Cryptocurrency in Arab World: Clock is Ticking, But Pace is Slow – Finance Magnates

While cryptocurrency mass adoption in the Middle East may still take a little more time to take place, there are several countries in the region that are truly taking notice.

From the UAE to Saudi Arabia, Bahrain, and Lebanon, some private and public entities are willing to take the risk by embracing the new technologies earlier than the others. However, there are also other countries that decided to crack down on anything involving cryptocurrency.

Discover iFX EXPO Asia 2020 in Macao The Largest Financial B2B Expo

That being said, one of the focal points that should be taken into consideration when analyzing the nascent industry is that adoption in this region is mainly driven from the top down. Government agencies and traditional banks, though historically known as the slowest technology adopters, are the main players diving right into crypto transformation.

The region boasts some of the wealthiest nations in the world, with GDP per capita, ranges from $50,000 to $130,000 in the Gulf states, thanks to large reserves of oil and other lucrative natural resources. However, the spending on the digital economy and its share of Arab countries GDPs is a mere low single-digit. Conventional sectors, such as real estate and stocks, are still monopolizing private investments, spending, and conversations.

So it could be a bit frustrating for crypto enthusiasts to watch the slow pace at which Arab investors are reacting to the crypto phenomenon.

But with such a hype surrounding cryptocurrencies, the virtual asset class may have enticed retail investors, with many utilizing cryptocurrency as a speculative asset to take advantage of price fluctuations.

All in all, the innovation and private investments in the crypto space have been and will remain lagging far behind other regions, including emerging nations, as in fact, they are nowhere. However, regulators, caught up with the much-hyped vision of crypto, have likewise others begun to investigate blockchain and cryptocurrency technology. And while they are expected to continue to push ahead with regulations, this may ultimately wake up the wealthy investors base to the opportunities that the new business offers.

Various countries in the Arab world have emerged as early adopters, and theyre poised to become even more influential in the near future.

Currently, at the frontier of Fintech adoption, Saudi Arabia and the UAE have announced plans to launch a digital currency to serve both countries. Dubbed Aber, it was announced in November on an experimental basis to facilitate financial settlements between the two Middle Eastern nations, which have a combined economy of over $1.2 trillion.

A Global Year in Review: KVB PRIME Expands into Key International MarketsGo to article >>

The government of Dubai has also revealed details of its own digital currency, called emCash, which will be used to pay for government and private services in the city.

Ripple, a US-based crypto payments company, is already working with Saudi and Emeriti banks to legitimize cryptocurrencies further. It has inked partnerships with Saudi Arabias de facto central bank to pilot instant cross-border payments. According to Ripple, more than fifty financial institutions in the Middle East revealed their interest in its solutions that enablecross-border money transactionsin a faster and cheaper way than the current systems allow.

Regardless of the regulatory stance, policymakers in the Middle East are aware that the adoption of the cryptocurrencies appears inevitable. Those going bigger on this track are wary of the combination of the potential benefits and risks, as well as factors that determine policy openness or aversion.

The UAE has already taken steps to regulate the way that blockchain start-ups are raising money initial coin offerings though the nations regulators continue to warn of the many risks involved. The watchdog proposed a fit-for-purpose regulatory framework that effectively recognizesdigital tokens as securities.

Under the guidelines, startups wishing to execute anICOmust approach the SCA to see if it falls under the bodys regulation. Also, market intermediaries and secondary market operators dealing with ICOs must be approved by the regulator. ICO operatorswill have to publish a prospectus, just like a firm would for an IPO on the stock market. And if an ICO has the characteristics of a security, such as giving a person ownership of shares in a company, then the SCA will regulate it.

In addition, Abu Dhabis financial regulator granted approval for Arabian Bourse, which allows the startup to operate a full-fledged crypto-asset exchange and digital custodian in the emirate.

Bahrain is also establishing itself as a blockchain pioneer in the region. Indeed, the smallest Middle Eastern nation isnt too far behind with its numerous initiatives to attract cryptocurrency business. On the one hand, Bahrain Central Bank has approved the crypto-asset exchange Rain Crypto Exchange to go live, post their partnership with global exchange Bittrex. Rain received its node after a two-year regulatory sandbox process under the central banks supervision.

