Sonatype 2017 State of the Software Supply Chain Report Reveals … – Business Wire (press release)

FULTON, Md.--(BUSINESS WIRE)--Sonatype, the leader in software supply chain automation, today announced the release of its third annual State of the Software Supply Chain Report. This years report highlights risks lurking within open source software components and quantifies the empirical benefits of actively managing software supply chain hygiene.

Organizations that are actively managing the quality of open source components flowing into production applications are realizing a 28 percent improvement in developer productivity, a 30 percent reduction in overall development costs, and a 48 percent increase in application quality. Furthermore, analysis of more than 17,000 applications reveals that applications built by teams utilizing automated governance tools reduced the percentage of defective components by 63%.

Conversely, organizations failing to manage software supply chains are unwittingly releasing vulnerable applications into production, wasting thousands of hours on rework and bug fixes, and facing increased liability due to gross negligence.

Additional key findings of the 2017 State of the Software Supply Chain report include:

Consumption of open source components is growing on a massive scale

Open source component suppliers remain slow to fix vulnerabilities

Number of downloaded components with known vulnerabilities is slightly decreasing

The regulatory landscape is rapidly changing

Supporting Quotes

Wayne Jackson, CEO, Sonatype Companies are no longer building software applications from scratch, they are manufacturing them as fast as they can using an infinite supply of open source component parts. However, many still rely on manual and time consuming governance and security practices instead of embracing DevOps-native automation. Our research continues to show that development teams managing trusted software supply chains are dramatically improving quality and productivity.

Mark Driver, Felix Gaehtgens, Mark ONeill, Gartner, May 2017 report Managing Digital Trust in the Software Development Life Cycle By 2020, 50% of organizations will have suffered damage caused by failing to manage trust in their, or their partners, software development life cycles (SDLC) causing revenue loss of more than 15%. Application leaders responsible for modernizing application development should re-evaluate the SDLC in the form of a trusted software supply chain, with varied levels of trust.

About the State of the Software Supply Chain Report

The 2017 State of the Software Supply Chain Report blends a broad set of public and proprietary data with expert research and analysis. This years report extends beyond Java data to include supply chain findings from JavaScript, NuGet, Python, and Docker ecosystems.

Additional Resources

About Sonatype

Sonatype is the leading provider of DevOps-native tools to automate modern software supply chains. As the creators of Apache Maven, the Central Repository, and Nexus Repository, Sonatype pioneered componentized software development and has a rich history of supporting open source innovation. Today, more than 120,000 organizations depend on Sonatypes Nexus platform to govern the volume, variety, and quality of open source components flowing into modern software applications. Sonatype is privately held with investments from New Enterprise Associates (NEA), Accel Partners, Hummer Winblad Venture Partners, Morgenthaler Ventures, Bay Partners and Goldman Sachs. Learn more at http://www.sonatype.com.

Here is the original post:
Sonatype 2017 State of the Software Supply Chain Report Reveals ... - Business Wire (press release)

Infotecs At The Forefront Of Quantum Cryptography – Broadway World

Infotecs, an internationally known IT security and threat intelligence provider, is developing quantum encryption technology to exchange encryption keys at very high data volumes.

Quantum computing has the potential to revolutionize modern computing by attaining computing speeds previously thought impossible. However, computing that is significantly faster would also make it easy to break many of todays encryption techniques. One reason for this is that if encryption keys are used too frequently, attackers can find statistical patterns that allow decryption of the data. The solution to that problem is to change keys very frequentlysometimes as much as several times per second.

Infotecs has invested roughly 4.8 million dollars over three years in the development of a post-quantum cryptography (PQK) technology that manages key exchange. Infotecs, in cooperation with international scientific institutions, is working to develop a marketable, efficient, but affordable solution for the construction of a secure quantum data network.

"The IT security sector is facing an extremely difficult challenge because of increasingly high-performance computer systems," comments Aleksandr Tkachev, General Manager of Infotecs Americas. "Our cryptographers have been working intensively since autumn 2016 on the development of a post-quantum cryptography solution to provide our customers with a market-ready encryption technology that meets the changing future requirements for secure, encrypted communication."

About Infotecs As a leading international IT security provider and an experienced specialist in software-based VPN solutions, Infotecs has been developing peer-to-peer ViPNet technology since 1991 to provide more security, flexibility and efficiency than other security products that are common to the market. The ViPNet Security and Threat Intelligence Platform provides complete security for all enterprise environments in a single cost-effective solution. As the only technology, ViPNet supports real point-to-point security and is therefore considered highly secure. The encryption solution is scalable, flexible, and easy to implement and manage. ViPNet can also be seamlessly integrated into existing network infrastructures, enabling customers to find the right balance between high security, low complexity and low risk. More than 1,000,000 endpoints, company locations and servers have been securely connected to each other using ViPNet - supported by experienced crypto specialists from our IT development and support team, as well as a strong network of partners. Further information on the company can be found at http://www.infotecs.us.

