Jakob Zwiers

📢 Exciting news for open source software advocates! The German government has officially published the Onlinezugangsgesetz 2.0 (OZGÄndG), featuring a groundbreaking new Article 16a, which mandates federal public offices to prefer open source software for newly procured software over proprietary options. This represents a significant step towards greater transparency, security, and efficiency in government operations. 🔍 Despite the soft language of "should" in Article 16a, within the context of public offices, it practically sets a default process, making it stronger than previous preferences in federal architecture guidelines. However, the impact of such mandates remains to be seen in practice. The Swiss EMBAG law, for example, already requires public bodies to disclose the source code of software they develop unless restricted by third-party rights or security concerns, yet challenges in enforcement persist. ⚖️ Similar situations are observed in other countries like France and Italy, where open source-friendly laws exist but are not consistently enforced. This underscores a broader issue: legal mandates alone do not guarantee adherence. Strategic litigation might be one approach to ensure compliance, but it's crucial to also understand vital role o establishing Open Source Program Offices (OSPOs) within public sector organizations. 🏢 OSPOs could play a transformative role by providing the necessary infrastructure and support for public offices to adopt, develop, and contribute to open source software effectively. This approach aligns with a collaborative strategy, offering assistance rather than presenting additional problems. 📈 France’s experience offers valuable insights. Despite the Digital Republic law’s mandate, progress was slow until the Bothorel parliamentary report in 2021 and the subsequent establishment of the Mission Logiciels Libres (MLL). However, the MLL’s limited resources highlight the need for stronger institutional support and coordination across relevant ministries. 🔑 The key takeaway is that while getting open source mandates into law is a critical first step, it cannot be the last (as French junior minister Axelle Lemaire said in 2016: "The after-sales service is as important as the law itself"). There must be ongoing efforts to build the necessary institutional infrastructure and ensure these laws have the intended impact. The success of such initiatives depends on political will, administrative approval, budget allocation, and strategic understanding at all levels of government. 🚀 We need to continue to advocate for stronger support structures like OSPOs, promote strategic litigation where necessary, and push for comprehensive implementation studies to ensure open source mandates lead to meaningful change. #OpenSource #OSS #PublicSector #DigitalTransformation #OSPO #Governance #TechPolicy

18

2 Kommentare

🔒 "We Could Expose All of Italy!" – Protect Your Data Before It's Too Late... Recent events in Italy show how quickly data can fall into the wrong hands. With 52,000 attacks on the Italian Ministry of the Interior's database, the need for secure data protection has never been more urgent. Sensitive information, from tax and healthcare records to government communications, has been breached, underscoring the alarming scale of these threats. It’s no coincidence that millions of customers across 150+ countries rely on WeSendit to securely transfer and protect their data. 🇨🇭 As a Swiss company, WeSendit offers a secure, decentralized file transfer and storage platform, designed for organizations that require the highest data security standards. Find out how we protect what matters most: https://lnkd.in/dMPFm6JJ Source: https://lnkd.in/dVUGjkmJ

10

Our May 2024 issue article: "The Contingent Effects of IS Certifications on the Trustworthiness of Websites" by Martin Adam - The University of Göttingen, Dr. Sebastian Lins - Karlsruhe Institute of Technology (KIT), Ali Sunyaev - Karlsruhe Institute of Technology (KIT), Alexander Benlian - Technische Universität Darmstadt is available for download - "Information systems (IS) research has largely treated IS #certifications (i.e., graphical cues that prove the endorsement of independent third parties) as universally effective at improving website visitors’ perceptions of #trustworthiness. However, inconclusive findings on the effectiveness of IS certifications on websites have emerged, critically challenging their usefulness. We seek to reconcile these inconclusive findings by drawing on swift trust #theory and the notion of humans as cognitive misers. Specifically, we investigate whether the effects of IS certifications are contingent on visitors’ expectations and the website’s baseline trustworthiness (i.e., the original website before adding and visitors’ processing of IS certifications). Through a multistudy investigation combining an online (N = 191) and a follow-up #field #experiment with up to €4 million in sales volume (N = 306), we reveal the contingent effects of IS certifications on the trustworthiness of #websites: Below (but not above) a certain level of a website’s baseline trustworthiness (i.e., the trust tipping point), IS certifications significantly increase trustworthiness. We also show that IS certifications do not increase the likelihood of user registrations (i.e., trust-related behavior) when a website’s baseline trustworthiness surpasses this trustworthiness threshold. Overall, we provide an important new perspective that explains and resolves previous inconsistent findings on the (in)effectiveness of IS certifications for trustworthiness and subsequent trust-related #behaviors. We equip #practitioners with valuable and actionable guidance on the usefulness of IS certifications to strengthen their digital businesses." https://lnkd.in/g3dv8b2q https://lnkd.in/gqJM9NFa #JAIS #IS #research #informationsystems #mis #ISCertifications #SwiftTrust #HumansasCognitiveMisers #Multistudy #Experiment