Other countries like Saudi Arabia, Egypt, and Kuwait are also said to have taken notice.Their regulators have drafted different bills allowing central banks to issue rules regulating cryptocurrency activities and blockchain-based finance. The new rules reflect a U-turn from last years crackdown that said that cryptocurrencies are an entirely non-sharia compliant business.

Meanwhile, there has been a lot of debate on the use ofvirtual coins as a legitimate formof currency and investment as Islamic law emphasizes real economic activity based on physical assets and without pure monetary speculation.

All economic activity in Islamic finance must be compliant with Sharia law, which has stringent rules to ensure certainty and immediacy of transactions. Islamic law also prohibits the acceptance of interest or fees for loans of money.

See the rest here:
Cryptocurrency in Arab World: Clock is Ticking, But Pace is Slow - Finance Magnates

Why this scientist is donating $4.2 million in cryptocurrency – Decrypt

Nikolai Mushegian, a computer scientist who specified some of the core mechanics behind the blockchain financial services platform MakerDAO has decided to give 10,000 in MKR, currently worth just over $4.2 million, to his alma mater, Carnegie Mellon, Pennsylvania.

He wants to set up a research program for decentralized apps (dapps), protocols, and game-theoretic mechanisms to fight an industry that has been corrupted by rent-seeking behavior.

In days gone by, Mushegian wrote, research in the web3 space [was]done by players who automatically put their work into the public domain without a second thought...Nobody wanted to deal with lawyers, everyone wanted to build stuff.

He added, There was no threat from the established networks of banks and tech giants because they did not take us seriously.

Is the arrival of big banks into blockchain bad for the industry? Image: Shutterstock.

But this has changed. Major banks like Santander are using blockchain technology. JP Morgan has even created its own digital currency. It is clear that era has passed, he wrote. Some of the patents being filed make a mockery of IP law and are an insult to the developers that built the underlying technologies that enable them. Get ready for a years-long multimillion-dollar battle over whether send crypto over email is patentable.

Mushegian wrote that the fund sponsors graduate and post-graduate students at the university. Carnegie Mellons specialty, wrote Mushegian, is in designing algorithms; critical to the development of the blockchain industry.

In a post on his website, Mushegian wrote that he donated 3,200 MKR ($1,363,584) on New Years Eve, and has informally committed another 6,800 MKR, which hell give to the university in the next one to three years.

Be the first to get Decrypt Members. A new type of account built on blockchain.

Mushegian cites good karma as his motivation, as well as the increasing rent-seeking behavior from some of the big players in this space, and also from existing banks and tech giants.

By creating the fund, Mushegian hopes to fight off rent-seekers and those who are better at filing patents than writing working code. Hes banking on the fact that universities are not easily bullied by corporations, and so are less motivated by bottom lines. But will his donation be enough to battle the will of the banks and their well-funded warchests?

Read more:
Why this scientist is donating $4.2 million in cryptocurrency - Decrypt

South Korea Officials Cause Confusion With Drafting Legislation to Tax Individual Cryptocurrency Profit – Crowdfund Insider

South Korea officials are reportedly causing some confusion with the latest drafted legislation that will tax individual crypto profits. According to Cointelegraph, South Koreas officials stated that under current law, the government cannot impose income taxes on individual profits that are from cryptocurrency transactions.

South Koreas previous Ministry of Strategy and Finance confirmed it will levy taxes on virtual assets through a tax code revision bill, but at a later date. The officials further declared:

In the case of a corporations virtual currency transaction, all transactions that increase the entitys net assets are subject to taxation under the current law, so it is taxable, but it is practically impossible to produce tax revenue results by distinguishing only virtual currency transactions.

The officials also noted that they are preparing measures to impose taxes on virtual currencies by reviewing cases of taxation by major countries, which is consistent with accounting standards, as well as trends, in international discussions of money laundering prevention.

Although the South Korean government it is holding off on imposing taxation on earnings from digital asset trading, legislation is in the works.reportedly does plan to create a bill that will address taxable cryptocurrency transactions by the first half of 2020.

The plans for crypto transaction taxes come just after the National Tax Service (NTS) of South Korea confirmed that it will be withholding taxes worth an estimated 80.3 billion Korean won (appr. $70 million) from digital asset trading platform, Bithumb. As previously reported, Bithumb Holdings largest shareholder, Vidente, which operates Bithumbs Korea division, confirmed the withheld amount and noted that the tax would be imposed on the exchanges overseas clients. The companysstated:

Bithumb Korea is planning to take legal action against the tax claim so the final payment can be adjusted in the future.

