No longer can we use “security through obscurity” excuses to explain how so called “closed,” or compiled and obscured, software is more secure. Open source is the future, and is more adaptable and responsive to community demands and security issues. When in doubt, however, open source also allows companies such as ours full access to all code resources, which we can comprehensively scan and analyze, to ensure the most robust level of software security possible for critical environments.
Netizen Blog and News
The Netizen team sharing expertise, insights and useful information in cybersecurity, compliance, and software assurance.
recent posts
about
-

-

-

Over the past 15 years or so, there has been a continued push, until recently, to cut information technology costs, especially in software development, to the bare bones through offshoring – the practice of shifting labor-intensive work to countries where very few, if any, minimum wage standards exist and average income per capita is a mere fraction of that in the U.S. However, what too few understand and what most who have made this mistake have learned is that the costs saved in lower hourly rates on the front-end are gained back (and then some) by having to often deal with a lack of communication, a misunderstanding of your requirements, and inherently poor quality put forth by underpaid and under-qualified personnel.
I say “until recently” above because things are gradually changing. Companies once tripping over one another to move their operations abroad have now been dealing with not only the aforementioned side effects but also the issues of rampant intellectual property theft and other security concerns. This is slowly, but steadily, creating a rebirth of on-shored work. We’ve even encountered offshored projects wherein code has been simply copied from one client to the next, even though each had paid for their own custom solution. While this could happen anywhere, there are far more protections in place locally to deter these activities.
You see, shipping your codebase and intellectual property to a minimum-wage vendor in another country is essentially asking for theft, especially in the case of small businesses without the global legal reach of the Fortune 500. It is all but assured that key pieces of your system, that you pay for, will be re-used for the benefit of the offshoring company, as we have seen many times. This is mainly due to the lack of legal oversight and avenues for legal remedy between countries. Using an on-shore developer is a crucial aspect in maintaining secure oversight of and protection for your intellectual property.
Beyond legal implications, there are often issues of quality assurance. When you pay pennies on the dollar for developers, you are getting the equivalent quality. If it sounds too good to be true when you find a “well qualified” company or individual for 1/5th the cost of an in-country counterpart, it is. These developers, in some countries abroad, work in the technical equivalent of sweatshop conditions at times where they are pushed to churn out barely-working, buggy code without thought of the long term supportability, security or quality.
After all, it’s not their problem once it’s delivered – it’s yours. You are ultimately responsible to your end-users for ensuring that the application delivered will not breach business-critical data. Without the adequate legal protections of using an in-country development team, there is no way to ensure you’re getting a quality result without additionally hiring a local quality assurance team. This would only serve to bring costs in line to where they would have been originally had an entire local team been utilized from the beginning. So why go the offshore route at all? Truth is, there are fewer and fewer reasons to do so and many companies are now realizing this. The old adage most certainly rings true here – you get what you pay for.
There is only one tried and true way to ensure the ultimate quality and security of your product, and that is to utilize a team of talented, background-cleared in-country developers and technicians who have a deep desire to obtain total client satisfaction and not a rigid goal to simply churn out more code, however poor or vulnerable, in questionable conditions. You need someone who will be available at your beck and call, a partner who understands the requirements of your project at every level and offers iron-clad protections for your intellectual property while guaranteeing prevention of common software vulnerabilities. That’s a level of White Glove Service you’ll only find locally.
-
Here at Netizen, we’ve blogged a lot over the past year about the value veterans bring to the table for any startup. We are proudly veteran owned and have a staff comprised of incredibly dedicated, talented employees of which over 80% are veterans of various branches, occupational specialties, ages and backgrounds. It is this aspect that we have attributed to much of our early success, and I’ll explain why.
In technology, especially information security, we all must continuously grow and learn to keep pace with the market and technological changes. No one knows this better than a military veteran. In the service, we are forced to constantly adapt to and overcome even the most seemingly insurmountable of obstacles on a daily basis. Education and training are a part of the core military lifestyle and most veterans bear this intense desire to constantly learn and adapt long after their service ends. It is a set of attributes which cannot be taught, but which must be lived in order to learn.
Veterans bring values of loyalty, dedication and honesty. In a world replete with fraud, waste and abuse, veterans are a unique breed of driven individuals that put the team first. Never leave a client unsatisfied, never leave a job poorly done, and never let your teammates down. In a cutthroat, individualist society these people tend to be relationship and mission driven. This has proven to be a cultural requirement for long term results instead of constantly chasing shortsighted gains at the expense of future stability.
There is also so much more to the military service than the labels of simple occupational specialties which the civilian world attempts to categorize them by. There are skills such as leadership, discipline, teamwork and other ethical values which cannot simply be learned in a classroom. These are skills sorely lacking in the corporate world, but abundant in the veteran community. The problem is, veterans are rarely given the chance to prove themselves because corporate recruiters, due to a complete lack of understanding, look no further than the veteran’s occupational specialty.
Point is, regardless if the servicemember was an aircraft mechanic or an infantry scout, there are skills well beyond those simple titles that are hard to quantify but critical to startup and corporate success. So, give a veteran a chance and your business will reap greater success because of it, as studies have repeatedly shown [link 1 link 2 link 3 link 4].
-

Some issues trigger a deeper response than others within communities. In the technology world, the education, opportunities and inclusion of women holds unusual resonance.
In the U.S., as Nick Kristof wrote, “schoolgirls are leaving boys behind in the dust.” After graduation, the narrative evolves further. As Claire Cain Miller wrote in the New York Times on Friday, “women now outnumber men at elite colleges, law schools, medical schools and in the overall work force. Yet a stark imbalance of the sexes persists in the high-tech world, where change typically happens at breakneck speed.”
Why the disparity in the world of Silicon Valley startups, venture capital and high technology? Why are so few women in Silicon Valley?
At least some of the issue runs deep, far back into the educational system. As Miller writes:
That attitude is prevalent among young women. Girls begin to turn away from math…
View original post 898 more words
-
by Tomas O’Keefe, Senior AnalystSome recent developments suggest that the Department of Veterans Affairs is starting to get organized and introducing more advanced analytics capabilities into its environment.
One of the new tools being introduced into the VA environment is a program called Joint Legacy Viewer, nicknamed Janus. Janus is going to give VA employees a significantly better ability to view medical information from the Defense Health Agency in a single screen. Additional capability will be added to the program to provide the ability for clinicians to order medication and other necessities based on the information on the screen. As more and more medical information is available via Janus, the VA will turn towards analytics to predict care for particular populations of veterans.
View original post 183 more words
-

-
