Android’s new biometric spec for 'strong security' is anything but
When Google rolled out its latest biometrics specs for Android devices, its top-level 'strong security' option allowed “a spoof and imposter acceptance rate not higher than 7%.” Most biometrics specialists argue that's much too high;...
Forrester asks a forbidden question: Are vendors lying or do they believe their own hype?
The idea that vendors lie a lot is, as the saying goes, “a tale as old as time.” But to suggest vendors are so persuasive because they actually believe their falsehoods — now, that's intriguing.
Zoom goes for a blatant genAI data grab; enterprises, beware (updated)
Zoom stirred up a kerfuffle this month when it amended its terms of service to make execs comfortable that it wouldn’t use Zoom data to train generative AI models. In reality, it was really doing spin control worthy of the sleaziest...
Has Microsoft cut security corners once too often?
As details about the recent China attack against US government agencies come to light, two details stand out: Microsoft failed to store security keys properly — and the keys were used by attackers even though they'd already expired.
Lawyers and Incident Response can be a dangerous combo
In many ways, lawyers, CIOs and CISOs have the same mission: protect the enterprise from forces that want to do harm. But those two professions often approach the task in such polar opposite ways that they fight each other instead of...
The shadow IT fight — 2023 style
Gaining visibility into anything IT-related is always difficult, but the age-old nemesis, shadow IT, remains a major problem — especially as the enterprise environment has changed.
Generative AI is about to destroy your company. Will you stop it?
If coders lied as often as ChatGPT, they would be fired immediately. Stunningly, some enterprise execs seem to be just fine with that — as long as AI continues to code quickly and for so little money.
Do the productivity gains from generative AI outweigh the security risks?
Using generative AI to code is dangerous for a variety of reasons, but its efficiencies will tempt corporate leaders — especially CIOs and business execs — to use it anyway. A senior AWS executive at Amazon argues the decision doesn’t...
IT’s lovefest with GPT-3 needs to meet reality now
As we’ve seen with other highly-hyped technologies — such as the Web back in ‘95 and blockchain more recently — companies can get ahead of themselves when they jump into investments based on things other than strategic goals.
A compliance fight in Germany could hurt Microsoft customers
A compliance fight between Microsoft and German regulatory authorities has gotten white hot, though it looks as though any penalties might bypass the company and take aim at its customers.
Biometrics are even less accurate than we thought
Biometrics are supposed to be a fundamental pillar of modern authentication. Unfortunately, for a wide range of reasons and in a variety of ways, many biometric implementations are wildly inaccurate.
This would be a good time to test your cloud ROI
As the COVID-19 pandemic slowly fades — and the rush to cloud solutions it hastened now seems less critical to business success — a question arises: Has anyone on your team recently run an ROI analysis to see whether the cloud truly...
Sadly, IT can no longer trust geolocation for much of anything
This goes beyond simply not trusting location data for cybersecurity authentication. Geolocation is now used for a wide range of business reasons — but it shouldn’t be.
Planned ‘fixes’ for credit-card interchange fees will actually make fraud easier
The US Federal Reserve and the US Senate are both looking to lessen restrictions on retailers — ostensibly to rein in card fees. What they actually are doing is inviting more fraud.
Will new EU crypto rules change how ransomware is played?
The European Union is cracking down on cryptocurrencies. That could have massive implications for enterprise IT.
Microsoft backs off facial recognition analysis, but big questions remain
Microsoft is backing off its support for some AI-driven features, including facial recognition. Although it's good Microsoft is acknowledging discrimination and accuracy issues, it had years to fix the problems and didn’t.
Are banks quietly refusing reimbursements to fraud victims?
There are disturbing reports that some major financial institutions are no longer crediting back all fraudulent transactions, even when the victim has filed a police report. This move by these financial institutions will soon come...
Worried about burnout? Few enterprises are set up to fight the real causes
C-level execs argue a fine game about caring about their employees — but those platitudes somehow never make it into the HR meetings about bonus benchmarks.
Let’s put smartphone mics to better use
What if smartphone sound-recognition could be tweaked to do core IT and operational chores? This would be an option to customize the phone to listen for sounds specific to your company.
How to master the diversity hiring challenge
It’s not often that you see two cybersecurity vendor CEOs agree on an issue — and yet get into a very public insult-fest with each other. Then again, this did start at RSA, so anything is possible.
Top Blog Posts