The amount of tax to be withheld was determined by taking into account miscellaneous income, meaning irregular revenue sources such as lottery gain

Continued here:
South Korea Officials Cause Confusion With Drafting Legislation to Tax Individual Cryptocurrency Profit - Crowdfund Insider

Bitcoin, a Pyramid Scheme? Pick Up Those Blocks and Ill Tell You – CCN.com

When someone in the mainstream media berates Bitcoin, it often becomes an emotional alarm call for the cryptocurrency news squadron.

Suddenly, all the failed novelists who occupy cryptocurrency news desks spring into action, spewing forth endlessly optimistic and hopeful refutations. With all the sassy pride of Hillary Swanks Freedom Writers, their optimism, while hollow, manages to reassure those on the inside.

But what if one of those outsider mainstream folk we love to demonize so much happened to be right?

Recently in the pages of Yahoo Finance, Chief Economist for Lending Tree, Tendayi Kapfidze called Bitcoin a pyramid scheme.

According to Kapfidze, Bitcoin is a solution in search of a problem, and the only way to get rich off it is to dupe others who come in after you. Kapfidze said:

Its a pyramid scheme, you only make money based on people who enter after you. It has no real utility in the world. Theyve been trying to create a utility for it for ten years now. Its a solution in search of a problem and it still hasnt found a problem to solve.

How can Bitcoin be a pyramid? Didnt you see how it pumped all the way through 2017? It achieved X,XXX% gains in one year! It obviously has utility, right?

Lets be serious: everyone knows why the cryptocurrency market pumped in 2017, and its not because everyone started using Bitcoin. Nor is it because the mythical institutions rode in on horseback to save everyone with their fat fiat injections.

The (small group of) people who pumped the market in 2017 are the same people who sat back and profited from its drop in 2018.

But before you settle on those market pumpers as your enemy of convenience, ask yourself wouldnt you do the same?

Arent you too attempting to buy low, so that you can later sell high? Even the founders of major cryptocurrency projects offloaded hundreds of millions worth of their coins onto naive investors during January 2018s peak.

Bitcoins vocal proponents often fall back on the following argument: Bitcoin, unlike fiat, cant be manipulated by fractional reserve bankers to help fund illegal wars.

But cryptocurrency holders apparently dont see how much they have in common with the bankers and money-lenders.

Bitcoiners scramble to buy their assets early, with the single, sole intention of selling them later for a profit. As landowners, the name of the game is to dump on later generations who are obliged to pay more simply because they arrived later.

Money-lenders accrue money early, then farm it out for profit. Cryptocurrency holders who sell at the top often buy their coins back when the price inevitably dumps again. Thus they keep their coins and the profit.

Back to the Yahoo article, even the pro-crypto voice who was brought in to offer a counter-argument appeared skeptical. Bruderman Asset Management Chief Market Strategist Oliver Pursche compared investing in cryptocurrency to a lottery:

I own five if Im lucky one of them will become an all-star. Pursche added: You go into it very soberly understanding that you can lose all of your principle and that this is purely speculative.

How high will the pyramid grow before people realize the bags theyve been holding are actually limestone and granite blocks?

This article was edited by Samburaj Das.

Read the rest here:
Bitcoin, a Pyramid Scheme? Pick Up Those Blocks and Ill Tell You - CCN.com

Coinbases Brian Armstrong Looks Back at Cryptocurrencys Progress Over the Past Decade – Crowdfund Insider

Following the celebration of the new year/2020s, Coinbases Co-Founder and CEO, Brian Armstrong, revealed his thoughts about cryptocurrencys progress over the past decade. He observed the following:

Its easy to forget, but throughout much of the decade, it was a frequently debated question about whether Bitcoin would even survive. Maybe a flaw would be found in the protocol, maybe it would be outlawed, or maybe it would all go to zero since it had no intrinsic value (of course, we crypto folks were quick to point out that the dollar isnt backed by anything either). There were over 379 articleswritten, prematurely declaring the end of Bitcoin. Not only did Bitcoin survive, it thrived, becoming thetop performing asset of the decade. The naysayers were proved wrong and we learned an important lesson about human nature: most big breakthroughs are contrarian ideas that people dismiss and ridicule at the start.

