Tag Archive for Michigan

Password Bracketology

Password BracketologyThe University of Michigan Basketball Wolverines, the Hockey team, and the Debate team all have made it into the NCAA Final Four. Along the way, the Wolverines busted a few brackets. In keeping with the March bracket madness, Keeper Security ran an analysis they’ve called “Password Madness”. In Password Madness, they developed their own bracketology of bad passwords. During Password Madness, the publisher of password manager software ran an analysis on 1.4 billion clear-text passwords 4iQ found on the dark web for sports team mascots used as passwords.

University of MichiganFollowers of Bach Seat already know that passwords suck and there is a long list of passwords like “password” and “123456” that should be banned from use. According to a statement from Keeper Security, of all the passwords looked at, those containing “Tiger” and its variations (such as “T1ger”, “T1g3r”, etc.) appeared 187 percent more often than passwords containing variations of “Eagle,” the second-most common password set found, and nearly 850 percent more than the least common password, which was “Bluejay” and its variations.

The not so élite eight passwords on their list are:

  • PasswordCowboy
  • Eagle
  • Hurricane
  • Irish
  • Pirate
  • Spartan
  • Tiger
  • Trojan

This is bad, as I have pointed out, many people re-use the same password on nearly every online account. This behavior opens up hundreds of thousands of credentials to speedy hacking. Keeper Security recommends rather than using their favorite sports team as a password hoops fans, instead concentrate on using unique, high-strength, passwords for each login. Strong passwords contain at least eight random characters of upper and lower-case letters, numbers, and symbols.

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Are You a Human

Are You a HumanDetroit-based Are You a Human was recently purchased by Virginia-based Distil Networks. The purchase is part of Distil’s efforts to expand its bot-detection capabilities. As part of the acquisition, the Human Tag will be re-branded as Distil Bot Discovery. Distil will open an office in Detroit and increase its presence in Motown. All 10 of Are You A Human’s employees are staying on, according to reports.

The firm’s website describes the Are You Human technology;

[Are You Human] collects hundreds of fingerprinting metrics and analyzes user’s device, software, and natural behavior to develop robust behavioral metrics on each page view in real-time … Only through an expert understanding of natural human characteristics and behavior is it possible to identify the 99% of non-human traffic caused by new and unique bots that fraud detection and verification systems can’t find

suite of bot-detection productsDistill Networks will add A You a Human’s real-time analysis technology and biometric information to its own suite of bot-detection products and use it to launch a free bot-discovery plugin for Google Analytics. Detecting bots is important because they can inflate website traffic numbers or present a security risk by searching for sensitive information.

The firm cited the Motor City as being:

… incredibly helpful and supportive to us, and we can’t imagine doing this anywhere else. Being able to build this company in Detroit has been hugely meaningful to all of us, and we’ll still be part of that awesome community going forward.

Detroit skyline

 

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Biometrics Hype

Biometrics HypeFollowers of the Bach Seat know biometrics have a limited value in replacing passwords. Despite the technical flaws another round of biometric hype is rolling across the Intertubes. The latest round of biometric hype is coming from Samsung (005930). In the hope to revive their brand, Samsung has released the Galaxy S8. The Samsung Galaxy S8 includes the ability to use facial recognition software to unlock your brand new phone. CNet says that this idea “sounds awesome.”

However, this awesome idea appears to lower the bar for your security. CNet reports that the video blogger MarcianoTech demonstrated a pre-release version of the Galaxy S8 being unlocked using just a photo (at the 1:09 mark). To their credit, Samsung has acknowledged that the Face Unlock feature is more for convenience than for security. The biometric feature cannot be used for mobile payments. While weak facial recognition software may be a convenience for the user, it could also be very convent for others, too.

The troubles with Face Unlock date back to 2011.  In 2011 SlashGear reported that Google (GOOG) admitted the security system could be fooled by a picture of you and not the real thing. CNet reports that the technology was developed by PittPatt, a startup originating from Carnegie Mellon University, which was later acquired by Google.

FBI’s facial recognition database

Next Generation Identification databaseThe Guardian reports during testimony before congress the FBI admitted that about half of adult Americans’ photographs are stored in facial recognition databases that can be accessed by the FBI. About 80% of photos in the FBI’s network are non-criminal entries, including pictures from driver’s licenses and passports from 18 states including Michigan.

