Security – Page 16 – Maverisk / Étoiles du Nord

Hard coating emaille

If you’re well-seasoned, you may have turned a bit sour by all the silver bullet news even when that was targeted at point problems/solutions. And, you may even be old enough to recall Why Johnny Can’t.
Seems there’s a new version of the latter, with a similar conclusion. Too bad for all of us.

Oh well…:
DSCN0414
[Also ‘old’, also of a ‘no photo allowed inside’ site. Guess which]

Repeat mode: The definitive Top 2000 of 2015

Just to be sure you’re not led off the Right(eous) path by all those DJs out there playing songs from or candidate for some “Top 2000”, herewith a repost of the real deal.

Which of course isn’t; it’s the Top 2266 for one thing and Definitive is slightly understating it.
And yes, it is downloadable in plain Excel, for your own tinker and play, in this file; checked and clean (no subversive content).
Next, a few little notes (repeated from last year):

“That’s odd! The usual numbers 1 to 50 aren’t where they’re ‘supposed’ to be by common standards!” Correct. Because I‘m ‘Rekt. The list is mine; why put the Mehhh songs high up there? They’re in there somewhere, but its my list, my preferences..! yes I do like some almost-forgotten songs better, sometimes much, much better, than the expired old hands.
Especially.. see the notes, when the clip (much) enhances the song(s). Wouldn’t that mean the song in itself isn’t fully complete ..? No, it means in (since) the age of video, songs with clips (‘integrated’) can much surpass mere songs by themselves, for a cubed sensory experience.
There’s more than 2000 yes. Because, already after the first 500 or so, determining the relative rankings becomes awkward. Hence, the cut-off would be random …! (why not 2048, that would make more sense in this digital (i.e., binary) age).
If you would still have some (preferably wacky) songs you miss, please do comment them to me. I’ll see whether I’d want to include them still, or not. Hey, it’s my list so I decide, geddid?
The actual end result order is far from definitive (sic). It depends heavily on one’s momentary temper and the memories that spring to mind like Proustian madeleines. And on one’s ability to hear quality. Such is life.
When dabbling with the Excel file yourself, feel free to play around with the ranking mechanism. What worked for me, was to first split the songs into bins of about 250 size (designate some song to be in the first bin that will end up being ranks 1-250, another song to bin 5, which is around the 1000-1250 mark, etc.), then sizing down bin 1 etc. to 8 smaller bins. Then, numbers 1-50 get a personal treatment one by one to their end rank, the rest gets (got) a random allocation within their bracket. After this, sort and re-apply number 1-whatever. Through this, actual intermediate bin sizes aren’t too important.

Then, as a long, very long list. With a Moar tag otherwise it would be ridiculous… [i.e., for the complete list in the post, follow the link:]

Continue reading “Repeat mode: The definitive Top 2000 of 2015”

The Good Bad and Bureaucrats

Musing with the distinction between Bad and Evil (as here), and how Anger of the right kind (good to be bad b/c without/opposing evil intent) would be neither but the diametrical opposite of the former two’s effects in bureaucracy.

Noting that praxis makes the things get mixed up, as in:

[Supreme distort; DC]

The Internot Diploma

In an attempt to pre-empt all 2016 April fool’s jokes by a mile (in time and ridicule value) some Dutch Board on Cyber Security (notice the joke starts there, with ‘cyber’ since #ditchcyber) proposed to ensure all kids would get some ‘Safe Internet use diploma’.
When you know the kids regularly fail for (very, very!) basic math skill tests, can hardly write comprehensible sentences over … [fill in some number comfortably below ten] words let alone know anything about bits and bytes (but do know about birds and bees far ahead of practicing any of that — we hope) or even the most basic things about what programming is, hence are at levels of education about four or five years below their age, you can see the enormity of what’s proposed.

So, to be on such a Board, one shouldn’t know the very first thing about the subject one babbles about or one would be overqualified ..!? What an insult to all the professionals out there that try hardest.

This all stupidity tires me enormously. I’ll stop now. And:

[Continuous renewal — at least that’s something ..!]

Biased news

Demonstrating that … when it comes to InfoSec news … the general press may be biased… Otherwise, why wouldn’t this news have been spread much, much more ..? Since it may look unserious on the surface, but definitely is True.