When I was thinking about starting Coinbase, a few people told me I was crazy to try creating a custodial crypto wallet and exchange. The best hackers in the world were trying to break into crypto exchanges, and MtGox along with many others had suffered breaches. Through a combination of luck and skill, Coinbase managed to weather the barrage of attacks, and created many novel methods of key storage which improved with every passing year. We made cryptocurrency easier to use in the process and introduced tens of millions of new people to this new technology. This allowed us to build a cash flow positive company with 800 employees, weather the ups and downs of the crypto markets, and continue to invest in new products to help the ecosystem grow.

For a new industry, there was a lot of infighting as protocol changes were debated and new coins were launched (via fork, or entirely new projects). Many groups became radicalized and splintered off into their own echo chamber. I believe what made this more vitriolic than other technology debates Ive seen (emacs vs vim, iOS vs Android, etc) is that once people own a particular coin they have an inherent conflict of interest and emotions take over. We stop trying to seek the truth and start talking our own book. On the plus side, having a number of competing groups drove a lot of innovation vs having a monoculture or a one coin monopoly. The race is still very much on to see which blockchains will reach the next 100M or 1B users, and I would expect cryptocurrency to eventually see some consolidation, following a similar path to other industries.

The industry went through a period of five bubbles, followed each time by a crash (settling at a higher point than the previous low). In other words, the industry kept growing in an upward channel, but it was a very bumpy ride. This meant that a lot of the discussion and media attention was on the price of crypto, and the day trading attracted short term thinking that bordered at times on gambling. At the same time, investors who took a long term approach saw incredible returns.

We saw how much latent demand there was for startups to raise money from unaccredited investors when the Initial Coin Offering boom kicked off. All the previous crowd-funding records were obliterated, and now 8 out of the top 10 largest crowdfunding projects of all time are crypto-related. The ICO trend attracted the ire and attention of the SEC, who slowly but surely started making enforcement actions in the space. A debate raged on about which crypto tokens were securities, and which werent. Organizations like theCryptoRatingCouncil (CRC) came out, with industry participation, to start to provide clarity. Finally, as often happens with startups that raise too much money, it can actually harm the company. Many ICO projects failed to ship real-world products while sitting on huge piles of cash (some of them began to resemble investment firms over time, rather than real product companies).

Perhaps with the exceptions of the protocols themselves, the best business models in the past decade in crypto tended to be exchanges and brokerages who sold shovels during the gold rush to trade this new asset class. Some crypto miners had decent outcomes as well, but the volatility of crypto prices made it very difficult for them to survive the whims of the market. A large number of high quality teams and startups entered the space in the past few years, and there is a lot of venture capital money still flowing into crypto startups (our own small fund, Coinbase Ventures, has invested in 60 crypto startups in the last few years, for instance).

One of the challenges holding crypto adoption back (in addition to scalability and usability) was volatility. While volatility is great for investors/speculators, it isnt great for people who want to use it as a medium of exchange. Bitcoin volatility has trended down over time, which is a promising long term trend, but it seems people want stable cryptocurrencies sooner. Stablecoins saw a lot of adoption in the past few years. In part, this allowed the blockchain not bitcoin mindset that is more common amongst banks and governments, to find an outlet, with everyone from JPMorgan to China announcing efforts to launch stablecoins. It also allowed questionable stablecoins like Tether to provide trading pairs on exchanges without fiat rails, and crypto backed stablecoins like Dai to see increased adoption.

Crypto started the decade with purely retail activity amongst hobbyists and early adopters, but by the end of the decade there was a clear trend of institutions starting to come on board. Not necessarily the large traditional institutions, although they all seem to have teams who are exploring it, but hundreds of smaller crypto forward institutions. A couple hundred crypto funds were created (fun fact: the big three, Paradigm, Polychain, and A16Z Crypto, were all founded by former Coinbase employees or board members).

The decade started off with cryptocurrency being totally unregulated. Coinbase was (as far as I know) the first crypto company to really take regulation seriously because we felt it would increase adoption long term. We started applying for money transmitter licenses in the U.S. starting around 2013. From there, we got an eMoney license in Europe, the Bitlicense in NY, registered as an MSB with FinCEN, and started pursuing additional licenses with other agencies. We have interactions with multiple regulators, all over the world, every week at this point, seeking to be an educational resource. At the close of this decade, I can confidently say that that cryptocurrency is a regulated industry (at least in first world countries), although it will continue to evolve rapidly.