The FBI first launched its advanced biometric database, Next Generation Identification (NGI), in 2010. NGI augmented the old fingerprint database with further capabilities including facial recognition. The bureau did not tell the public about its newfound capabilities nor did it publish a privacy impact assessment, required by law, for five years.

Unlike with the gathering of fingerprints and DNA, which is done following an arrest, photos of innocent civilians are being collected proactively. The FBI made arrangements with 18 different states to gain access to their databases of driver’s license photos.

 

“I’m frankly appalled,” said Paul Mitchell, a congressman for Michigan. “I wasn’t informed when my driver’s license was renewed my photograph was going to be in a repository that could be searched by law enforcement across the country.

rb-

So anyone with a photo of you, or maybe even just access to your Facebook (FB) photos, could potentially access your phone. There are two important reasons why biometrics won’t work, and why the old-fashioned password is still a better option: a person’s biometrics can’t be kept secret and they can’t be revoked.

 

no real way to hide biometric data from the worldPeople expose their biometrics everywhere – they leave fingerprints behind at bars and restaurants, their faces and eyes are captured in photos and film, etc. There’s no real way to hide this data from the world. As far back as 2002, research led by Japanese cryptographer Tsutomu Matsumoto. Matsumoto and his team gummy bears to make artificial fingers that they then used to fool fingerprint scanners. The gelatin-based finger was successful in fooling all 11 devices tested. I wrote about spoofing fingerprints in 2016.

However, it’s the second problem with biometrics that is the really big one: once a person’s biometrics have been compromised, they will always be compromised. Since a person can’t change their fingerprint or whatever biometric is being relied upon, it’s ‘once owned, forever owned.’ That is biometrics’ major failing and the one that will be hardest to overcome.

Part of the reason is that it’s silly to only have 10 possible passwords your whole life (20, if you count toes) but unlike a password, once a biometric is compromised, it is permanent. Today, if your Twitter account gets hacked, you just change the password – but if you are using a biometric, you will be stuck with that hacked password for the rest of your life.

With the release of Windows 10, Microsoft stepped up its biometrics game. CNet reports that with the recent improvements in Windows 10 biometric security includes facial recognition software. Besides facial recognition, Windows Hello also supports other biometric factors to secure your PC. Some of the factors are fingerprints and iris recognition. For facial recognition though, Microsoft (MSFT) has partnered with chipmaker Intel (INTC) for its RealSense 3D camera tech to get the job done. RealSense uses depth-sensing infrared cameras to track the location and positions of objects. Microsoft uses RealSense to scan a person’s face or iris before unlocking the device in question.

To further push the biometrics agenda, more than 200 companies including Microsoft, Lenovo, Alibaba, and MasterCard have already come together to form a partnership known as the FIDO (Fast Identity Online) Alliance. FIDO was founded in 2013 to address issues such as a worldwide adoption of standards for authentication processes over the Web to help reduce reliance on passwords.

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Motor City v. Silicon Valley

– Updated 03-30-2018 – Business Insider reports that Silicon Valley darling Tesla shares have collapsed almost 6% since January 1 on a string of critical reports about the company’s ability to keep up healthy production levels and meet delivery expectations for its new mass-market Model 3 sedan.

Motor City v. Silicon ValleyBack in April, the tech sector was leaping for joy when Tesla’s stock market valuation passed Ford and GM. Rumors abound in Silicon Valley that Tesla is the future of transportation and Elon Musk is the king of cars because they took more orders for cars that did not burn up or crash out of control. In 2016 Tesla delivered only 76,000 vehicles. Ford sold nearly 1 million F-Series trucks in 2016.

Ford and GMDespite the happy dances in Silicon Valley, which fancy itself as the logical successor to Detroit as the capital of American innovation new research says not so fast. The west coast upstartsUber, Google (GOOG), and Tesla (TLSA) — still have a lot of catching up to do when it comes to outpacing Michigan manufacturers. The Verge points us to Navigant Research, whose newly released “leaderboard” report ranks autonomous vehicle players not just on their ability to make a car drive itself, but on their ability to bring that car to the mass market. 