47

1 Kommentar

🚨Understanding the Impact of the KRITIS Umbrella Act on Perimeter Protection The KRITIS Umbrella Act is THE hot topic in today’s perimeter protection landscapes. Whereas the challenges through this new legislation are highlighted by many, it also drives technological innovation forward Dr. Kai Nuernberger and Prof. Dr. Elmar Padilla from Fraunhofer FKIE highlight how this Act provides essential guidelines and fosters the use of advanced technologies to enhance security. The EU NIS 2 Directive for Cyber Security, for example, will lead to expanded obligations for companies, promoting the adoption of innovative solutions. 🔍 Key Insights: The focus on electronic security is growing, with new technologies rapidly improving solutions for critical infrastructures, industrial facilities, and more. Integrated security solutions combining perimeter protection, IT security, and operational data are crucial for timely detection of security anomalies. From drone detection to advanced IT protection systems and real-time data processing, a multi-layered approach is essential for comprehensive security strategies. Fraunhofer FKIE's research plays a pivotal role in setting the foundations for protecting and monitoring critical systems. The KRITIS Umbrella Act demands close cooperation across disciplines, which is exemplified by initiatives like the Fraunhofer Center for Digital Energy. For a deeper dive into these developments and to stay ahead in the field of security, visit our website to read our detailed article on the KRITIS Umbrella Act and learn more about the latest trends and technologies showcased at Perimeter Protection 2025! 📅 Book your stand now and join the conversation at Perimeter Protection 2025! #PerimeterProtection #PerimeterProtection2025

24

1 Kommentar

“… national #dataprotection #supervisory #authorities in #Germany should be designated as #market #surveillance authorities under the #AIAct (following the entry into force of the AI Act in the coming months).” position paper from the #German #Datenschutzkonferenz #EUAIAct #AIRegulation #AI

5

1 Kommentar

🌍 What are the EU #AI Act’s harmonised standards? As we embrace the future of #AI, understanding the harmonized standards under the European Commission's EU #AI Act is crucial for compliance and innovation. Here’s a brief overview of what you need to know: 💡Role of Standards in Supporting EU #AI Policies: Human-Centric Approach: Standards ensure that the individual remains a regulatory focus..💡 Policy & Legislation Implementation: Standards aid in applying Union policies and legislation effectively.💡 Safety & Fundamental Rights Protection: They ensure high safety standards and protect fundamental rights across the Union.💡 Fair Competition & Level Playing Field: Standards create equal competitive conditions, especially benefiting SMEs in #AI system design and development.💡 🔍 Characteristics of #AI Standards: Transparency: Clear documentation of #AI systems' functioning and decision-making processes.🔍 Reliability: Consistent performance in diverse conditions.🔍 Safety: Minimizing risks and ensuring user protection.🔍 Ethical considerations: Addressing biases and ensuring fairness in #AI applications.🔍 📜 Standardization Deliverables Requested by the European Commission: Technical specifications for #AI systems📜 Guidelines for risk assessment and management📜 Frameworks for compliance and accountability📜 In aligning with these standards, enterprises can foster responsible #AI development that benefits everyone. This helps drive innovation in a regulated landscape! 🤝 See the full publication at he European Commission's #JRC Repository > https://lnkd.in/dQhutXrR ------------------- 📢 For further insights, follow us on LinkedIn or contact us at [email protected] for insights on navigating #AI regulations and scaling your #AI projects! #EUAIACT #AIStandards #Compliance #Innovation #ResponsibleAI

23

3 Kommentare

AI reshapes industries, and understanding how the Act impacts businesses is crucial. So, do you know how harmonized standards help the EU AI Act drive responsible innovation while balancing safety and transparency? Check out how AI & Partners boils down the relevant policies below 👇 and read our AI Act blog series, which introduces the must-know topics communicators in Europe. Your next must-read 🔗 www.savionray.com/articles

