Some notes following the Identity Management Europe event, 14 March 2019, Frankfurt.

  • Ever wondered which are the biggest risks that we face? According to the World Economic Forum, a massive data fraud/theft or a large scale cyber attack rank in Top 5 most likely global risks, while the large scale cyber attack has the 7th most devastating impact. Worrying, no?
  • The fraud triangle: pressure (motive) – rationalisation – opportunity
  • Need-to-know – has strictly limited use cases (it comes from the military). In real life, we want the information to flow – don’t kill the business. There is always a fine balance between over-entitlement (leading to security risk) and under-entitlement (business risk).
  • MFA with yubikeys is the Graal of authentication – superior to everything else.
  • NIH: Not invented here: the strong bias against ideas from the outside.
  • Build vs buy: the main advantage of ‘buy’ is the fact that it allows the customer to concentrate on their core business.
  • In the cloud infrastructure there is the concept of zero trust. Deny all by default. Never trust. Always verify. Never trust the client. Never trust the server. Never trust the network.
  • Friendly reminder that the cybercrime became a 1.5 trillion business

Some emerging technologies:

Finally, some notes on automation:

  • Robotic process automation can be used for automatic testing (auto-filling of forms)
  • DevOPS (combining responsibilities of DEV, Q&A and OPS) – only possible if a big chunk of the work is automated
  • Workflow: Code > Build > Test > Deploy > Monitor – all of this automated (maybe except for the coding part 🙂 )
  • Remediation using automation: service not responding: auto-restart; load spike: auto scale instances; service fail: redeploy a new instance
  • Use automatic monitoring tools to detect bugs before your users (Splunk)
Rainy Frankfurt

Random links #13

Written on 19 March 2019, 10:20am

Tagged with: , , ,

Biohack is just a fancy buzz-word for common-sense advice about improving your life. The most important ones are:

  • sleep well
  • eat well
  • move
  • spend time in nature
  • socialize

********

I am currently reading Solenoid, by Mircea Cartarescu, a surrealist novel that shows, among others, the challenges of growing up in Bucharest during the communist era.

In a nutshell, the novel is presented as a manuscript of a failed writer who teaches Romanian at an elementary school in Bucharest, hates his job and wishes to find an escape route from the confinement of his body and the three-dimensional world around it.

https://theuntranslated.wordpress.com/2017/11/20/solenoid-solenoide-solenoid-by-mircea-cartarescu/

********

MCAS (Maneuvering Characteristics Augmentation System) seem to be the faulty mechanism behind the Boeing 737 Max recent failure.
If an outside sensor measuring the angle-of-attack reports that its nose is aimed too high, the MCAS is programmed to automatically lower it, allowing the plane to regain speed and lift. But if this sensor is broken (and it looks like there was no redundancy), then the MCAS will be incorrectly trigerred, causing the aircraft to dive.
A longer explanation here.

*********

– If you could convince an organization to take only one action to be more secure what would it be?
Collect less data and get rid of it faster.

*********

A good reason to use the dark theme whenever you can

CL draws reloaded

Written on 14 March 2019, 04:25pm

Tagged with: , , ,

You have 8 teams. They will be drawn one against each other, so 4 pairs in total.

Question 1: how many distinct pair sets are possible?

105. I got to this number after running a large number of simulations. Then I did a little bit of research and I also found the formula:

k=4

Question 2: if 4 of the 8 teams are from England, what is the probability that all 4 of them will be drawn together?

Again, after analyzing the 105 distinct pair sets, I found that only 9 of them have all-English pairs. The full probability set is:

  • two English pairs: 9/105 or 8.57%
  • exactly one English pair: 72/105 or 68.57%
  • no English pair: 24/105 or 22.86%