Navigant Research scored 18 companies working on self-driving technology on 10 different criteria related to strategy, manufacturing, and execution. The report combined all that into an overall score to get a sense of who’s ahead and who’s not. General Motors (GM) and Ford (F) are currently leading the pack, with Daimler and Renault-Nissan close behind. Those four companies make up Navigant’s “leader” category. In other words, when you climb into your first self-driving car in 2021, it will almost certainly be built by one of those four companies.
Navigant Research Leaderboard: Automated Driving Vehicles

Most everyone else is in the “contender” category. This includes car companies like BMW, PSA, Hyundai, Toyota, Tesla, and Volkswagen; suppliers like Delphi and ZF; and tech firms like Alphabet’s Waymo. Further down the list, in the “challengers” category, are companies like Honda, nuTonomy, Baidu, and Uber.

Detroit is beating Silicon ValleyGM Assembly line

Sam Abuelsamid, a senior research analyst at Navigant and one of the authors of the report, told the Verge the reason Detroit beating Silicon Valley so badly in this all-too-crucial race to get autonomous vehicles on the road is because of experience. He says, Silicon Valley, “ …. will have to do deals with someone to get actual vehicles.”

Alphabet’s Waymo, scores top marks for technology but drags in the production strategy and sales, marketing, and distribution buckets. The company plans to work with legacy automakers to put its tech in cars, but has not yet struck any major deals. Mr. Abuelsamid detailed on an email with the Verge that Waymo is in the best position of the contenders.

Waymo logoThey have almost every piece of this—except the product strategy … Waymo has what is arguably the best technology right now, although they probably aren’t that far ahead of the leading [original equipment manufacturers] but they will have to do deals with someone to get actual vehicles”

Despite Uber’s high profile, a recent study showed that only 15% of U.S. consumers have tried a ride-hailing app like Uber. Uber also has a safety problem – Uber drivers have been charged with murder and violent crimes against their customers.  In the Navigant research, Uber wallows near last place thanks to low grades for distribution, product portfolio, and staying power—and because makes Uber makes neither cars nor money. In fact, its key strength—that it already operates a global fleet of shared vehicles—may not be enough here. “It’s a lot easier for the company that actually has the infrastructure to create vehicles to recreate what Uber’s done, than the other way around,” Mr. Abuelsamid says.

Scale matters in the auto industry.

The Navigant analyst explained scale matters in the auto industry.

All the little [Silicon Valley] startups may have some interesting ideas, but they don’t have the resources to produce something sufficiently robust to be commercially viable. If they have something good to offer, their best bet is an acquisition

Mergers and acquistionsThe “legacy automakers” have engaged in mergers and acquisitions and early maneuvering in the autonomous vehicle arena as Mr. Abuelsamid stated. The report predicts that big companies will buy little startups to leverage their technology and expertise to round out the much larger-scale enterprise of developing, testing, validating, producing, and distributing self-driving cars.

Wired says Ford and GM both score in the low to mid 80s on the technology front; it’s their old-school skills that float them to first and second place. They’ve each spent more than a century developing, testing, producing, marketing, distributing, and selling cars. Plus, each has made strategic moves to bolster weak points.

Chevy BoltGM recently acquired Cruise Automation, a San Francisco-based autonomous vehicle technology maker in a deal valued at more than $1 billion. GM said the acquisition will allow it to “accelerate” its autonomous vehicle development efforts.

Ford has announced an investment of $1 billion over the next five years in Argo AI, a startup run by Carnegie Mellon roboticists and engineers who really know their artificial intelligence stuff.

Waymo Chryslet PacificaFiat Chrysler has partnered with Alphabet to jointly test autonomous technology in Pacifica minivans, and Alphabet is opening a 53,000 square foot self-driving car development center near Detroit in Novi, MI.

GM has invested $500 million in ride-sharing provider Lyft to beef up its ridesharing service. In the “long-term strategic alliance,” the companies will work on what they call “on-demand autonomous vehicles.” For now, the deal means GM cars will be the “preferred” vehicle used by Lyft drivers who rent their cars in various U.S. cities. Those vehicles will tap into GM’s OnStar service, while GM and Lyft promised “personalized mobility services and experiences,” but did not elaborate.