1

🇪🇺 🕵‍♂️ Products please present your ID to enter the EU! The European Commission has officially adopted the #EcoDesign #Regulation on May 27 2024, aka #ESPR requiring all kind of product categories to provide accessible #DigitalProductPassports disclosing their sustainability credentials. Think "nutritional facts" of sustainability. With this milestone reached, the clock starts ticking for brands to adopt digital identities for products. For the past two years we have been helping #apparel and #CPG brands preparing their businesses for #DPP using Digimarc #Engage. Here is a visual summary of what is known today. https://lnkd.in/eWsRsZs3

52

2 Kommentare

We have published a discussion paper: "A face of one’s own: The role of an online personae in a digital age and the right to control one’s own online personae in the presence of digital hacking" by Eric Clemons, Andrej Savin, Maximilian Schreieck, Stina Teilmann, Jan Trzaskowski & Ravi Waran. https://lnkd.in/dwCxq_Ng Abstract In the post-Covid world, our online personae have become increasingly essential mechanisms for presenting ourselves to the world. Simultaneously, new techniques for hacking online personae have become more widely available, easier to use, and more convincing. This combination, of greater reliance on online personae and easier malicious hacking, has created serious societal problems. Techniques for training users to detect false content have proved ineffective. Unfortunately, legal remedies for dealing with hacked personae have also been inadequate. Consequently, the only remaining alternative is to limit the posting of false content. In this discussion paper, we provide an overview of online personae hacking. As potential remedies, we propose to redesign search engine and social media algorithms allowing platforms to detect and restrict harmful false content and a new fundamental right for the EU Charter that would provide legal justification for platforms to protect online reputations. For those platforms that might choose not to protect online reputations, this new right would require that they do so. #InformationSystems #OnlinePersonae #OnlineIdentity #IdentityHacking #Disinformation #SocialWelfareComputing

7

1 Kommentar

Considering the ethics of digital identity needs to be as much a part of our profession as focusing on security, privacy, and compliance. Understanding what that means, though, might require some reading. IDPro® has been waiting for a while for the right articles on ethics to come through, and I'm really happy to see these available now. #ethics #digitalidentity #privacy #cybersecurity

19

Here is the problem: EU implementing acts assume reasonably stable standards "out there" in the marketplace. We don't have that for the wallet yet. The reason we don't have stable standards is that the industry hasn't matured the wallet yet. The reason for that is that the industry needs political leadership to mature the standards. Its not a mexican standoff, nor a catch22 but it needs a bit of fingerspitsgephühl and that has been lacking in the process so far. We can make this work but COM has to reach out to the SDOs and work with them to develop the specs that will turn wallets from fintech playtoys into a serious and scalable identity architecture. Then we can put that into IAs and get on with it. In the meanwhile the IAs have to focus on process and not on technology so that we have time to resolve this gordian knot.

28

1 Kommentar

🔑The Next Web's feature of Terra Quantum AG today shows how we make it easy for developers and security professionals to protect sensitive data against current and future threats. Our new TQ42 Cryptography has a user-friendly unified API for post-quantum (PQ) and quantum-resistant algorithms, essential security features such as key generation and management functions, and a scalable architecture. 📚 This open-source library is the latest component of our quantum-as-a-service ecosystem, TQ42. It can help enterprises make data transmission, storage, and authentication more secure. ➡ Read the full article here: https://lnkd.in/gAkAZGRT ➡ Link to the repository: https://lnkd.in/gPjwPn-U #QuantumIsNow #cryptography #quantumtech #quantumcommunication #quantum

53

4 Kommentare

In these times where disinformation is king. Interesting graphs on how the content is produced. more information. https://lnkd.in/dQQ3ZZcT Imperva. thanks Fabienne Billat for this tip. #bot, #AI #security #ethics

8

1 Kommentar

🔮 the KRITIS Umbrella Act: Curse or blessing? The KRITIS Umbrella Act sets a crucial framework for enhancing the security of critical infrastructures. But what are the challenges, and how can they be overcome? In a recent discussion, Dr. Kai Nuernberger and Prof. Dr. Elmar Padilla from Fraunhofer FKIE shared their insights on the limitations of current legislation and the future of security in Germany. 🔍 Key Takeaways: Economic incentives are essential for promoting security requirements. In order to meet standards, compliance checks, like penetration testing and IT infrastructure hardening are inevitable. The evolving threat landscape requires continuous vigilance: Detailed process documentation and modeling enable well-founded risk assessments and rapid countermeasures. Resilience and redundancy are crucial across technical, organizational, and personnel facets. With the rise of AI the integration in security systems must maintain transparency and control, focusing on human-machine interfaces. To ensure a balance between security measures and privacy, a social discourse on security costs should consider financial aspects and data handling. Thank you Dr. Kai Nürnberger and Prof. Dr. Elmar Padilla for the insightful interview! Read the full article on our website. And if you want to learn more about Perimeter Protection join us at Perimeter Protection 2025! #PerimeterProtection #PerimeterProtection2025

