Sultan M.

NTIA published this statement on the NTIA/Verisign Cooperative Agreement on Nov. 29. (Link: https://lnkd.in/eMPjCBEC). The Cooperative Agreement allows Verisign to MANAGE .com on behalf of the US government and the American people. It states in part, "We also recognize that prices at both the wholesale level and downstream, including prices charged by resellers and substantial markups by warehousers, need to be addressed. That said, both parties MUST AGREE TO ANY CHANGES in order for the Cooperative Agreement to be amended. Over the past several months, NTIA and Verisign have engaged in serious conversations, but, despite our best efforts, we have been unable to agree how wholesale .com pricing should change."   In other words, because of Amendment 35, the NTIA is powerless to make any changes in the American people's best interest, be it cybersecurity, consumer/child protection, or price, on a gTLD that the US government owns unless Verisign agrees. The only leverage for NTIA would be if it could cancel the Cooperative Agreement, but under Amendment 35, if NTIA cancels the Cooperative Agreement, Verisign and ICANN get complete control of .com. I would like to know if such a provision exists in any other US agreement on property that the US government owns. crony capitalism noun : an economic system in which individuals and businesses with political connections and influence are favored (as through tax breaks, grants, and other forms of government assistance) in ways seen as suppressing open competition in a free market #verisign #icann #ntia #cronycapitalism #internetplumbingmonopolies #multistakeholderism #consumerprotection #cybersecurity #cisa #childsafety

5

2 Comments

It’s not surprising that the EC’s poorly considered DMA requirements around interoperability are facilitating a tug-of-war between the largest tech firms. But does the EC possess the technical capacity to determine which side is being reasonable here?

8

1 Comment

Joel M. led the C&T (communications and telecommunications) breakout at the HFS Research New York spring summit asking fellow #hfsdisrupt ers to beware the shadow cast by #GenAI across all other emerging tech. What we shared: We are at an inflection point where silicon, data, and cloud are charting a new course for the market, empowering C&T firms to innovate. The market is continuing to grow, up 40% from 2012-24. AI-driven tech spend is expected to increase by 9% for C&T enterprises. Don't underplay 5G, analytics or other emerging tech - identify your intent then think about what tech supports that. Supply chain, CX and innovation efforts offer great new value potential - with the right partners.

13

1 Comment

While not new, it was interesting to read and distill the breadth of information unwittingly released by smartphone users. Please see my take of this week’s FTC report. https://lnkd.in/ekbRjEyy #privacy #security

7

2 Comments

🚀 Board Oversight in the Age of Innovation 🚀 The digital landscape is rapidly evolving, and with it, the role of board oversight in technology and innovation. Recent reports, including one from The Wall Street Journal, highlight Colorado and Illinois investing millions in quantum computing—a testament to the strategic importance of localized innovation initiatives. I advise lead directors and tech committees to: Scale Innovation: Develop metrics for the value of innovation programs, focusing on regions with strong government support and local expertise. Co-create IT Strategy: Ensure comprehensive oversight of IT strategies and operating models, adapting to global digital regulations. Monitor Cyberspace: Request annual briefings on the digital environment to stay ahead of cybersecurity threats. Your board's active engagement and foresight can significantly impact your company's agility and responsiveness to technological advancements. How is your board adapting to oversee technology and innovation effectively? #BoardLeadership #InnovationOversight #DigitalTransformation #CEO #KSgems #CIO #CTO #CISO #Quantum

3

The Oxford dictionary defines 💥Disruption💥 as: 1) disturbance or problems which interrupt an event, activity, or process. 2. radical change to an existing industry or market due to technological innovation. The last year has brought plenty of disruption in the form of software outages that revealed previously unappreciated wide-spread dependencies, new artificial intelligence tooling, and the changing workflows, skills, and levels of expertise to cope with all this turbulence. That's why my co-chair Daniel Fainstein and I chose it as the theme for the USENIX Association 2025 SREcon Americas conference. The CfP is now open for your talk submissions of Site Reliability Engineering work in the face of disruption. Don't delay! The CfP closes November 4th.

