically the three factors that contribute to resilience are the ability to adapt, the ability to recovery and diversity,”  Meyerriecks says. “We look to deliver high availability among components that may not themselves have high reliability.”

The future of investment

“I think we’ll see commercialisation still driving investment for applied R&D in particular,”Meyerriecks said in a later panel on where the agency is looking at putting its money.

“The big game changers will be around the edge, taking SDN (Software Defined Networking) to its logical extreme giving everyone their own personal networks, not just in data centres but at the edge of the network.”

“I think there’s lots of things that the commercial industrialisation of the technology and physical system are going to force us to grapple with on many levels.”

Risks in managing identity

An interesting aspect of Meyerriecks’ talks at SINET61 was her take on some of the technology issues facing consumers and citizens, particularly in the idea for individuals having their own personalised network.

“This opens up a whole range of things, ” she suggests. “Do I eventually not just be an IMSI or EIMI (the mobile telephone identifiers) but do I become an advertising node, does that become my unique ID? Do I a become a gaming avatar?”

“Then we get into the whole Big Data area. Computational anonymity is a phrase we use. At some point people start saying ‘this is crossing the line’ – it crosses the ‘ooooh’ factor.”

Changing Cybersecurity

“I think the definition of cybersecurity will be expanded to much more beyond wheat we’ve classically thought about in the past.”

Meyerriecks’ presentation and later panel appearance was a fascinating glimpse into the commercial imperatives of the United States’ intelligence community along with flagging some of the areas which concern its members as citizens and technology users.

The US security community’s role in the development of the nation’s tech sector shouldn’t be understated and Meyerriecks’ observation that private sector investors tend to follow the CIA’s investment path underscores their continued critical role.

Similar posts:

Ditching the old tech – Lessons for the iPhone from the Apple iMac

Apple’s rumoured changes to the iPhone 7 are causing disquiet among customers, but they could mean opportunity.

“I’ve been betrayed, I’ll never buy another Apple product again!” was the cry in 1998 when the company announced their new range of iMacs and portables wouldn’t support the long standing Apple Development Bus (ADB) system and floppy disks.

At the time Apple had been in decline, only the year before Microsoft had bailed the company out with a few conditions that had deeply irritated the company’s loyal customer base.

Many of those customers – mainly in education and graphic design – had invested deeply in ADB compatible equipment and their irritation at abandoning that investment for USB based kit was understandable.

Today we’re seeing similar protests about the rumoured dropping headphone jacks from the upcoming Apple 7 device, customers aren’t happy about the possibility being forced from a well established standard to a less reliable and likely more expensive system.

Unlike the computer world of 1998 today’s marketplace is very different, Apple is no longer a quirky and niche product but the most profitable of the tech industry’s giants – as Microsoft was back when Steve Jobs swallowed his pride and accepted Bill Gates’ bailout.

However most of Apple’s profits come from one product line, the iPhone. While the iPhone is probably the only truly consistently profitable smartphone, it competes in a fiercely fought for consumer market.

Already in China, one of the company’s most profitable markets, the iPhone’s market share is falling in the face of good quality but slightly cheaper Chinese and Korean devices.

Should Apple push those consumers too far by shifting the iPhone to a more expensive or proprietary system then the competing Android devices may well pick up market share and dent Apple’s fat profits.

However history shows that these hardware shifts do happen and older technologies are supplanted by more expensive, but better, inventions regardless of how much users have spent on the status quo. A century ago the automobile started replacing a millenia of investment in horse drawn technologies.

In the case of Apple abandoning the ADB back in 1998, it was the spur to adopt the USB standard which up until then had been buggy and unwanted as Bill Gates himself had found.

As history shows, Apple thrived after ditching the old technology despite the complaints at the time and if the company resists the temptation to lock users into a proprietary system there is no reason to think the same can’t happen again.

Apple mouse (with ADB connector) courtesy of Wikipedia

Similar posts:

  • No Related Posts

The cost of the cloud: How the disrupters are being disrupted

Cisco, Autodesk and Microsoft’s cutbacks and pivots show technology companies are not immune from disruption

A common factor when talking to tech companies is their talk of disrupting industries, they themselves are not immune from change though.

This week networking giant Cisco announced they would cut seven percent of their workforce, nearly 5,500 employees, as the company deals with the shift to software defined networking equipment continues.

