IoT Lifecycle attacks – lessons learned from Flash in VDI/Cloud

There are lots of parallels between cloud/vdi deployments and “the Internet of Things (IoT)”, basically they both involve connecting an end-point to a network.

One of the pain points in VDI for many years has been Flash Redirection. Flash is a product that it’s makers Adobe seem to have been effectively de-investing in for years. With redirection there is both server and client software. Adobe dropped development for Linux clients many years ago, then surprisingly resurrected it late last year (presumably after customer pressure). Adobe have since said they will kill the Flash player on all platforms in 2020.

Android Rooting and IoS Jailbreaking – lessons learned for IoT Security

Many security experts regard Android as the wild west of IT. An OS based on Linux developed by Google primarily for the mobile devices but now becoming key to many end points associated with IoT, Automotive, Televisions etc. With over 80% of smartphones running Android and most of the rest using Apple’s iOS, Android is well established and security is a big concern.

Imagine you are a big bank and you want 20000 employees to be able to access your secure network from their own phones (BYOD, Bring Your Own Device) or you want to offer your millions of customers your bank’s branded payment application on their own phone. How do you do it?

Effective Digital Content: Identifying your content top 10!

Make your top content work even harder!

This is a quick and dirty trick common in enterprise marketing and often used by pro-active Product Managers themselves. Most enterprise product marketing and product managers can get access to the google/Wordpress analytics for their products.

It is typical that a small % of the content on any website is attracting the most reads. I’ve recently done some analysis on my own blog site. In this article, I’ll use it as example to explain:

1)      How to analyse your view metrics to deduce your top content

Super analysis of the draft US Senate IoT security bill

Just a quick note to highlight a super analysis by PenTestPartners analysing the recent draft US Senate bill “Internet of Things Cybersecurity Improvement Act of 2017″

Lots of interesting links and implications for OEMS. Worth a read >>> HERE. Very interesting discussions about “Right to Repair”.

There have been several draft legislation in the past few weeks, see:

• Key points in the UK Statement of Intent on Data Privacy
• Security and IoT – The Race to Regulation (Recent Updates)

 

 

 

Key points in the UK Statement of Intent on Data Privacy

This blog on The Register caught my with the headline “Re-identifying folks from anonymised data will be a crime in the UK”. It’s a very good overview of the UK goverments recent (7th August 2017) Statement of Intent on Data Privacy (basically how the UK will align to EU wide GDPR legislation given Brexit).

It’s worth reading the Statement of Intent in full, the points that caught my attention were:

Who Reads My Virtually Visual Blog?

During July this blog hit 40k individual readers this year who paid an average 1.99 visits to my site. Most of my traffic is from google so I’m assuming very few of them intended to end up here. I’ve posted less than 10 blogs this year but have around 90 on the site in total plus a few pages so it’s on average 400 readers per article with a very wide spread.

I decided to do a quick audit of where folks are from. I think it probably reflects the fact I’ve a lot of material on CAD and Cloud and countries where those industries and technologies are popular.

I’ve no idea if these are good figures for readership – my content is pretty niche. So I’d be interested to hear what others think!

But thank you for reading! xxx

 

Can Virtual Reality (VR) mess with your head?

Is VR bad for you and your health? Back in March I was at the D3DLive 2017 show at Warwick University. There was a track on VR, AR and professional visualisation plus the chance to try out several pieces of VR/AR/visualisation kit both on the show floor and during a fascinating tour of the WMG (Warwick Manufacturing Group) labs.

The true VR applications seem to me very much limited to the preview experience for something remote or that doesn’t exist e.g. previewing a building or car interior options or for training e.g. firefighters/army etc. The preview experiences are something I imagine would be in general short experiences but training scenarios I imagine could last for a protracted duration.

Security and IoT – The Race to Regulation (Recent Updates)

 

Relegating my own smart toys to a high shelf – creeping me out in so many ways!

 

We’ve had the vision, we’ve had the quirky demos and there are now all sorts of smart devices emerging on the market ranging from the brilliant innovative down to the baffling “just because you could doesn’t mean you should have” (smart salt cellar – really!?!).

The race to network and connect everything is accelerating – smart cars, fitbits, home heating systems, retail logistics supply chains and an awful lot of these devices process a lot of data about how we live and to some extent control our lives.

9 Lessons on Digital Content Marketing from the humble printing press!

I love the internet and digital content. Rather than trawling through libraries for a book someone had always got to first, I have access to a wealth of interesting people, research and thoughts. I’ve never studied digital marketing but when involved in a marketing plan always try to get a goal

• “create interesting, useful, visual pleasing and DELIGHTFUL content”

I love blogging and bouncing ideas at and sharing knowledge with the world and hearing what comes back. About 4 months ago though I stopped writing – I’d lost my digital-mojo.

“The Supercomputer of Things” – Have I just seen it born?

The “Internet of Things” has become a familiar term to describe a vast connected network of diverse devices: cars, servers, smart phones, cloud, smart lightbulbs, home sensors… anything really. A vast connected, distributed network of things – all with compute power.