Crash’in the wings

… Thinking back of the Taleb’ian remarks, and truths, on Extremistan, and how some more or less closely watched parameters may lose their variance but not their uncontrol since such petering out of shock’lets are just the precursors of an asteroid impact scale collapse, I wondered what is about to happen in infosecland. Since for weeks, nay months already, there has hardly been any news… Apart from the usual suspects (#ditchcyber ..!), there hasn’t been anything serious, has there, by means of yet another class break or more comprehensive controllability breakdown?

Which is why everyone should sit more uneasily, in stead of the opposite sleeping better than ever.

But then, this was the message from your Wolf-crying boy …?

To which:
elk-06

[Since last Friday, you know this isn’t a reindeer but an elk that is no moose, at least not everywhere]

Security so(m)bering

There’s this discussion going down on the merits of privacy versus security. Whether the one is part of the other, or the other way around, or both. Whereas the smarts are with considering privacy enhanced by good confidentiality settings ’cause they see that privacy is an issue of higher (abstraction) order than mere confi; achieved by it but only as infosec are the bricks and mortar when all you wanted is not bricks or so but a wall.
Through which you may reflect on compliance in infosec. Because hardly ever, is that taken to include compliance with the principles and business objectives and conditions that include being sparse with hinder to the business. Really, those that truly set only guiding rails not enforcement rails, are the unicorns of the trade. No, not those unicorns, those are just frauds anyway.
You may try to do better; really. It starts with risk … when properly applied, you would not get the remarks about ‘why, it has never happened to us before / what are the odds?’ but might even get better support for some slightly hindering process changes and better (but less end user detectable) ‘infra’ i.e., everything under the users’ level of visibility.
So, I’m not sombering or if, about the eager beaver pervasive prevalence. Because sobering up, wising up, may win the day and may be due…

We shouldn’t somber too much… Isn’t this a perfect opportunity to finally demonstrate how we do (… can …) link up information security to real business issues at the highest GRC levels. Since we shouldn’t be passive, and leave ‘privacy’ to be taken over by lawyers jumping into the current Privacy Officer void. Since we can translate all the operational and tactical work that we do on privacy, all the way up to strategic levels and still be very concrete. And not have to wait till ill-understandable “guidelines” (shackles) keep us from achieving something.
No more wannabe whining about ‘deserving’ a seat at the Board table or at least be heard; not asking to be allowed but matter-of-factly showing ‘Done.’ … if, not when, you did informtion security right all the way…

Just like that:

[“Na na nanana can’t hear you!”; Porto]

De nieuwe KvK-registratie

Voor velen is het een klusje dat lastig is, maar er nu eenmaal bijhoort als onderdeel van ‘being in business’.
De registratie bij de Kamer van Koophandel. De basics, bij de enthousiaste start van bijvoorbeeld een zelfstandig bestaan. Het onderhoud, bij wisselingen in het verenigingsbestuur — en dan blijkt de KvK dermate relevant, dat men nog een natte handtekening vereist maar dan wel in het bekende veel te kleine rechthoekje te plaatsen waardoor de gezette handtekening welhaast per definitie niet klopt…! Hoe diep in het vorige millennium kan je achtergebleven zijn; dit toont wel aan dat de KvK welhaast niet nuttig meer kan zijn…

Maar nu is er in tijden van ‘cyber’ (#ditchcyber!) een alternatief of eerder, een vergelijkbare registratie: Bij de AP.
Jawel, de Autoriteit Persoonsgegevens, zo genoemd omdat de verwarring met het begrip ‘privacy’ nog niet groot genoeg was wellicht, en hernoemd om weer een decennium opstarttijd te geven voordat effectiviteit kan worden verwacht en alsdan weer een nieuwe tijd aangebroken is die vraagt om een ‘andere’ instantie ..?
Want we hebben immers de Wet meldplicht datalekken… Met 700 registraties in de eerste twee maanden (rekening houdend met een volle eerste maand nieuwjaarsborrels, dus een week of vier) is wel duidelijk dat het een kwestie is van (aan)melden en verder gelukkig niets — tenzij men pech heeft niet politiek relevant te zijn en ‘dus’ najaagbaar …

Ach, overheid; leuker kunnen ze het niet maken, wel onmogelijker…?
DSCN1834
[En daar komt nou ook niet echt tegenwind vandaan…]

Yup, there it is …

… What took us (?) so long …?