10

#Kritische #Sicherheitslücken in #SolarWinds - #Updates verfügbar! "SolarWinds Access Rights Manager (#ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution." "SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability would allow access to the RabbitMQ management console." https://lnkd.in/e7CCZdJH

3

1 Kommentar

NEWS: Generative AI Models – Opportunities and Risks for Industry, Authorities and Government. Key findings from the report of the German Federal Office for Information Security (BSI). Report: German: https://lnkd.in/dUR77mqv Deutsch: https://lnkd.in/dA5GqtV5 Important contents: 1️⃣ Generative AI models are able to take on a wide range of tasks in training and learn patterns from existing data and can then represent an opportunity for digitization. 2️⃣ The use of generative AI models creates novel IT security risks that must be taken into account for a comprehensive analysis of the threat landscape in terms of IT security. 3️⃣ Companies or agencies/governments that use them should conduct an individual risk analysis before integrating generative AI into their workflows. 4️⃣ LLMs usually generate linguistically correct and persuasive texts and are able to make statements on a wide variety of topics. This can give the impression of human-like performance and lead to overconfidence in the statements and performance of the models (so-called automation bias).   5️⃣ Developers and operators should provide sufficient information to allow users to make an informed assessment of a model's suitability for their use case. Information about risks, countermeasures initiated, remaining residual risks or restrictions should be clearly communicated. Puja Varsha DataFaktory

2

What is the Canton Network? Two papers in one download: 🔹 Canton Network: A Network of Networks for Smart Contract Applications Current smart contract networks suffer two constraints that significantly limit meaningful adoption by traditional financial institutions and other enterprises. First, they require every application to inherit the governance properties and the fully transparent privacy model of the underlying network. Second, applications compete for transaction throughput. In this whitepaper, the authors present the Canton Network, a smart contract network of networks that overcomes these limitations and enables each application provider to define their application’s privacy, scaling, permissions, and governance while being part of a broader decentralized public permissioned network. 🔹 Canton Coin: A Canton-Network-native payment application Accessibility and connectivity across subnets of the Canton Network will be supported by an infrastructure called the “Global Synchronizer”, decentrally run by a group of “Super Validators”. As part of the launch of the Global Synchronizer, the Super Validators will also launch a payment application called Canton Coin to facilitate the transfer of value, provide incentives, and serve as payment for infrastructure costs. Just as the Canton Network overcomes several of the key limitations holding back other networks from widespread enterprise adoption, Canton Coin is specifically designed to be compatible with an ecosystem used by regulated financial enterprises. This paper presents Canton Coin, its mechanics, and its role in incentivizing all stakeholders of the Canton Network to build a thriving ecosystem. 

30

Call for Papers - Digital Identity on Public Services. #Digitalidentity can be defined as conversion of personal information, as well as #authentication at different access points and #authorization to access set of services. The Special Issue focuses on the broader topic of #digital identities in #publicservices in both public and private organizations. ▶️https://lnkd.in/gSpZTEqV Some of the topics of interest include but not limited to: · #Citizencentric #design and #development. · Open Source #eID solutions. · #Socialinnovation ecosystems. · Digital #identity security and/or digital identifiers. · #Digital #identitymanagement. · #Digitalisation and digital innovations for #socialsustainability. · #Blockchain for digital identities, self-sovereign eID. · Open innovation in public services. Initial Submission Deadline: 24 May 2024 Kari Heikkinen, Kari Smolander, Juho Lindman, Francesca Morpurgo LUT University University of Gothenburg University of Oulu CyberEthics Lab. Roma Capitale #eID #digitalidentity #publicservices #digitalidentitymanagement #innovation #openinnovation #management #innovationmanagement #digitaltransformation #AI #IT #ICT #aiethics #egovernments #socialinnovation #opensourceeid #digitalsecurity #digitalidentitysecurity #digitalidentifiers #digitalinnovation #digitalisation #socialsustainability #blockchain #citizencentric #publicserviceinnovations #serviceinnovations #Cryptography #DigitalRisks #multipleidentities #EthicalandsocialissuesineID #ethicaldigitalisation #data #opendata #bigdata #digitalethics #eidtech #digitech #riskmanagement #digitalriskmanagement #dataethics #ethics #openaccess #specialissue

3