Contact Infotecs Americas James Quinn Vice-President, Strategic Security Architecture 77 Water Street, 8th Floor New York, NY 10005 (917) 362-4284 james.quinn(at)infotecs(dot)us

See the original post here:
Infotecs At The Forefront Of Quantum Cryptography - Broadway World

Kudelski Security to Present on Automated Testing of Crypto Software at Black Hat USA 2017 – PR Newswire (press release)

Experts from Kudelski Security will also dive into topics such as cloud security and orchestration, managed attacker deception, advanced threat intelligence, designing IoT security and cryptography during a series of Debriefing Sessions hosted at the Four Seasons Hotel.

Aumasson and Romailler's presentation will focus on a new and efficient approach to systematic testing of cryptographic software: differential fuzzing. Unlike general purpose software fuzzing such as afl, differential fuzzing doesn't aim to find memory corruption bugs (although they might come as a by-product), but to find logic bugs. Compared to test vectors, differential fuzzing provides greater code coverage and compared to formal verification, differential fuzzing is easier to apply, both for testers and developers. Aumasson and Romailler will present this session at both Black Hat and BSides LV. Romailler will also present it at Crypto & Privacy Village within DEF CON 25.

While at Black Hat 2017, Kudelski Security will also be hosting a Crypto Challenge, a series of after show Debriefs Sessions and a party at the House of Blues' Foundation Room within Mandalay Bay. Details include:

Media and analysts interested in meeting with Kudelski executives at the show should contact kudelskipr@teamlewis.com.

About Kudelski SecurityKudelski Security is the premier advisor and cybersecurity innovator for today's most security-conscious organizations. Our long-term approach to client partnerships enables us to continuously evaluate their security posture to recommend solutions that reduce business risk, maintain compliance and increase overall security effectiveness. With clients that include Fortune 500 enterprises and government organizations in Europe and across the United States, we address the most complex environments through an unparalleled set of solution capabilities including consulting, technology, managed security services and custom innovation. For more information, visit http://www.kudelskisecurity.com.

Media Contact:John Van Blaricum Vice President, Global Marketing Kudelski Security +1 650 966 4320 john.vanblaricum@kudelskisecurity.com

View original content with multimedia:http://www.prnewswire.com/news-releases/kudelski-security-to-present-on-automated-testing-of-crypto-software-at-black-hat-usa-2017-300488871.html

SOURCE Kudelski Security

Home

Originally posted here:
Kudelski Security to Present on Automated Testing of Crypto Software at Black Hat USA 2017 - PR Newswire (press release)

Cryptocurrencies are crashing, but bitcoin isn’t falling as badly as the rest – Quartz

Cryptocurrency markets are crashing. Bitcoins price has fallen by about 20% in the last seven days, wiping out $7 billion of market value. But its doing better than other major cryptocurrencies like ether and ripple, which have lost 30% or more.

Bitcoins relative resilience in the current crash bolsters its status as the reserve currency of the cryptocurrency markets. Some $29.5 billion worth of bitcoin has been traded on global exchanges in the last month, compared to $26.3 billion worth of ethereum, according to data site Coin Marketcap. Not all traders are cashing out of ether into bitcoin, of course, the ether-Korean won currency pair is among the most actively traded in the last 24 hours, Coin Marketcaps data shows.

One indicator of bitcoins health relative to other cryptocurrencies is the so-called Bitcoin Dominance Index maintained by Coin Marketcap. It shows the total value of all bitcoin in circulation as a proportion of the value of all cryptocurrencies in circulation. As cryptos in general rallied this year, bitcoins dominance has fallen. But as markets have corrected in recent weeks, bitcoins dominance rose.

Bitcoin is still more than twice as valuable as ethereum, and about six times as valuable as Ripple. That gap could grow if the cryptomarket correction continues.

Read next: The strange mix of reasons why bitcoin has soared to all-time records

See more here:
Cryptocurrencies are crashing, but bitcoin isn't falling as badly as the rest - Quartz

Bitcoin slides below $2000 as cryptocurrency selloff continues – MarketWatch

The price of the digital currency bitcoin fell over the weekend, dropping below $2,000 and farther away from its June highs, part of a broad selloff in dozens of cryptocurrencies, including ether.