20

2 Comments

National Institute of Standards and Technology (NIST) finalized several algorithms to help protect organizations from attackers using quantum technology to steal confidential data. This is especially important for governments, financial institutions and critical industries -- all of which are being actively targeted by threat actors likely to develop quantum capabilities. Unfortunately, most organizations don't have crypto-agility or the ability to manage even basic cryptographic threats. Many organizations need to learn to walk before they can run. It's not an impossible journey though, and Accenture is helping customers across the world to manage these threats. Scott Wilkie Garland Garris Daisuke Fujii James Nunn-Price Paolo Dal Cin Rex Thexton Tom Patterson Kellyn Beeck #cryptoagility #quantum #quantumsafe #postquantum https://lnkd.in/eY4V8Ejw

38

2 Comments

Senior level executives can be surprisingly easy targets for scams and corporate espionage. They might be at the top of the ladder, but their high status doesn’t mean they’re up-to-date on how to stay safe. On the flip side, younger people are often too open about personal details, which scammers and spies can exploit as well. Both examples point out how corporations must train and educate all employees so that no one falls victim to what I like to call “the RUSE.” Watch the full Give a Heck Podcast here ➡️: https://lnkd.in/g7xUdAPJ Steal a copy of RUSE here ➡️: https://lnkd.in/gG_sbj64 Let’s connect! Follow me on Instagram ➡️: https://lnkd.in/gFNmhSeD . . . #cybersecurityexpert #cybersecuritystories #dataprivacy #cybercrime #socialengineering #cybersecuritytips #cybersecurityawareness #datasecurity #cybersecuritycommunity #cybersecurityprofessionals #digitaltechnology #millenials #genz #seniorexecutives

7

It is great to see DARPA engaging broadly with startups and the private sector (as it always has) to discuss what technologies could be most critical to future national security. In such a conversation today ppl mentioned quantum computing, encryption and sensing, semiconductor design and manufacturing, new materials and chemistries, AI Safety and risk of AI aided bioterrorism and biological warfare, zero knowledge proofs, fully homomorphic encryption, US weapons and broader defense manufacturing capacity, hydrogen production technologies, and autonomous swarms.

26

3 Comments

Proposing the United States Knowledge Reserve Encouraged by initiatives such as the Bipartisan AI Grand Challenges Act of 2024, how about a United States Knowledge Reserve? - https://lnkd.in/en4Eqe27 United States Knowledge Reserve: A centralized institution and network specializing in the integration, enhancement, and strategic oversight of the nation's knowledge infrastructure. Effective Use of Intellectual Resources - Vision and Mission: Ensure equitable access to and benefits from the nation’s intellectual assets, covering a wide range of knowledge areas, including scientific research and cultural heritage. - Inclusivity and Diversity: Represent diverse cultural and intellectual traditions in accessible formats for all citizens, removing barriers for individuals with disabilities and non-English speakers. Cross-Disciplinary Collaborations - Strategic Partnerships: Form alliances beyond traditional academic and governmental sectors, including private industries, civic organizations, and community groups, to foster innovative solutions to societal challenges. - Interdisciplinary Collaboration: Integrate insights from science, technology, humanities, and arts to address complex issues, enhancing the scope and depth of knowledge creation and application. Advanced Technology for Knowledge Creation, Access, and Preservation - Digital Infrastructure and AI: Develop state-of-the-art digital infrastructure utilizing artificial intelligence to enhance knowledge storage, curation, discovery, and personalized learning experiences. - Technology Integration: Use advanced technologies to ensure knowledge is preserved and accessible, facilitating efficient information management and dissemination. Unified Knowledge Ecosystem Development - Collaboration among Knowledge Institutions: Align efforts and resources of entities like the Library of Congress, National Archives, NSF, and NIH to create a seamless, integrated knowledge network. - Public Access Policies: Implement policies promoting open access to knowledge resources while safeguarding privacy and intellectual property rights. Global Knowledge Management Advocacy - International Collaboration: Engage with global knowledge institutions and bodies to share resources, data, and best practices, emphasizing the USKR’s role in addressing global knowledge challenges. - Global Advocacy: Lead in advocating for best practices in knowledge management, fostering global collaboration and innovation. Cohesive Knowledge Utilization Processes - Effective Application: Develop frameworks for applying knowledge to solve real-world problems, emphasizing practical use across various sectors. - Engagement and Literacy Programs: Initiate programs to improve public engagement with the knowledge reserve and enhance information literacy and critical thinking skills. #KnowledgeManagement #Innovation #AI #Interdisciplinary #OpenAccess