Just sayin’. And just showin’:

[Similar to Ottawa, but qua size, compensated by the loudest barrels all around; DC]

NFChipknip

Long live innovation! Of the in some respects backward kind.
Yes we did have the chipknip, a stored-value debit card system that for small amounts (e.g., parking in Amsterdam though that hardly counts as ‘small’). And yes, of course it was abolished because nobody wanted it. For one, because the stored value had to be loaded onto the card, at ever (sic) less available separate ATM-like holes in the wall. For a second, because losing the card meant losing the stored value.

For a third, because given this functionality, people much preferred to stick to cash money that was more easy to get, much more widespread usable (think C2C payments…), quite similar if not same in risk, and anonymous obviously vis-a-vis anonymity promised by, hold it, banks, of all the crooks one could imagine. If you don’t see the latter, consider whom Jesus threw out of the temple as prime example of choice of all that was rotten in society back then already, and banks have ‘developed’ ever since.
This to the chagrin of banks that, as usual, packed their most devious of actions in the thinnest of transparent films of customer-servicing arguments and licked their, expensive is an understatement, wounds.

But now we have the triumphant return of the idea in the form of NFC payments off one’s debit card. Which comes with one improvement (not having to preload) but with all the other risks aggrevated:
The ‘preload’ is, relatively, limitless or to one’s credit (sic) limit. Compared to the user-controllable stored value of yesterday.
Skimming doesn’t even require the card to be physically put into a physical reader anymore. The still physical NFC reader devices are just as susceptible to plants of skimming devices as before. Maybe the customer can check the debitable amount but the displayed can be spoofed easily, obviously [or you are foolishly considering yourself competent when not seeing that risk]. But passers-by can skip just as easily (and ‘approve’ without any your notice).

Yes, even with small amounts payments, every now and then one will be required to enter one’s PIN as verification of holdership. But that hinders, and was a measure previously implementable easily so why not then already? And for larger amounts the PIN is required always, turning the actions into a simple debit card payment as we (in the developed world so maybe excluding North America) have grown accustomed to for decades already, but now need not enter the card into the chip reading slot anymore. Wow, the improvement! And all this while maintaining the latter debit card systems.

So, we have to trade security for convenience. While banks trade simplicity for … complexity. And savings, nowhere near. How to prevent some to consider banks to be full of i… ..?

Anyway…:

[The back side of subsequent developments may be pretty or not; Dunedin]

Oh, of course: DACcountantcy

Was reminded by this seer peer (no typos) in a casual remark that DAOs (DACs) may change quite a bit about the world as we know it. “DAOs are a game changing invention enabling a new model for human collaboration. #blockchain #C4ACC” (© him) — but apart from human collaboration (note the pejorative weight of the early ’40s this stil carries with it even today, in continental Europe), also the value of Trust in singular persons may shift.
DAOs then being of course, of course, the element I forgot to mention in my roboccountant post.

So, with this one linked in, now all the elements of that post make sense. In which the ensemble may have surpassed me. Or:

[Materially a circle, to any human accountant and dress codes displayed, are of the apparent relaxed Big4 dc’s of today; DC]

Privvezy Protrection

An off the cuff — where’s gentlemens’ style, these days? — remark hit a nerve. When an interesting company had some very interesting speakers and me. On IAM, data leakage and … well, what was it, data protection XOR privacy …?

Because the little collateral remarks was about Privacy being the ethical imperative, but being implementable straight away, would need translation to operational Data Protection.

Yes, where the core of legislation is about the latter, in an attempt to achieve the former… to the degree feasible, achievable, and wanted.
Demonstrating that all legalese, even of the EU kind, is just about white washing whatever you’d want to get away with.

A sore reminder that when one would want (hypothetically, for the sake of the argument that such would be theoretically possible) Privacy, one’s still on one’s own. Against all that is formally formed or not as Institutions, against the windmills that all want you to believe don’t exist or have power over you…

But hey, I’m a happy bunny so I’ll leave you with:

[When Penzance would be at Bergen On The Beach]

