Too late for GDPR compliance ..? Click here to pay up

It seems like everyone’s finally waking up to the fact that ‘GDPR D-day’ is less than 283 days ahead.
Yes I checked. And I didn’t discount for weekends – minus 80 days, more of less –, holidays – either the normal kind, at some three weeks in this period, or the sanctified ‘bank holidays’ for those that say they don’t believe in holidays, or say they do but still are too awkward sheep to actually go on normal holidays, maybe a week in total – and the year-end curfew on all IT changes because business is doing things they have done for years, decades, and still haven’t mastered apparently.
So, we’re more in the area of 100-150 business days left.

Before what …!?

GDPR has power of law per … 20 days after its publication in the EU Official Journal, on 4 May 2016 … !!!

It’s just that officially, it’s not enforceable.
And would one be able to challenge organisations already today, e.g., with the letters from hell just not from the duds?
[To the latter: The Dutch DPA was sanctioned in court four times recently for not having acted sufficiently in spirit and to the letter of their tasks. Suggest to estimate what percentage this constitutes to the actual number of cases they didn’t act sufficiently where legally, they were and are forced to; refusal to obey instructions…]

No really: ‘Civil’ law is other than administrative law, right? Enforcement is postponed, but is the requirement to comply as well ..?

Will ask legal advice. And:
[The Classics, may stay even when at an angle; NY-NY]

Socmed spinning into its own abyss

Was considering writing up a post on how socmed (and other sites with ‘recommendations’) in the end undoes themselves. By suggesting, proposing, and timeline-injecting ever more precise in-profile You May Also Likes, people might get more and more annoyed, and will look themselves for content elsewhere [excepting the hoi polloi that are too dumb to see they’re taken for a ride] and leave the platform in the dust. Facebuck as case in point; the more specialised platforms there are out there, persistently though not growing but remaining viable as they are, the more Fb will remain for the unsorted, culturally completely ‘flat’ content and audiences, quod non. The noise. Proven by the focus on numbers, picked up everywhere but in the socmed-sophisticated world where the Others still have the selective-elite strongholds, and will expand. Just wait until the rets of the world raises their education as well.

Even more so when platforms keep their ‘SEO’-like formulas secret, or hard to guess by error seeding / differential cryptanalysis; users will generate ever more bland content, speeding up the narrowing /shallowisation (…) of the users’ minds but driving away all that aren’t so easily pressed into ever narrower filter bubbles/funnels…
But then, why would I care?
Oh well, one can dream, can’t one..? Plus:
[May R come to the rescue against Arrrrhhhh ..? Baltimore harbour drinking club …]

Long and fruitful lives

Again, the discussions re pension age turns up; whether those in ‘physically stressful’ occupations should be pensionable – even in this day and age, without any regard to subject’s want or not..! For 10 points, compare to slavery – at earlier ages. Use 100 words or less.
Where there never is any regard either for the starting age(s) of work. Most often, those in the ‘physically stressful’ categories will have started work early, right? And/or, have paid their dues, in terms of contributions to pension schemes anyway, or indeed hard work without much in the way of tax deduction cleverness. So yeah, when it comes to a ‘right’ to be pensioned early, that should be, should have been for a long time already you lazy … policymakers, in the schemes. And, for those who started later (like Yours Truly… much later but better prepped and experienced than my cohort, definitely), having to end later should come as not much of a surprise nor special burden. Nope, I didn’t mean pre-tired half-lives, plain late-r-etirement…

Whatever. Plus:
[When this is your work/-place, you’re not used up so early, are you? Granada]

Question: Aggregate discrimination?

Iwas a bit puzzled: In all the discussions about forcing diversity into organisations by ‘positive’ discrimination even if only by preferring one candidate over the other when they are otherwise equal hence the selection criterion is discrimination by definition (sic), where is the issue settled that issues at group level, do not reflect well on individual levels ..?
That’s a long one. Triggered by this memo of Googles exexec of course, which is a rational analysis followed by a point-proving response …
I’m not going into the detail of that discussion there. However, I will go into the thing that discrimination is defined as preference based on irrelevant distinctions. Which works out in hiring like:

  • In masculine organisational cultures [to take the by far most common starting position…], shock therapy will only be counter productive to all. Very-feminine women [same, qua LGBTQ inclusion] will be laughed away at their first outbreak of tears, either openly or covertly, and be let go for not being able to stand the heat. Men will be confirmed in their convictions that high testosteron is a requirement for the job, and have the ‘proof’ (quon non).
  • If any such lady would survive, it can not be but for two scenarios: Either the men park the lady in some inconspicuous, near-only flower arranging function where nothing changes except having a token female around to show off, or the lady adapts, or chips in, or was on the masculine side of the vast statistical spread already (however off-center). Oh third scenario, the most unlikely one: All (sic) adapt – but when there are many men already, the ‘average’ will remain close to the starting position which means the lady has to adapt most, and the many men only slightly. That helps a tiny bit, and may take a long while to help (devolved-)Kaizen-style.
  • How can I help that I’m a white male …? It’s not that I had a choice, and why should I be discriminated against when someone of equal capabilities for a job (IF properly assessed so, yes) happens to never had a choice but be female/…/… and also …/…/…? Such a scheme makes me an immediate victim of discrimination, the same discrimination situation there was before the hiring started… Reminds me of that old story at a Party conference: [Speaker shouting] “What is Capitalism!?” [Crowd shouting] “One man exploiting another!!” [Speaker shouting] “And what is communism!?” [Crowd again] “Exactly the opposite!!”
    And also: I want to win the WC 100m dash too but the others are faster than me (just); that’s discrimination!
  • Of course, there’s tons to be said about the assessment of capabilities for the job, both on the candidate side (only the best of the best of the best psychologists might be able to more often than not correctly assess someone’s capabilities correctly, all others will fail dismally the more so the less they are aware of their own assessment-incapabilities…), and on the job side (have you ever seen an appropriate, consistent and complete job description let alone an equal requirements description …!? That’s a lie). Fix these two, and I’d say you’re quite on your way to solving a major part of the problem. You will also no longer ‘discriminate’ against redheads, people with polka dot socks, etc. But this will be hard, especially in the area of properly describing job requirements, not to include the often very ‘diplomatically’ formulated requirements of being a chum, having friends at the department already, not rocking the boat, belonging to the right country club (or ), etc., or even worse not describing such subtlest of subtlest subcultural clues but applying them nevertheless.
  • It seems that apart from the assessment process atrocities, the root cause of all the above is in two elements:
    • Discrimination happens at two levels; individual and, by addition/statitics, at group level;
    • The solution/correction is sought to fix the group level but is applied at the individual level.

    That’s not going to work. Though there’s no avoiding belonging to groups (even when at the spread-out multi-affiliation levels and circles, bubbles and foams of Sloterdijk’s kind!), some group affiliations are irrelevant and/or hindering, unwanted, irritating to individuals that are ‘allocated’ to these groups by others without consent, want or need.

    Oh and then, there’s a third root cause: The stupidity of statistical generalisation, a.k.a. ‘the statistician drowned in a river of one foot average depth’. Meaning again that not all men are pigs. Like the Bell curves; a great many [F/M] have more of XYZ than quite a number of [M/F], and shoving all into the extreme corners as typification, is an insult to those that have no want for such undue generalisations.

  • Where are the companies where the work force is >50% female/…/…, that beat the heck out of male-majority companies ..? Not just some unicorns, but real, like, 5000+ FTE companies. Strange. The Frightful Five all rose in the past two decades. Equality-pushes have been much longer already – allowing more than ample time to have such role model counterexamples. What’s ‘wrong’ (not) ..?

I’m not sure where I’m going with this. Apart from the conclusion that ‘positive’ discrimination is not a solution.

Now go and re-read the exexec’s memo all the way to its conclusions. The commenters there, don’t seem to be able to think straight, by the way; just hecklers to be dismissed. And, not being allowed to even discuss ‘diversity’ or actual facts pertaining to that, is the most direct and in-your-face form of censorship thinkable. There’s hardly anything even equally unconstitutional than that; if the ‘values’ at Google call for such unconstitutional behaviour, the company should be disbanded and execs jailed for it.
[Edited to add before scheduled release: How easy can all comments be summarised on the polarisation scale from nuanced and content-focused, all the way past the preconceived-conclusion reiterators that are close to, the so PC bigoted that they can’t even see their own extremism. Sad. Very sad. In ten, twenty years’ time, people will look back and not understand the blind fanatism of the wrong side…]
[Edited to add before scheduled release again: This here piece by some professor. Seriously misinformed, misinforming, apparently, or just throwing oil on e fire for fun.

For what many seem to have missed, is … the tech industry needs to change, by turning normal. Meaning that it needs to get away from the tech-only jobs and have more balance in there. See above qua job requirements … It’s not about biasing the hiring, which is unduly biasing in itself!, but it’s about changing the work into ‘normal’ jobs; then, you’ll find that all those jobs that favour the excluded, will suddenly be there, and the evironment in which they [not They The Others, just as a group designator] thrive, will be there too as the required performance will be up their alley more that it will be up the techies’. To put it bluntly [big !!! here], if you want more white people to be able to compete in the 100m dash, it’s no use giving them a head start or so. ‘White people’ may shine in other thing [Chess? Unsure what would happen if playing that, were more ingrained in other cultures…!] – only if we loose the distinction and not discuss any, do we level the world’s playing field for fulfillment before we require all to be good, healthy, happy and helpful, and well-rounded co-workers in any industry, good, healty, happy and helpful, and well-rounded caregivers at home and to everyone in our environment however near or far, ditto loving spouses, etc.etc. – again, them everyone will be equal … uhm, not; not everyone has the same abilities, remember ..? The thing is not to care in which direction your abilities are, or how far they go. Everyone being equal, all are boring like heck!
So, the real thing is to realise the tech industry may be average-women-unfriendly on average and that may (!!!) have to change, just like nursing and breastfeeding are male-unfriendly on average and have to change. ‘Positive’ discrimination is not going to work, neither is unbiasing-workshops – that’s punishing (sic) people for not doing something particulalrly wrong like putting them in brainwash/indoctrination labour camps… Now re-read the memo again and see that it says that. ]