Industry commentators are warning Cisco are not alone as software and cloud based services change the tech industry with Global Equities Research’s Trip Chowdhry estimating the sector may shed up to 370,000 positions this year.

Today I had the opportunity to ask Autodesk’s Pat Williams, the company’s Senior Vice President for Asia Pacific, about the challenges facing companies transitioning to the cloud. At the beginning of the year Autodesk announced they would be cutting ten percent, over 900 jobs, as part of a structuring plan.

“I think there was a model that we had that as we moved to a subscription business that said we would see a bit of a drop in revenue and we realised our gross margins would be pressed,” he said.

“What we were trying to do was right-size the business,” Williams continued. “Sometimes you need to do that. It was a very intentional forward looking move we made.”

Autodesk and Cisco are far from the first tech companies to suffer from the software industry’s shift to the cloud. Microsoft have been probably been the business most affected by the change.

Cisco themselves have been dealing with this shift for a decade as well, with a major restructure in 2011 that saw 6,500 jobs cut.

What is clear in a transitioning industry is that Microsoft, Cisco and Autodesk are far from alone in making cuts. As Autodesk’s Williams points out, it’s probably best for managements to be doing this proactively rather than waiting for the changes to force their hands.

The stories of Cisco, Autodesk and Microsoft show all industries are facing changes. Assuming you’re safe in any sector is brave thinking.

Similar posts:

Keynote speaking and presentations

Paul Wallbank speaks on how businesses, workplaces and communities are changing in the twenty first century

How is your business or community adapting to radically changing marketplaces and society?

Speaker, writer and broadcaster Paul Wallbank has been at the forefront of helping businesses and communities find opportunities in this rapidly changing era for twenty years.

Paul’s presentations are lively, interactive and designed to both entertain and challenge audiences looking at how their companies, industries and communities are going to prosper in the connected century.

Some of the areas Paul covers are the workplace of the future, employment in the age of robots, how the internet of machines is changing markets and what technologies like cloud computing, social media and Big Data mean to your business.

All keynotes, presentations and workshops can be customised to suit your unique needs. Topics include;

Future Proofing your business
Decoding the new economy
Leadership in a digital era
Tools for the new economy
Why Broadband Matters
The Future of Business

You can view many of Paul’s presentations at his Slideshare site.

Previous presentations have included;

The future office. What will the office of the future look like?
Web 4 Free. Doing business on the web with a shoestring budget.
The elder guru; exploding the myths of the digital divide.
The top ten solutions for getting the most from small business IT
What does it all mean? cutting through computer jargon.

All presentations are available as keynotes or workshops and Paul will tailor the content to suit your organisation’s or industry’s unique characteristics.

Paul connects the dots to show how your industry, business and family are being affected by changing trends in technology, economics and global demographics.

In explaining trends and technologies such as the internet of everything, cloud computing, social networking and broadband technologies, Paul deciphers the jargon and helps audiences identify opportunities and understand the risks in the new economy.

If you’d like to find how your business or community group can get more from their technology contact Paul for more information.

Similar posts:

Hillary Clinton’s bid for the future

Hillary Clinton’s Initiative on Technology & Innovation shows politicians are beginning to take the challenges of a changing economy seriously

As the 2016 US Presidential election settles down into a competition between Republicans and Democrats, Hillary Clinton has released her vision for the American tech industry.

Hillary Clinton’s Initiative on Technology & Innovation is a comprehensive document laying out the candidate’s plans to increase the American workforce’s skills and the nation’s infrastructure.

What’s particularly notable about the Clinton plan is her aim of “building the tech economy on main street,” which is “focused on creating good jobs in communities across America.”

Spreading the tech industry’s jobs, and wealth, beyond a few middle class enclaves is an important objective for all nations in the twenty-first century and Clinton’s objectives are an indication that the US political establishment is beginning to understand this.

Other countries should be noting Clinton’s objectives to raise the skills of workers, build the tech infrastructure and get investment into smaller communities as something they too have towards.

In an Australian context, Clinton’s initiatives highlight the missed opportunity of the Turnbull government’s Innovation Statement, a narrowly focused and weak document that has done little to encourage investment and even less to reform skills training.

The Clinton move though shows technology, training and stimulating new businesses will be one of the imperatives of nations as they deal with a rapidly changing economy.

Similar posts:

  • No Related Posts