Hybrid war

Yes, the phrase we all were waiting for, or might have predicted but hardly anyone did. But now, out there for all the FUD and fear mongering (to profit from ..!). May this be the avenue of submersion of cyber (#ditchcyber !), like a U-boat trolling and unexpectedly blowing you out of the water?
What will be, will be. Grab the money trucks!

On a side (?) note:
DSCN7602
[Transport for the consultants /-cy fees for you, required to tackle it all; Baltimore]

Watson’s place to be

Two points re Watson here, one poignant, one solved:

  • Where is Watson? Because, it must run on some (i.e., enormous number of) core processors that physically are, somewheres (multiple). Would anyone actually know or otherwise, wouldn’t that be scary for all the idol-worshippers of individualised-robotlike AI ..?
  • The name, the motto. After Thomas J.’s … Think. Name, sole purpose. Nomen est omen. Capice ..?

So there you have it. The question remains Open. Until you provide me with some answer, possibly..?

Also:
000010
[Cogite, citius altius fortius! of the 1928 kind; Amsterdam of course]

The ides of March

… aren’t today only, but are indicative of … well, a lot of what goes on in infosecland these days.
Who to trust, when your buddies and experts and both in ones, may carry knives or worse. Like, turning their your defenses against you behind your back. Like the Brutus’es and Ed S.’s did because their consciousness revived (true in both cases ..!), like the great many are doing without tipping you off already. Until it’s too late. And, in similar vein, how’zat for your backdoors built in ..?
But then, as long as you can sit there like a rabbit in the headlights … sleep now in the fire [insert appropriate link to RATM clip] because the Time Till Collapse may leave you less room for Après Nous la Déluge than ever before.

Just to wake you up, by the way; if you read the above as some kind of chagrain I may have achieved my aim of making you think beyond mere Mehhhh.
So, I’ll leave you with:
DSCN7971
[Shifting politics, shifting alliances…]

Privvezee Shield

The fig leaf of the trade ..?
Probably will blow in the wind at the first whisper over 2Bft. E.g., through ‘misinterpretation’ of the rules and inherent incapacity to understand the Principles, by some vague fifth-line anonymous placeholder instructed to not understand, buried deep down in some TLA you may or may not have heard of.

And then, the wind cried Mary; landsliding into only the thinnest of lip service with a torrent (no double entendre intended) of factual breaches.

You’ll see… Plus:

DSCN7411
[A sub, appropriately, even if only in Baltimore…]

Racing humanity against ASI

One thing still amiss in the discussions about the (near?) Future:
Whether Singularity/ASI will come before humanity leaving its biological substrate, or the other way around.

The first, leading to a dystopian future of humans initially being Machine’s pets but later (?) being discarded as inefficient nuisance. Even if only via Lanier‘s route.
The second giving some hope that humans may transform into ASI after which the age-old wars start all over again. Or, the first past the post takes all…

Yes, still ploughing through [and finding much want for evidence or less of it, and addition of great many ethics aspects] Kurzweil as here, here and here.
The first, in a great many previous posts on this blog. The second, too. I’m unsure how the future will play out. Now that Ray’s predictions, time-wise, seem to have fallen before (fallen non-behind) actuality maybe due to something with a financial crisis but Ray had demonstrated (?) that to not hurt the ‘real’ economy too much — from which either we will bounce back with a sprint to return to the (smooth..?) expo growth path, or we will prove not all that starts exponentially, will indefinitely continue that way. So we have lost already by not waking up fast enough or still have some time if only we’d wake up to join the discussion — not necessarily the Luddite revolt …

Your thoughts, please ..?

Oh and just wanted to add, for the relatively (very) short term: “If every instrument could accomplish its own work, obeying or anticipating the will of others, if the shuttle could weave, and the pick touch the lyre, without a hand to guide them, chief workmen would not need servants, nor masters slaves.” (Aristoteles) — taken to be positive. But just extend that; one could consider it short-sightedness by Ari to not have asked why there would be any chief workmen with the possibility that there would need not be any work at all leading to no income for all hence devastating poverty and starvation but for the few if any (sic) who ‘own’ the machines. Also:
DSC_0354
[The interesting about ‘life’ in Chalons-en-Champagne is just a tucked-away corner, nothing more — same for humanity in the near future ..?]