Armstrong went on to conclude his observation with a nod towards Coinbases growth and development over the years:

Overall, being in the crypto industry was a hell of a ride in the past decade. There were a number of ups and downs, and it was a very volatile industry to manage through. Im really proud that Coinbase has stayed financially healthy during this period, growing to more than 800 employees, and has helped build the infrastructure to enable the industry to keep growing. Weve continued to focus on trust and ease of use with all of our products, believing this will help bring in the next 100M and then 1B users to cryptocurrency.

The rest is here:
Coinbases Brian Armstrong Looks Back at Cryptocurrencys Progress Over the Past Decade - Crowdfund Insider

We Need to Talk About Apache Camel – Computer Business Review

Add to favorites

You can even run it natively on Kubernetes

The Apache Software Foundation (ASF) oversaw 339 projects in 2019 with a robust community of over 3,000 committers tweaking a huge 59,309,787 lines of code.

The most active project, by commits, was Apache Camel a tool designed to allow enterprise developers to integrate a huge range of applications.

Apache Camel lacks the brand recognition of fellow ASF projects Hadoop, Kafka, or Spark; all widely used by well-known businesses, many of which have build critical components of their architecture on such open source software.

But as businesses seek to integrate more applications e.g. to make combined use of the data they generate Apache Camel is growing more important.

(This is particularly so for those who favour a developer-led DIY approach, rather than using a third-party contractor and paying the license fees for its software.)

Credit: Jessica Arias, Unsplash. Creative Commons.

Among those using Apache Camel are the European Commission (EC)s developers.

With European policy makers forthright in their desire to see more open source toolings put to use across member states, perhaps thats no surprise.

And as one developer at the EC responsible for developing reusable components, and advocating open source software puts it: I personally like the elegance and performance compared with other integration frameworks.

He also touts a lively community (that made 41,164 commits in 2019).

Confluents Kai Whner is also effusive about the project.

In a DZone blog, he notes that [Apache Camel lets you] easily integrate different applications using the required patterns.

You can use Java, Spring XML, Scala or Groovy. Almost every technology you can imagine is available, for example HTTP, FTP, JMS, EJB, JPA, RMI, JMS, JMX, LDAP, Netty, and many, many more (of course most ESBs also offer support for them). Besides, own custom components can be created very easily.

He adds: You can deploy Apache Camel as standalone application, in a web container (e.g. Tomcat or Jetty), in a JEE application Server (e.g. JBoss AS or WebSphere AS), in an OSGi environment or in combination with a Spring container.

Every integration uses the same concepts!

No matter which protocol you use. No matter which technology you use. No matter which domain specific language (DSL) you use it can be Java, Scala, Groovy or Spring XML. You do it the same way. Always! There is a producer, there is a consumer, there are endpoints, there are EIPs, there are custom processors / beans (e.g. for custom transformation) and there are parameters (e.g. for credentials).

Even Mulesoft, which provides a similar offering in the form of its open source Mule ESB acknowledges thatCamels lean framework makes it easy to learn for programmers. Camel also accommodates different Domain Specific Languages (DSLs), allowing programmers to work in whichever language they find most confortable.

Camel also closes the gap between modeling and implementation by adhering to Enterprise Integration Patterns (EIPs) allowing programmers to split integration problems into smaller pieces that are more easily understood.

In 2019 the Apache Camel team added two new projects: Camel K and Camel Quarkus. Camel K essentially takes the toolkit of Camel and runs it natively on Kubernetes, in a version specifically designed for serverless and microservice architectures.

(Users of Camel K can instantly run integration code written in Camel DSL on their preferred cloud, using Kubernetes or OpenShift).

Early this year it plans to add new tools including a Kafka Connector and Camel Spring Boot (moved out from main repository) an open source Java-based framework used to create microservices that was developed by Pivotal.

The European Commission may seem an unlikely trail-blazer, but expect to hear a lot more about Apache Camel in 2020.