Bitcoin on Sunday traded as low as $1,836, according to news and research site CoinDesk, down about 8% on the day, and almost 40% from its high of $3,018 on June 11. Meanwhile, ether, the currency used on the Ethereum network, traded as low as $155 on Sunday, down about 60% from its high of $395 on June 13.

Prices were lower across the board on Sunday, most notably for the tokens created via the so-called initial coin offering, or ICO, process.

The selloffs are yet another stark reminder that for all the potential and promise in these new kinds of digital assets, they remain highly speculative trading vehicles. The markets around them are still relatively immature and illiquid, resulting in extremely volatile trading.

An expanded version of this report appears on WSJ.com.

Also popular on WSJ.com:

Can the most expensive indie move ever break even?

Elon Musk lays out worst-case scenario for AI threat.

See the original post here:
Bitcoin slides below $2000 as cryptocurrency selloff continues - MarketWatch

Are Cryptocurrencies Recovering or is This a Dead cat Bounce? – The Merkle

No one can say there is such a thing as a boring day in the world of Bitcoin and cryptocurrency. After the onslaught of price declines throughout the weekend, we kick off this Monday on a positive note. All currencies are seemingly recovering their losses. The Bitcoin price surpassed US$2,000 again, but it looks like Ethereum is the winner of the day so far. Other currencies all doing quite well too, for now.

Even though we are not a big fan of the term dead cat bounce, it accurately describes what is going on in the cryptocurrency world right now, by the look of things. The markets are showing signs of positive momentum, but there is no reason to get overly excited just yet. After all, the gains made today can easily be wiped out in an hour or two of bearish trading. This is especially true for the currencies showing large gains compared to yesterday.

Taking a closer look at the charts, we can see there is only one coin in the top 50 without a green number next to it right now. Overall, that is a positive sign for cryptocurrency as a whole. At the same time, people have to keep in mind these positive changes are a direct result of the Bitcoin price going up slowly. Should Bitcoin drop in value again, these short-term gains for all altcoins will be wiped out pretty quickly.

While it is good to see the Bitcoin price bounce back to above US$2,000, maintaining that position will be quite challenging. There is a lot of negative pressure on the market, which may push the price back to to the US$1,900 range in the coming hours. Such a retrace will effectively prove to be a tough time for any altcoin struggling as of late, including the likes of Ethereum and Dash.

Speaking of those two particular altcoins, Dash has seen its value climb by 13.52% over the past 24 hours. This is despite a trading volume of under US$50m, mind you. Ethereum, on the other hand, notes an 18.02% gain over the past 24 hours, thanks to a trading volume which even surpasses Bitcoins. Many people still hope to see ETH return to US$400, but for now, it is a struggle to remain above US$160.

Seeing the Ethereum trading volume surpass Bitcoins is not entirely surprising. Korea and China are trying to push the ETH price back up, yet their efforts are not wildly successful so far. In fact, the price on Bithumb denominated in US Dollars- is below the ETH/BTC price on Poloniex when converting it to USD. That is somewhat surprising, considering Korean exchanges often depict higher values for cryptocurrencies compared to Western markets.

It is still too early to tell if the cryptocurrency markets are effectively recovering. For all we know, this is just a temporary blip on the radar, which will be nullified before the day is over. It seems plausible to assume Bitcoin will have a tough time remaining above US$2,000 for an extended period of time. The markets remain volatile for quite some time to come, but there is always sunshine beyond the dip. No one needs to panic right now, as things will be alright in the end.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

Continued here:
Are Cryptocurrencies Recovering or is This a Dead cat Bounce? - The Merkle

Cryptocurrency 101: Digital currencies soar in value, but subject to … – The Straits Times

Digital currencies like the bitcoin were once the preserve of programmers, geeks and digitally-savvy traders but they have made it to the mainstream, grabbing headlines for their soaring prices, flash crashes and more.

The numbers around these currencies can be baffling to most of us. Take a Bloomberg report last week about a cryptocurrency trader - who is known only by a string of numbers - whose US$55 million (S$75 million) on paper in the digi-currency ethereum became US$283 million in just over a month, a 413 per cent profit.

Wild swings like this are - and will be - the norm for cryptocurrencies, say experts, so anyone investing in them is in for a rocky ride.

But that in turn will attract risk-takers, so it is best to get a handle on just what this quirky corner of the finance world is all about.

"Cryptocurrency is a form of digital currency that uses cryptography to allow for the peer-to-peer exchange of value, without a third party such as a bank or a remittance company," notes Singapore University of Social Sciences (SUSS) Professor David Lee, whose areas of interest include digital currency and blockchain technology.