Okay, to prevent further outdatedness by delay, I’ll post now.
Oh, and:

[Right… Digging in will help… Not. Spain]

Forever young, immature infosec

Sometimes one feels like one’s in a partial Gourndhog Day or 2:22 …
When 7 december 2006, there was this meet about the maturity of infosec, as a field. Which was compared, by Yours Truly, to the then (and now!) equally immature IS audit world – which had a couple of decades more under its development belt but was is still quite immature still.

Then there’s the first paragraph of this. ’nuff said..?

And:
[This, still fresh which is a different thing …; Barça of course]

Collaborative economy

Just a shout-out for some positive initiative, indicative of what you too, could do qua collaborative economy…: This, for all your poetry in business, in particular when you’re Dutch. Which might be an oxymoron of sorts, semantically…
Whatever. Just sponsor …

Plus:
[Past poetry in 3D; Zuid-As Ams]

Free (for) all or valuable next to nothing

We discussed the distinction between ‘users’ and ‘clients’ re socmed recently, and also a bit on socmed usage profiles – I mean, (active) ‘user’ numbers.
Did I mention … (not; ) the development of one catch-all platform for those who have no clue about their own user profiles and hence dump just about anything on Facebuck, in between all duckface, cat and somewhat-(??)-indecent pics since they don’t have the capability to see the future negative reflection this will have on their sensibility qua socmed use?
Plus a whole suite of other socmed platforms, with particular use by respective particular parties that know where to post which content? Not lumping it all together, and have it viewed by just about any irrelevant crowd, but carefully pitching various content at sites where they know only interested, subject-discriminate and -educated (also, by experience) peers will seek, find and see the subject-relevant materials.

Are there any data on this? Big data on various age categories, and whether (other) user categories (per professional category at some level of detail?) use different socmed platforms ..?
Would like to learn; thanks in advance for your pointers.
Oh, edited to add before release: There’s already something on user categories, unfortunately without the numbers.

And:
[Oh all you 2 billion individuals… Caught in the intensive human farming for data…; Zuid-As Ams]

Droneshield-downer

How would this (link in Duds) great – not so much – invention help against drones that have pre-programmed GPS coordinates and semi- or fully-autonomously fly to their destination? Because they’re out there already and even building/programming them is a piece of cake for the ones that would actually want to do harm for no defensible (sic) reason.
And also, there already is this; better drone detection than the article (and the vendors therein) suggest would be possible …!
And also, there already is law against the proposed jamming.

So, too bad, vendors Deutsche Telekom, T-Systems, Dedrone, Rhode&Schwartz, Squarehead, Robin Radar Systems, and HP Wüst: Magenta is a colour, not a viable product — it’s illegal and it doesn’t work; a square fail.

Am I too harsh? Possibly; that happened some 50 years ago as well. Plus:
[Quite this’y: All showboating, no real value, and skewed; Haut Koenigsbourg again]

Sending the right message

This of course being the right message. If you can read it when I Send it you. And, for your viewing pleasure:


[Anonymous but blurry and far from privacy-complete, this physical cloud exchange…; NY Grand Central]

Goldielocks versus information security

If you expect some fable about budgets; not so much.
This post’s about the generation thing called the Goldielocks syndrome – every generation (aren’t they ever shorter, these days?) believing that they had it, and made the society they ‘created’ no less, better than any generation before and after them.
For many generations, tech is still something that ‘came in later’ [venturing that even the newest ones, will see major tech-driven societal / tools changes in their lives], and information security nitty-gritty stuff is a major part of what they experience of that technology.
And ‘we’ (all) have done a very poor job of making it easier, actually improving over what was, to take away rational arguments for the G syndrome. We rather have heaped tons of infosec micromanagement of the worst kind onto the mere use of the technology, not even mentioning the troubles in the content where automation turned into change and inefficiencies of the polished work that was, and all that to cope with issues not in the actual work but in the operation of that very technology and its (sometimes gross) imperfections that didn’t exist before.

So, we may have to re-strategise and re-implement about all that we have, qua technology and qua information security dyeing on top and after it.

There’s other reasons, too. And:
[When defences were, quite, a bit less buggy; Haut Koenigsbourg]

Maverisk / Étoiles du Nord