27

4 Comments

In the context of the Great Power Competition with China, the U.S. Department of Defense (DoD) is executing a strategic shift from the Cold War Industrial Base to the Next Gen Industrial Base. This transformation is not merely about modernization but a critical pivot to leverage fast-moving, cutting-edge technologies that deliver asymmetric results and offer non-traditional solutions to counter Chinese capabilities. **Find out more about Fortis Secure File Transfer: https://lnkd.in/eRYwZWqn #ibmz #ibmquantum #DoD #security #IBMHyperProtect #venturecapital #FortisQuantumSolutions #QuantumProofing #Blockchain #IBM #MilitaryTechnology #CyberSecurity #OperationalExcellence #Leidos #DataProvenance #DilithiumCrystals #GreatPowerCompetition #DODCIO #AFWERX #AFSC #AFMC #AFLCMC #AFRL #Boeing #LockheedMartin #Raytheon #AmericaMakes #LIFT #CYMANII #SAIC

10

Is it usually the exception that triggers new regulation? In a thought-provoking piece from Federal News Network discussing a WeWork model for SCIFs, a senior fellow at National Defense Industrial Association - (NDIA) was interviewed and was discussing overregulation. In one example they state: "We found contract clauses that required seat belts to be put in the contract, to wear seatbelts while driving on base, even though every state had that law already." New Hampshire does NOT have a law in place that mandates seat belt usage for adults, so from a NH perspective, it makes sense that this contract clause should be added for all New Hampshire businesses to ensure they wear seatbelts while driving on New Boston Space Force Station, for example. 𝐿𝑖𝑣𝑒 𝑓𝑟𝑒𝑒 𝑜𝑟 𝑑𝑖𝑒 as they say around here. (See photo) It is tempting to make generalizations about #cybersecurity practices amidst the wave of cyber #regulation and proposed regulations. How do you react to this fake quote about overregulation in cybersecurity: "We found contract clauses that required #cve mitigation for all critical and high findings to be put in the contract, even though every software development team has that common sense requirement already." In capitalist markets, the opportunity to reduce costs, increase productivity, and generate shareholder value are powerful forces that are underestimated. I hypothesize that most regulation is a direct result of the bad behaviors of an outlier, not the mainstream. Everyone pays the price for the one or two entities that fail to adopt common sense standards. Here is one piece of empirical evidence that supports this hypothesis: It was one company, Enron, that reshaped corporate governance, accounting, and financial practices. According to KMPG's 2023 SOX Report, respondents spend an average of $1.6M on their SOX compliance programs and spend 11,800 SOX compliance hours, including both internal team members and external auditors. If there was no Enron, would SOX regulation be a thing? Yes, there is overregulation in many places. And, thus far, neither Solar Winds nor Crowdstrike appear to have been significant enough to trigger regulation of #software development practices. In a twist of irony, perhaps disproving my own hypothesis a few sentences prior, it is software development's mainstream that has failed to consistently embrace secure development practices. Instead, the outliers adopt and certify against SSDF tasks and market the value of both user experience and security experience. Are the few paying the price for the many when it comes to cyber regulation? What event magnitude must be reached in your opinion before the common sense practices captured in the #ssdf become regulations? Article with the quote: https://lnkd.in/eP75ba_n

21

8 Comments