Tag Archive for: question

Tonko to question experts on ransomware in hearing – WRGB



Tonko to question experts on ransomware in hearing  WRGB

Source…

US senators question Apple and Google on mobile app store dominance


A panel of U.S. senators questioned officials from Apple Inc and Alphabet Inc’s Google on Wednesday about the dominance of their mobile app stores and whether the companies abuse their power at the expense of smaller competitors.

Amy Klobuchar, the top Senate Democrat on antitrust issues, said Apple and Google can use their power to “exclude or suppress apps that compete with their own products” and “charge excessive fees that affect competition.”

App makers like music streaming service Spotify Technology SA and dating services giant Match Group, which owns the Tinder app, have long complained that mandatory revenue sharing for sales of digital goods and strict inclusion rules set by Apple’s App Store for iPhones and iPads, along with Google’s Play store for Android devices, amount to anticompetitive behavior.

Representatives for Apple and Google told senators that the companies’ tight control over their stores and the associated revenue-sharing requirements are needed to enforce and pay for security measures to protect consumers from harmful apps and practices.

But when asked by Senator Josh Hawley, Apple’s Chief Compliance Officer Kyle Andeer would not commit to spending all of the mandatory fees on security.

Explanations from Andeer and Google’s Wilson White, senior director for government affairs, about why the companies’ fees do not apply to Uber Technologies Inc and apps that sell physical goods also failed to satisfy senators.

“I feel like unfrozen caveman lawyer,” Senator Mike Lee said. “I’m not grasping it.”

Senator Richard Blumenthal expressed concern about a call Match said it received late on Tuesday from its business counterpart at Google.

Match’s Chief Legal Officer Jared Sine said Google wanted to know why Sine’s planned testimony, which had just been released, deviated from previous comments the dating company had made.

“It looks like a threat, it talks like a threat, it’s a threat,” Blumenthal said of the call, vowing to investigate Google’s action further.

In his testimony, Match’s Sine argued that Google and Apple both exact an onerous 30% of any…

Source…

Cybersecurity 2021: Asking the Right Question


“The Hitchhiker’s Guide to the Galaxy,” by Douglas Adams, could actually be a guide to cybersecurity if read in a different context. The crux of the problem in present-day cybersecurity practice is summed up in this exchange from the book:

After seven and a half million years of computing, “The answer to the Great Question of life, the universe and everything… is Forty-two,” said Deep Thought, with infinite majesty and calm. “But it was the Great Question! The Ultimate Question of Life, the Universe and Everything,” howled Loonquawl. “What is forty-two?”

“I checked it very thoroughly,” said the computer, “and that quite definitely is the answer. I think the problem, to be quite honest with you, is that you’ve never actually known what the question is.” And so another, even bigger computer had to be built to find out what the actual question was!

No one is spending time to ask the right question. While a security analyst is busy deciphering 600-page reports and a CISO negotiates an increase in the year’s cybersecurity budget, the board only wants to know if their organization is secure. To answer that question, Dmitri Alperovitch, who discovered Operation Shady RAT, said, “There are only two types of companies—those that know they’ve been compromised, and those that don’t know.” Former FBI director Robert Mueller took it a step further, adding, “And even they are converging into one category: companies that have been hacked and will be hacked again.”

Cybersecurity is not how many breaches you’ve detected or prevented, or how many vulnerabilities were patched; it is not how many times you’ve trained your employees, whether you’re in compliance with regulations or the amount of malware detected. Given everything organizations are doing to secure themselves, like Loonquawl, they’re still failing to ask – and correctly answer – the right question.

In my opinion, that question is, “How likely are you to get hacked, today?”

The answer to that is based on two other unanswered questions:

1.      How current, or real-time is your information?
2.      Are you quantifying your cyber risk?

For organizations to get…

Source…

UK Supreme Court: Rogue Employee Question in Morrisons Data Breach – The National Law Review

UK Supreme Court: Rogue Employee Question in Morrisons Data Breach  The National Law Review
“data breach” – read more