Wired / Tired / Expired, July 2014 edition

DSCN0704
[This one I do know ’cause I’m from Barça]

So, here’s the July edition of my Wired / Tired / Expired jargon watch overviews, a mixed bag and a shortie due to Summer:

WIRED TIRED EXPIRED
Developing IoT methodology, step by step Hyping IoT and wearables, not knowing the difference Hyping Big Data
As here. Just track this, this and this page. Do I really need to explain this ..?
Security breaches are normal APTs Privacy
We’re getting used to massive data leakage; don’t care too much anymore. Outrage ..? Not so much. Just mass abandonment. ’cause they’re so hard to tackle, people lose interest. But still they’re out there. In with you. Yeah, yeah. New EU regulations will mean massive changes. But only after they will arrive. Someday.
SBR/XBRL (still)
incl Continuous (extremely (ad hoc) sliced and/or granualar) Assurance
Services diversification Quarterly EBITDA
Finally, finally it begins to dawn; the breakthrough of ideas re this, as prof. Verkruijsse already knew. Will lead to fuzzy positioning, same price pitch, bland results. Really? Who would still be interested …? The geriatric demographic will no longer be interest(ed).
Business canvases (rapidly changing) No business plans, just an idea to pitch to VCs Business cases
Since the world changes so fast, and you should know where you come from and where you’re (thinking you’re) going even if the picture isn’t crystal clear and constantly changing. The odd side out; too vague, will not be acceptable. Show me one that isn’t a great big lie.
Suits Good Wife Matlock (reruns)
Witty, yet showing vulnerabilities and for once, somewhat subtle pointers to actual slightly vulnerable personalities. Has gone into repeat mode. Just stale, man.
Locally produced Superfoods Wheat grass
Nearshoring of your food supply; keeping the logistics to a minimum, and close to your environment. You did not miss the bombardment of debunking scientific articles on these, did you? Goes in with Birkenstocks (see below)
Vinho Verde Grüner Veltliner / Prosecco Rosé
Ah, how refreshing for the season! Brosecco, both. Austria tried but, see, it’s not (only) about the grape, it’s much much more also about Quality. Which always, always, ends up being way too sweet when ‘unfreezing’ to doable temperatures.
Havaianas / Juichpak (tie) Regular flipflops Birkenstocks
W now, but will be forgotten next month… Dork-style. Or top right of:
nerd-venn-diagram-9420-1252236207-2
Don’t forget the goat hair socks…

OK, any suggestions for next month’s edition ..?

Book by Quote: David, mostly plus some Goliath

In the series of Book by Quote’s, I was to enter the quotes from Malcolm Gladwell’s David and Goliath here.

But then, I have the Dutch version (was a gift). And, of all of it, I only would have three (3) quotes to share. Because, after the Introduction, it all became Boring so quickly that I found little to share…

But hey, for you there’s always:
20130326_131921[1]
[Wintery feelz, right ..?]

Then, for the ones among you who could hold out past the picture, here’s my take on the back-translation of the three quotes I found interesting…:

This is called the Principle of Legitimacy and legitimacy depends on three things. Firstly, those that are asked to bow to the authority, should have the feeling they have a voice and they are listened to when they speak up. Secondly, the rules must be predictable. There must be a serious expectation that the rules will be about the same tomorrow as they are today. And thirdly, the authority must be equitable and fair. One group shall not be treated different from another.

Hence, power should be seen as legitimate, or it will have an adverse effect.

Kennedy writes: The point with deterrence is that it’s about what it means for transgressors and potential transgressors. It is about how they see the rewards, risks and trade-offs.

And that’s it. Not even the main line of the books, that is repeated ad nauseam by returning to a select few examples ad nauseam. That are the select few well-known ones, because they are the exceptions, maybe …!?
Glad to have read the book, to have it off my list and to be able to validly claim to have read it (all), but let’s move on…

Postdictions 2014-II

A progress report on the Predictions 2014 I made in several posts here, at the end of Q2.