Go here to read the rest:
We Need to Talk About Apache Camel - Computer Business Review

2020 vision: Synopsys predictions – Gigabit Magazine – Technology News, Magazine and Website

Happy New Year! To kick off 2020, the leadership team at Synopsys share their predictions for the year to come.

Steve Cohen, Security Services Manager at Synopsys:

Focus: Cloud Security

In 2020, I believe well see the accelerated adoption of finer granular objects to drive efficiencies. As developers adopt these finer granular objects within their cloud applications, such as containers, microservices, micro-segmentation, and the like, security testing tools will need to be object aware in order to identify unique risks and vulnerabilities introduced by utilizing these objects.

I anticipate that new approaches to collecting security related data may become necessary in the cloud. In addition to application logs, cloud API access will be seen as necessary. There will also be a growing focus on centralized logging in the upcoming year.

In addition to application security, the cloud management plane will become an additional security layer that needs addressing in 2020. Developers, for example, will require access to the management plane to deploy applications. Incorrect settings here could expose the application to security risks as sensitive information flows through it.

Reduced transparency around whats going on within a given application will likely be a growing trend. A cloud provider doesnt necessarily tell you what security controls exist for the PaaS services they expose to you. Businesses will therefore need to make some assumptions about their security considerations and stance.

In terms of data security and integrity in the cloud, there will be more of a need to have proper policies in place so prevent improper disclosure, alteration or destruction of user data. Policies must factor in the confidentiality, integrity and availability across multiple system interfaces of user data.

In 2020, the adoption of PaaS and serverless architecture will provide even more of an opportunity to dramatically reduce the attack surface within the cloud.

Tim Mackey, Principal Security Strategist at the Synopsys CyRC (Cybersecurity Research Centre):

Focus: General Cybersecurity

Cyber-attacks on 2020 candidates will become more brazen. While attacks on campaign websites have already occurred in past election cycles, targeted attacks on a candidates digital identity and personal devices will mount.

With digital assistants operating in an always listening mode, an embarrassing live mic recording of a public figure will emerge. This recording may not be associated directly with a device owned by the public figure, but rather with them being a third party to the device. For example, the conversation being captured as background noise.

With the high value of healthcare data to cybercriminals and a need for accurate healthcare data for patient care, a blockchain-based health management system will emerge in the US. Such a system could offer the dual value of protecting patient data from tampering while reducing the potential for fraudulent claims being submitted to insurance providers.

Emile Monette, Director of Value Chain Security at Synopsys:

Focus: General Cybersecurity

In the year to come, I anticipate that well see continued developments in software transparency (e.g., NTIA Software Component Transparency efforts). Additionally, a continued need for software testing throughout the software development life cycle (SDLC) will also persist as a focus in 2020most assuredly a positive step in terms of firms understanding the criticality of proactive security maturity. I also have reason to believe well see increased efforts to secure the hardware supply chain, and specifically efforts to develop secure microelectronic design and fabrication will come into focus in the upcoming yearb

Asma Zubair, Sr. Manager, IAST Product Management at Synopsys:

Focus: Endpoint Security

In 2020, we know that attackers will continue to exploit all applications, end-points, and networks they possibly can. This includes, but isnt limited to, web and mobile apps (internal or external), IoT devices in smart homes, and even the 5G network as it is being rolled out. Attackers will also continue to use the latest and greatest technologies (be it in machine learning, AI, or open source components that are freely available) to carry out ever-more sophisticated attacks at even greater scale. At the same time, organizations will continue to struggle as they try to balance competing priorities: the need to improve security, reduce time to market, and complete projects within budget and time constraints.

SEE ALSO:

As we look to what will change in the year to come, California's SB-327 IoT bill will take effect on Jan 1, 2020 requiring manufacturers to build reasonable security into their connected devices. This is a step in the right direction as it will establish minimum standards and improve security of IoT devices available in the market. I anticipate there will be more legislative activity in 2020, especially in the US. The California Consumer Privacy Act will also take effect on January 1, 2020. I expect more states to follow suit. If done properly, regulations will bring about the accountability needed to improve the overall state of cybersecurity.

We saw several high-profile GDPR-related lawsuits, fines, and settlements in 2019. I wouldnt be at all surprised to see more of these to hit the headlines in the coming year.

