FireEye Hacked - Schneier on Security
FireEye Hacked FireEye was hacked by—they believe—”a nation with top-tier offensive capabilities”: During our investigation to date, we have found that the attacker targeted and accessed certain Red Team assessment tools that we use to test our customers’ security. These tools mimic the behavior of many cyber threat actors and enable FireEye to provide essential diagnostic security services to our
Cloudflare and Apple made a new DNS protocol to protect your data from ISPs
Cloudflare is proposing a new DNS standard it developed with Apple that’s designed to help close a blindspot in my (and I’m sure many others’) internet privacy measures (via TechCrunch). The protocol is called Oblivious DNS over HTTPS (ODoH), and it’s meant to help anonymize the information that’s sent before you even make it onto a website. Whether that will help you with your overall net privacy
FireEye, a Top Cybersecurity Firm, Says It Was Hacked by a Nation-State (Published 2020)
WASHINGTON — For years, the cybersecurity firm FireEye has been the first call for government agencies and companies around the world who have been hacked by the most sophisticated attackers, or fear they might be. Now it looks like the hackers — in this case, evidence points to Russia’s intelligence agencies — may be exacting their revenge. FireEye revealed on Tuesday that its own systems were pi
Meet GPT-3. It Has Learned to Code (and Blog and Argue). (Published 2020)
This summer, an artificial intelligence lab in San Francisco called OpenAI unveiled a technology several months in the making. This new system, GPT-3, had spent those months learning the ins and outs of natural language by analyzing thousands of digital books, the length and breadth of Wikipedia, and nearly a trillion words posted to blogs, social media and the rest of the internet. Mckay Wrigley,
The ETTO Principle（効率-徹底性トレードオフ原則）とITシステムの運用
こんにちは、滝澤です。 今回は"The ETTO Principle"（効率-徹底性トレードオフ原則）について紹介します。ここでは「ETTO原則」と呼ぶことにしましょう。 ETTO原則はレジリエンス・エンジニアリングで著名なエリック・ホルナゲル氏（Erik Hollnagel）が提唱したもので、効率性（Efficiency）と徹底性（Thoroughness）はトレードオフの関係にあるというものです。 これは、元々は安全に関する分野での話ではあるのですが、IT分野においても無縁というわけではありません。そのあたりの話を紹介します。 本記事を3行でまとめると次のようになります。 ETTO原則により効率性と徹底性はトレードオフの関係にある。 ITシステムの運用の例として作業手順書作成の例を示し、効率性と徹底性のバランスを考える必要があることを示した。 システム障害と根本原因分析について紹介し、
What Makes a Great Product Manager | Knowledge Artist
What sets great product managers apart from merely good ones? It is a difficult question to answer because there are so many things that "great" product managers do. And because the discipline itself is changing very quickly. There is no universal answer. But it is a question worth asking. I tackled this question by interviewing industry leaders, drawing on my own experience, and research.
iPad Linux
Linux on iPad Linux on the iPad isn't a reality yet, at least not like on a desktop platform. With hardware becoming more and more powerful every year, obsolete iPads (according to Apple) should be allowed to continue to serve a purpose. Obsolete iPads could be affordable personal computers and useful for project builds. We believe Linux is the key to bring new life to these devices.
eBPF - The Future of Networking & Security
Nov 10, 2020eBPF - The Future of Networking & Security Today is an exciting day for the Cilium community: Isovalent, the company behind Cilium, is announcing its $29M Series A financing round backed by Andreessen Horowitz, Google, and Cisco. This is a perfect occasion to take a deeper look into where eBPF-based networking is coming from and to understand what the excitement is all about. Two weeks
Finally: a usable and secure password policy backed by science
Finally: a usable and secure password policy backed by science Daniel Tkacik Oct 20, 2020 After nearly a decade of studies, the passwords research group in Carnegie Mellon’s CyLab Security and Privacy Institute has developed a policy for creating passwords that maintains balance between security and usability—one backed by hard science. Forget all the rules about uppercase and lowercase letters, n
AI Roadmap
i.am.ai AI Expert Roadmap Roadmap to becoming an Artificial Intelligence Expert in 2022 Below you find a set of charts demonstrating the paths that you can take and the technologies that you would want to adopt in order to become a data scientist, machine learning or an AI expert. We made these charts for our new employees to make them AI Experts but we wanted to share them here to help the commun
Configuration Managementツールのポリシー定義用中間言語に関する考察 (WSA研#7予稿) - Gosuke Miyashita
概要 マネージドなコンテナ実行環境の普及に伴い、Configuration Managementツールを利用する必要がある現場は少なくなったが、Configuration Managementツール自体の必要性はまだ失われていない。また、モバイルコンピューティングやエッジコンピューティングの普及に伴い、Configuration Managememntツール自体のあり方も今後変化していくと考えられる。 本予稿では、Configuration Managemantツールの役割を整理し、Configuration Managementツールの今後のあるべき姿を検討する。それにより導きだされた、Configuration Managementツールを3層で構成する方式を提案し、その中で中心的な役割を果たすポリシー定義用中間言語について考察する。 Configuration Managementと
AI pioneer Geoff Hinton: “Deep learning is going to be able to do everything”
On the AI field’s gaps: "There’s going to have to be quite a few conceptual breakthroughs...we also need a massive increase in scale." On neural networks’ weaknesses: "Neural nets are surprisingly good at dealing with a rather small amount of data, with a huge numbers of parameters, but people are even better." On how our brains work: "What’s inside the brain is these big vectors of neural activit
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
FireEye Cyberattack Compromises Red-Team Security Tools
SwiftERM Blog, Rich In Guides, News And Information
U.S. cybersecurity firm FireEye discloses breach, theft of hacking tools
How the Seahawks are using a data lake to improve their game
Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns
Five biggest failures of AI - Why AI projects fail
Inrupt’s Solid Announcement - Schneier on Security
Introduction - SuzieQ