First, of course, a picture:
DSCN1023
[New then, outdated now, La Défense]

So, there they are, with the items collected from several posts and already updated once before in this:

Trust Bitcoin may be in this corner, covering a lot of this subject [edited to add: it’s now legal in California ..!]. Also, Heartbleed pointed out our dependency on ‘anyone but us’ in actually checking/testing open source software like OpenSSL, and the trust placed in the great many low-level bits and pieces that make up ‘the’ Internet (connections).
[After publishing, I’ll cross-post my ISSA Journal column on this, as a post] —> [Here it is]
Identity Facebook allowing anonymous (fake) identities. Users deleting posts from socmed, and switching to ephemeral messaging (Snapchat et al.). The European Court ordering Google to delete histories at request. (The semantics of) identity proceeds to being manageable…
Things Moving into a focus, vanguard of Sensors. And the Glass successors are surfacing. Earables here …
Social Movement all around; with a focus on privacy as in my May 30th post.
Mobile See Things.
Analytics Wow, this one’s moving into the Through of Disillusionment quickly! Now get it to jump out at the other hand, as quickly.
Cloud Mehhh, indeed. Still. The focus shifts towards actual security implementations, and control over that. On the Slope of Enlightenment, I’d say.
Demise of ERP, the Dude, these platforms aren’t even audited otherwise than by the most boring of boring routines – anyone interested in things other than pure dry deadwood, are working on other things.
InfoSec on the steep rise Even if we haven’t seen enough on this!

On APTs: We’ve seen Heartbleed come. And not go. This being just a mere incident, incidental symptom…
On certification vulnerabilities: See the previous. Check.
On crypto-failures, in the implementations: Some minor Bitcoin stuff, not too much else.
On quantum computing: – still not too much –
On methodological renewal; as it was: I blogged about this (re Rebooting CIA and OSTMM). Some progress here and there, but no ✓ yet.
Deflation of TLD Really out of sight even in the most dull accountant’s circles.
   
Subtotal Already clearly over 80% as we speak, when discounting for some fall-back here and there.

The faint of heart wouldn’t necessarily want to speak the bold characters out loud.
See you at the end of Q3 ..!

[In repeat, to add:]
Missed in the predictions ahead of time, but still worthwhile to watch: Google’s move towards banking via Gmail … as per this story, as commented ‘ere.

Iconic clarity failure (privacy edition)

Got a pointer to the icons that are in the EU Privacy directive.
Wow. I can’t even … (did I just write that ..!?)

See whether you’re able to guess the meaning of the following:
Icons

A big Nope, huh …? The answers, after the break… Continue reading “Iconic clarity failure (privacy edition)”

OSSTMMPerimeter ..?

Just a note; was struck by the OSSTMM approach towards the structure of infrastructure. [Disclaimer] though I am quite a fan of the OSSTMM approach (and do want to write up tons of whitepapers linking it with my ideas for moving forward in the InfoSec field without having to revert to #ditchcyber bla), I feel there’s a snag in it:
The analysis part seems to still take a perimetered, though onion, approach. The Defense in Breath is there, for sure, but still the main (sic) focus is on the primary axis of the access path(s). Does this still work with the clouds out there and all, focused as they are on principalled agnostics on where your data and ‘systems’ might hang out?

OK yes now I will go study the OSSTMM materials in depth to see whether this is just my impression and I’m proven horribly wrong, or …

So i’ll leave you with:
DSCN3689
[Hardly a street, next to Yonge]

To invent, and/or be Belgian.

Hm, it struck me that one would better not be Belgian when inventing stuff.
This guy invented the Internet – and was all but forgotten; so many others were bestowed the fame.
These guys predicted the closure of the Standard Model – and the particle was named otherwise.

This guy, at last (actually, first), achieved fame for his invention. … Hey, there seems not to be any link on the ‘net to that great man Vanderslagmulders the inventor of the spare tire …! Oh did these fellows get credit again. There goes my argument. Or not even.

So, for closure:
??????????
[At the heart, somewhat relevant]

Maverisk / Étoiles du Nord