ST ILLUSTRATION: JASTER NGUI

He notes that Satoshi Nakamoto - either an actual programmer or a group of them using the name - invented the bitcoin so people can transfer value or currency among peers who do not necessarily trust one another, using a public ledger that is transparent to everyone.

The Financial Times explains: "When people invest in the bitcoin, the money is going into the underlying technology - known as blockchain - not the payment instrument itself."

It refers to the blockchain as "essentially a giant record book of all bitcoin transactions; it is to the bitcoin what the Internet is to e-mail".

And it is described as a decentralised network where every bitcoin transfer is verified, processed and written down, and comes with potential "to make economic interactions cheaper, faster and more secure".

INVESTING IN UNDERLYING TECH

When people invest in the bitcoin, the money is going into the underlying technology - known as blockchain - not the payment instrument itself.

THE FINANCIAL TIMES, saying the blockchain is "essentially a giant record book of all bitcoin transactions".

ASTRONOMICAL RETURNS

To put things into perspective, an investor who had invested just US$1,000 back in 2010 could have cashed out nearly US$51 million today.

MR SACHIN MITTAL, head of telecom, media and technology research at DBS Group Research, on the bitcoin, the most famous, valuable and oldest cryptocurrency.

Mr Sachin Mittal, head of telecom, media and technology research at DBS Group Research, says the bitcoin is the most famous, valuable and oldest cryptocurrency, although there are around 800 others.

Mr Yusho Liu, co-founder of CoinHako, which helps people buy and sell cryptocurrencies, notes that almost 48 per cent of the global cryptocurrency value is held in bitcoin while ethereum holds about 40 per cent of the market share.

Cryptocurrencies have come under the spotlight, with huge gains made by the bitcoin and ethereum, notes Mr Mittal.

The value of the bitcoin shot up about 155 per cent within the first six months of this year. A bitcoin was worth US$2,539 on July 10 this year, compared with five US cents in July 2010. "To put things into perspective, an investor who had invested just US$1,000 back in 2010 could have cashed out nearly US$51 million today," notes Mr Mittal.

Ethereum has risen 2,775 per cent, from US$8.39 to US$241 since the start of this year.

Many argue that the bitcoin and other cryptocurrencies have no intrinsic value and may be a perfect vehicle for forming a bubble, Prof Lee adds.

"To put it into perspective, with a US$40 billion market capitalisation for the bitcoin and US$100 billion for total cryptocurrency, this investible class is minute, compared with US$66.8 trillion for listed equity and US$48.2 trillion for gold."

However, he stresses: "Cryptocurrency is a very complex investment instrument. I would not advise anyone who has no knowledge of cryptocurrency to get involved at all.

"To start off, there are a lot of videos, books and papers written about the subject. One may also join Access - the Singapore Cryptocurrency and Blockchain Industry Association - to attend its talks and programmes to learn about cryptocurrency and the blockchain industry."

Read the original:
Cryptocurrency 101: Digital currencies soar in value, but subject to ... - The Straits Times

Albanian Central Bank Issues Warning to Cryptocurrency Investors – CoinDesk

Albania's central bank calling on potential investors to avoid buying digital currencies, according to a new report.

According to the English-language weekly Tirana Times, the central bank stated that it hasn't issued any licensure to businesses brokering or exchanging digital currencies in Albania.

"As a result, every company that is involved in these operations in the Republic of Albania is not licensed and its activity does not comply with the regulatory and supervisory framework of the Bank of Albania, the bank reportedly said.

It's a missive that largely echoes those issued by other central banks in the past several years. In some of those cases, investors were warned to avoid specific digital currencies, including bitcoin or Onecoin, the latter of which has earned the particular ire of central banks and regulators worldwide.

As with officials at institutions like the Central Bank of Armenia, Albania's central bank suggested that investors avoid buying digital currencies, pointing to more regulated products instead.

"One should orient investments toward financial products and instruments offered by institutions licensed and supervised by the Bank of Albania and the Financial Supervisory Authority, the message stated.

It's unclear at this time which businesses in Albania would be effected should the central bank move to enforce its stance more concretely, though LocalBitcoins lists a handful of traders in cities including Tirana and Elbasan.

Albania map image via Shutterstock

The leader in blockchain news, CoinDesk is an independent media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. Have breaking news or a story tip to send to our journalists? Contact us at [emailprotected].