Ford invested $75 million iin LiDAR maker VelodyneFord, meanwhile, recently announced a $75 million investment in LiDAR maker Velodyne, to “quickly mass-produce a more affordable automotive LiDAR sensor” so the company can launch a fleet of self-driving ride-sharing cars by 2021

Ford has also acquired SAIPS, an Israeli machine learning firm to further strengthen its ability in artificial intelligence and computer vision. SAIPS has developed algorithmic solutions in image and video processing, deep learning, signal processing and classification. This expertise will help Ford autonomous vehicles learn and adapt to the surroundings of their environment

Ford announced that it would take part in a $6.6 million seed funding round for Civil Maps to further develop high-resolution 3D mapping capabilities. This provides Ford another way to develop high-resolution 3D maps of autonomous vehicle environments. Ford has also agreed to acquire Chariot, an on-demand shuttle service based in San Francisco.

Mr. Abuelsamid predicts that early on,  you probably won’t be buying a self-driving car at a dealership, but rather riding in one that you hail through an app-based service like Uber or Lyft. These vehicles will be part of a fleet owned by a manufacturer, like Ford or GM. Fleet ownership will help manufacturers manage the issues self-driving vehicles are likely to encounter early on, like insurance for the inevitable accidents. Navigant’s Abuelsamid says

With all of that in mind, it’s far easier for a manufacturer to replicate the sort of logistics platform that Uber or Lyft have than it is for those companies to invest in and create the development, manufacturing, and service infrastructure that [original equipment manufacturers] have

Mr. Abuelsamid noted that Tesla ranked pretty far down the “contender” because Elon Musk’s company is “lacking in quality, distribution, financial stability, and their [Autopilot] 2.0 hardware will never be more than limited Level 4-capable (PDF) at best.” In other words, Musk would be advised not to start gloating about his company being valued higher than the OG’s Ford and GM quite yet.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Michigan Adds Over 10,700 Tech Jobs in 2016

Michigan Adds Over 10,700 Tech Jobs in 2016Michigan’s technology industry employment grew by an estimated 5.1% in 2016, the MichiganTech News reports. The good news comes from the annual Cyberstates 2017 report from CompTIA. The technology association found that Michigan employers added more than 10,700 new tech jobs in 2016.

Michigan ranks 10th for tech industry employmentThe survey also found that Michigan ranks 10th among the 50 states for tech industry employment with an estimated 221,994 workers. Michigan was in the top five states for 2016 tech industry job growth on a percentage change basis.

Technology occupations across all other industries in Michigan – the second part of the tech workforce – reached an estimated 271,900 in 2016. The tech sector accounts for an estimated 6.6 percent of the overall Michigan economy. The tech industry employs an estimated 5.3 percent of the overall state workforce. Leading tech occupations state-wide include:

  • Mechanical engineers (42,610),
  • Industrial engineers (25,500) and
  • Computer user support specialists (20,130).

metro-Detroit area leading tech jobs are: Software and Web DevelopersThe metro-Detroit area leading tech jobs are:

  • Software and Web Developers 11,434
  • Network Architects, Admins, & Support 10,379
  • Systems & Cybersecurity Analysts 9,441
  • Computer Support Specialists 1,437
  • Database Administrators 1,437

The annualized average wage for a Michigan tech industry worker was an estimated $89,200 in 2016, 77% higher than the average state wage ($50,400). Michigan ranks 21st nationally in average tech industry wages.

Other Key Findings

average wage for a Michigan tech industry worker was an estimated $89,200 Michigan ranks 27th among all states in the Cyberstates 2017 Innovation Score, which is based on an analysis of new tech patents, tech startups, and new tech business establishments on a per capita basis.

Michigan is home to an estimated 11,223 tech business establishments. The Detroit metropolitan area is home to more than one-third of these businesses (4,174).

The strongest year-over-year job growth occurred in the categories of:

  • Engineering services (+ 8.3%)
  • R&D and testing labs (+ 5.4%) and
  • Computer systems design and IT services (+ 5.1%).

Employers posted more than 28,600 job openings for tech occupations in Q4 2016.

“The Cyberstates data affirms the strength and vitality of Michigan’s tech industry, and attests to its essential standing in the economy,” Todd Thibodeaux, president, and CEO of, CompTIA said in a presser. “Technology enables innovation and generates growth for companies, regardless of their size, locale or markets served.”

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.