no more cubes

Tag: secure

  • Nicht mit dem Internet verbunden

    Ionos soll besonders sichere Cloud für den Bund aufbauen

    So jedenfalls titelt die Frankfurter Zeitung bezüglich eines Großauftrages, den Ionos von der Bundesverwaltung erhalten hat. Die besondere Sicherheit für die Verarbeitung besonders sensibler Daten soll wohl mittels “Air-Gapping” erreicht werden. Der Begriff bezeichnet, dass ein Rechner einfach nicht von aussen erreichbar ist, eine Luft-Lücke Ihn quasi von der Außenwelt trennt. Jemand muss dann halt CDs einlegen oder sowas.

    Wie das funktionieren kann, so dass es einen echten Mehrwert für eine Digitalisierung stiftet, leuchtet mir nicht ein. Aber für 410 Millionen Euro werden sich da sicher kluge Leute Gedanken machen.

  • Google sponsors secure open source software

    Google has announced today a $1 million sponsorship for a new pilot program aimed at enhancing the security of critical open source software projects.

    Source: Google offers $1 million sponsorship to secure open source software – The Record by Recorded Future

  • Procure Secure

    A very important question, not asked often enough. In particular not at conferences around security. Even more when sponsored by companies trying to sell their security product.

    At the Secure Munich Conference, somebody asked this question. In a discussion that followed a Sales Engineer presenting their security product, trying to make a sound differentiation between internal and external attackers, as well as trying to explain the difference between malicious and careless.

    While the question itself was asked quickly, the following discussion seemed to be a bit disappointing. “Why do companies not procure secure products?” was immediately interpreted in a way a security vendor would phrase it. Yes, of course, companies purchase security products, but not enough. Oh, what if the security product itself was insecure? Well, can’t comment on our competition.

    With that, at a security conference, the question feels like it is being marginalized, in particular in the security space. The security industry rotates to much around itself.