The definitive Top 2000 of 2015, already

“That’s odd! The usual numbers 1 to 50 aren’t where they’re ‘supposed’ to be by common standards!” Correct. Because I‘m ‘Rekt. The list is mine; why put the Mehhh songs high up there? They’re in there somewhere, but its my list, my preferences..! yes I do like some almost-forgotten songs better, sometimes much, much better, than the expired old hands.
Especially.. see the notes, when the clip (much) enhances the song(s). Wouldn’t that mean the song in itself isn’t fully complete ..? No, it means in (since) the age of video, songs with clips (‘integrated’) can much surpass mere songs by themselves, for a cubed sensory experience.
There’s more than 2000 yes. Because, already after the first 500 or so, determining the relative rankings becomes awkward. Hence, the cut-off would be random …! (why not 2048, that would make more sense in this digital (i.e., binary) age).
If you would still have some (preferably wacky) songs you miss, please do comment them to me. I’ll see whether I’d want to include them still, or not. Hey, it’s my list so I decide, geddid?
The actual end result order is far from definitive (sic). It depends heavily on one’s momentary temper and the memories that spring to mind like Proustian madeleines. And on one’s ability to hear quality. Such is life.
When dabbling with the Excel file yourself, feel free to play around with the ranking mechanism. What worked for me, was to first split the songs into bins of about 250 size (designate some song to be in the first bin that will end up being ranks 1-250, another song to bin 5, which is around the 1000-1250 mark, etc.), then sizing down bin 1 etc. to 8 smaller bins. Then, numbers 1-50 get a personal treatment one by one to their end rank, the rest gets (got) a random allocation within their bracket. After this, sort and re-apply number 1-whatever. Through this, actual intermediate bin sizes aren’t too important.

Then, as a long, very long list. With a Moar tag otherwise it would be ridiculous… [i.e., for the complete list in the post, follow the link:]

Continue reading “The definitive Top 2000 of 2015, already”

1	Hustle	Vann McCoy	Yes, the original
2	Easy Livin’	Uriah Heep	To power it up
3	Heart Of Gold	Neil Young	Hits the heart
4	Hide and Seek	Howard Jones	Same, if you listen well
5	Peter Gunn	Emerson Lake & Palmer	Just for the intro alone
6	She	Elvis Costello	Personal nostaliga
7	White Room	Cream	Nicely powerful, doesn’t wear out too easily
8	74-’75 (+Video)	Connells	The video sublimates the message
9	Windowlicker (+Video)	Aphex Twins	Incomplete, as a work of art, without the video
10	Nice ‘n Slow	Jesse Green	Calm down again
11	One Of These Days	Pink Floyd	Hidden pearl
12	Smoke On The Water	Deep Purple	Of course
13	The Man With One Red Shoe (+Video)	Laurent Garnier	Incomplete, as a work of art, without the video
14	You’re So Vain	Carly Simon	I think this song is about me!
15	Dancing Barefoot	Patti Smith	Hidden treasure
16	Right Here Right Now	Fatboy Slim	Oft forgotten, defined an era
17	The Great Gig In The Sky	Pink Floyd	Appealing complexity
18	All I Need	Air	Mindfulness in musical form
19	Dream On	Aerosmith	Heartburn
20	You Got To Fight For Your Right to Party	Beastie Boys	Appealing. Simply that.
21	California Dreamin’	Mamas & The Papas
22	Whole Lotta Rosie	AC/DC

PIA is KIA and KYD (?)

Since the whole Privacy thing has gained new traction with both the European Data Privacy Directive regaining (some…) steam and the European Court finally deciding what all with any bits of brain already knew i.e. that ‘Safe Harbour’ was a sour joke (to put it mildly), I realized, when working on a presentation for a forum centering on/around Identity and Access Management, that any Privacy Impact Analysis work comes down to two things; an objects-side analysis in the form of Know Your Data and a subject-side analysis by means of Know your (authorised OR actual) Identities and their Access, with some Privacy By Design thrown in at the solutions end.
Since I just like sentences of the right length, being entities that contain a discrete but complete set of logically coherent and united concepts.

And for those of you in the know; the above contains all there is to Know. Sort of. Maybe add in a bit of this (in Dutch; from the FD newspaper), for implementation. For a lot of implementation…
And, things may change in the somewhat near future with the advent of drones, IoT, robotics (humanoid or abstract), and ANI/AGI/ASI, in the IAM sphere alone. Just read up your huge backlog on this blog, and elsewhere as I cannot really summarise it all here…

I’ll give you some time space for that now. With:

[At the Ragusa Ibla end but of course you knew]