Follow this link:
Albanian Central Bank Issues Warning to Cryptocurrency Investors - CoinDesk

WikiLeaks reveals CIA tool for SMS spying – BetaNews

The latest addition to WikiLeaks' Vault 7 cache of leaked CIA documents details an app that can be used to intercept SMS messages on Android devices. The HighRise tool can grab messages before sending them on to a CIA-controlled server.

The app itself goes by the name of TideCheck and it serves as an SMS proxy to allow for the interception of messages on a target's phone. The app itself is password protected (with the word "inshallah") to prevent unwanted tinkering. It also seems to serve a dual purpose, acting as a secure communication channel for CIA operatives.

Unlike many of the other CIA tools revealed as part of the Vault 7 leaks, HighRise/TideCheck cannot be installed remotely, and requires physical access to a phone to get it installed and running. The leaked documentation shows that the app only works on Android 4.0 to 4.3, but as the file dates back to late 2013, it's likely that the app was updated for future versions of Google's mobile operating system.

Writing about the SMS tool, WikiLeaks says:

Today WikiLeaks publishes documents from theHighriseproject of the CIA.HighRiseis an Android application designed for mobile devices running Android 4.0 to 4.3. It provides a redirector function for SMS messaging that could be used by a number of IOC tools that use SMS messages for communication between implants and listening posts.HighRiseacts as a SMS proxy that provides greater separation between devices in the field ("targets") and the listening post (LP) by proxying "incoming" and "outgoing" SMS messages to an internet LP.Highriseprovides a communications channel between theHighRisefield operator and the LP with a TLS/SSL secured internet communication.

The documentation for HighRise can be found on the WikiLeaks website.

Image credit: Pakpoom Phummee / Shutterstock

More:
WikiLeaks reveals CIA tool for SMS spying - BetaNews

Asylum hearings begin for deportation-threatened seven who sheltered Edward Snowden in Hong Kong – South China Morning Post

The seven refugees who harboured American whistle-blower Edward Snowden in Hong Kong are attending their first appeal hearings on Monday, as the prospect of detention and deportation looms.

The seven four adults from Sri Lanka and the Philippines, and three stateless children born in the city had their protection claims rejected in May, whereupon they all appealed.

Authorities want me removed from case, lawyer for asylum seekers who helped Snowden claims

The group became well known for having hidden the former US National Security Agency contractor Snowden in their homes for about two weeks in 2013, after he leaked a trove of classified documents revealing the extent of electronic spying by the United States and other governments.

They will attend directions hearings on Monday, preliminary meetings at the Torture Claims Appeal Board, before the actual hearing begins.

Like many asylum seekers in the city, the seven used to report to the Immigration Departments branch office in Ma Tau Kok, Kowloon, every six weeks. But this month, after their protection claims were rejected, they were told their cases had been transferred to Castle Peak Bay Immigration Centre in Tuen Mun, a facility for detainees awaiting repatriation or deportation. Officers told them to report there instead.

Help the refugees who saved me: Snowden hits out at Hong Kong government in damning video

We were told that was a collective decision by immigration, their lawyer, Robert Tibbo, said. No further explanation was offered and the officer did not deny that they could be detained then.

I am concerned because there is no reason to transfer them to the Castle Peak Bay Immigration Centre. They will have to make three times the distance with young children and at a greater cost, he said.

The prospect of reporting at the centre, although there is no official indication they will be detained, alarmed the claimants.

Ajith Pushpakumara, a former soldier from Sri Lanka who was detained for about five months for identity verification in 2006, was visibly shaken by the news.

I am very upset. I cannot sleep or eat I dont know what to do now, he said. I think they will detain me I cannot go back to Sri Lanka.

Hong Kong rejects asylum claims by refugees who sheltered Edward Snowden

Pushpakumara said he feared for the safety of his mother and daughter back home.

There were reports early this year that Sri Lankan police had been in Hong Kong looking for the Sri Lankan refugees who sheltered Snowden, and that their relatives were under pressure back home. Authorities there denied that.

If the Torture Claims Appeal Board rejects their appeal, they can still request a judicial review with the High Court. If such attempts fail, claimants are detained and then deported to their countries of origin.

The director of the Immigration Department holds the discretionary power to order their detention at any moment.

Another of the seven, Vanessa Mae Rodel, from the Philippines, said she was very afraid of being separated from her five-year-old daughter. Rodel was detained in 2010 for almost two months for overstaying a visa before being able to file a protection claim.

Hong Kong does not grant asylum, but the local government is obliged to screen torture and persecution claims. Those whose claims are substantiated are referred to the UN High Commissioner for Refugees for resettlement in another country.

Read the original here:
Asylum hearings begin for deportation-threatened seven who sheltered Edward Snowden in Hong Kong - South China Morning Post