Ketenregie en legerkorpsvakgrenzen

Tsja en dan denk je terug aan de afgelopen decennia waarin het maar niet lukte om in semi-(quasi-? sub-? nep-?) overheidsland ketenregie op poten te zetten. Nee, nee, nee, er ‘werkt’ misschien hier en daar iets, maar dat komt niet verder dan een operationeel niveau van geen-nucleair-conflict met op tactisch en strategisch niveau een totalitaire koude oorlog.
En ja, in de private sector (op zich al bedroevend, dat er een aparte term bestaat voor wat toch 90+% van de economie zou moeten beslaan maar niet verder komt dan een procent of 30, hóógstens) is er wel iets tot stand gebracht, maar dan met geweld en keiharde afstraffing door failliet bij minder-dan-maximale totale opoffering aan de klant.

Ah, de klant. Van de keten, aan het eind van het productieverhaal.

En oh, er zijn wel modellen. Degenen die nog een kans hebben inzicht te hebben (opgedaan), pakken namelijk hun VS 2-1351 erbij. En lezen vooraf nog even hun IK2-25 ;-] en dan hoofdstuk 8 uit voornoemde. Maar dat terzijde, want de essentie is dat het de lessen terugbrengt inzake de kwetsbaarheid voor aanvallen vanuit het Oosten die zich, van die zijde de intelligentie erkennende die zich zal richten op exploitatie van de zwakke plekken aan onze kant, zal richten op de legerkorpsvakgrenzen.
Omdat daar de coördinatie zwakker zal zijn over de vakgrenzen heen, en de ‘eigen’ suboptimalisatie binnen de vakken tot verminderde aandacht voor de grenzen leidt.

En … dat klinkt bekend ja. En inderdaad, daarin ligt het knelpunt bij regie en toezicht over de hele, van achter, te doen hebbende met een tegenstander (sic) over de hele, tegenover. Die zo is naar interpretatie van de eigen doelen, nog niet in staat is tot tactische nucleaire actie (via de politiek) maar wel de eigen belangen onvoldoende tegemoetgekomen ziet.
En dan? Dan dus de oplossingen uit de door de eeuwen heen ontwikkelde praktijk ter hand genomen. Inzake dwang van hogerhand tot maximale coördinatie tussen de keteneenheden en opoffering van de eigen borstklopperij ten faveure van de totale prestatie, op straffe van degradatie. Zou dat niet boeiend zijn; de holste vaten vanuit de leiding verplicht voor de rest van de carrière in het call center tewerkstellen ..?

Ach, als, áls nou eens de Mexican armies van bureaucraatjes aan de FLOT zouden worden gedumpt… Page en Popla zouden de omzet fors zien stijgen. En het bewust worden van de eigenlijke opdracht zou na catharsis en vervanging door Echte leiders tot zo veel betere overheidsprestaties leiden…

Dromen mag, toch ..? En:
DSCN7902
[Geschikt voor de ‘leidinggevenden’; Stockholm]

AnchoringThink

This might be a signal.
When reading up on mr. S. Godin’s blog (hah, does anyone call him that, these days?), I realised when reading this post that not only can anchoring sink you, it may also be a major contribution to groupthink and subservience to bureaucracy, which seems to be two facets of the same thing. Being, that the anchoring that the group process produces either by clinging to the most-anxiety-reducing interpretation of the opinion of the perceived Leader [with all the side notes of the duce only presenting him(sic)self as such, empty barrel and all] or by averaging out all peculiars and hence reaching an anchor point of political position — reminiscent of Ortega y Gasset style Masses.

On the flip side, this points to what it takes to be a great consultant indeed, as Godin pointed out: addressing the groupthink narrow-mindedness by revisiting the vastly wider potential scope of possibilities and options than can be seen by looking back too little. This might have been the edge that e.g., a McKinsey had — haven’t heard too much from them, the last decade; are they still around, shrunk or not?
So, to be a better advisor, by all means search back for the greenfields from which current ‘opinions’ evolved and take a fresh restart of evolution from there. Also, be a maverick. As I am, qua risk consultancy/management/audit. Hence the signal to hire.

And:
DSCN1051
[Obvious shape, for a library ..? La Défense again]

Maverisk / Étoiles du Nord