Organizations tend to focus a good deal of attention to their end-point protection and network security, and this is indeed very important. But applications, another very critical piece in the overall security puzzle, often dont get as much attention and therefore tend to become a weak link in terms of security. Organizations need to test their applications throughout the development process for security vulnerabilities using methods such as interactive application security testing (IAST), static application security testing (SAST), or dynamic application security testing (DAST). They must also actively work to address the vulnerabilities detected by these testing methods.

Kimm Yeo, Senior Manager at Synopsys:

Focus: Cellular/Wireless

The introduction of wireless broadband communication technologies such as 4G and LTE havent only affected consumer lifestyles. Such technology has also fueled the growth of ride-sharing business models. Although the adoption of LTE has been broad based, with over 600 carriers in 200 countries deployed, and over 3.2 billion subscribers worldwide (as of 2018), the enhanced user experience and convenience hasnt come without a price. Several dozen new security flaws related to LTE have been identified through fuzz testing.

As both cellular and wireless technologies continue to advance to 5G, 6G and beyond, this will not only greatly reduce latency and improve the user experience, it will also open the door to new attack surfaces and attack strategies. Its extremely difficult to anticipate and prevent such malicious advances in the increasingly connected ecosystems and lifestyles in which we all live. However, this is something we should strive to improve upon in the not-so-distant future.

Dennis Kengo Oka, Senior Solution Architect at Synopsys:

Focus: Automotive

There are two major trends emerging. The first is the concept of CASE (connected, autonomous, shared, electric). As technologies such as 5G lead to increased connectivity alongside advances in proprietary and open source software (e.g., Automotive Grade Linux), well see targets move beyond the vehicle. Malicious actors will leverage new, evolving attack vectors in backend systems, mobile apps, infrastructure and services relating to automotive technologies.

The second major trend well see in 2020 is that of standardization and regulations such as ISO/SAE 21434 and UNECE WP.29 driving cybersecurity activities in the automotive industry. This will lead to changes in organizational teams and processes, including the addition of security gates such as static code analysis, open source risk management, fuzz testing, and penetration testing to implement security throughout the entire vehicle life cycle. An increased focus on automated test processes and toolchains will continue to emerge as well in the year to come.

Go here to read the rest:
2020 vision: Synopsys predictions - Gigabit Magazine - Technology News, Magazine and Website

Recruiting Developers: the importance of finding the right people – Techerati

Taking the time to make the right hires and carefully thinking through your recruiting strategy is one of the best investments your business will ever make

Just about every business today relies on people who write code. The problem is that hiring good developers is difficult. It may even be the most difficult thing a business will do.

The reason developer hiring is such an important topic (and something many businesses find challenging) is that unlike many other professions, good developers can be many times more productive than their peers.

If you are hiring a driver to get you from A to B, regardless of how fast the driver you hire is, the difference between a high-performing driver and any other driver will be fairly minimal: they will both get you from A to B within a reasonable amount of time. It is essentially impossible for a driver to get you from A to B 10 times or 100 times quicker than another driver.

But this is not true in the technology industry. A great developer may be many times more productive than other developers, and a poor developer may actually remove value from your organisation. In short, hiring developers is a high-stakes game because the productivity multiple between one developer and another may be significant and business-altering.

There are only two ways to reach developers: in-person and online. Regardless of your tactics, if you want to recruit good people you need to get their attention, and without question, the best way to do this is to be an active participant in the developer community.

For in-person recruiting, this might involve giving technical talks at programming conferences, hosting developer dinners, and participating in developer events, such as hackathons or community meetups.

If youre able to, having your existing technical talent present on new methods and tools they are using at programming events can be a great way to connect with like-minded developers working on similar problems, make friends, and build a reputation for both your business and your employees.

Similarly, hosting a relaxed dinner where you invite some of your top developers as well as other respected developers in your area can be a great way to make authentic connections and explore opportunities. I have met some truly great people hosting these types of intimate events. Supporting these activities by giving your existing developers time and resources so they can attend these types of events is an authentic and effective way to recruit great people to your business.

But as much as I love in-person developer events, it would be remiss to not mention more scalable, online ways to attract great developers.

Some of the most effective ways Ive found to recruit great developers online is to publish technical articles and videos, answer questions on topics related to your business on popular developer sites like StackOverflow, and build and share open source software that other developers can use to solve problems.

Giving your top people time to share some of the interesting technical things they have learned on a company blog and YouTube channel can be incredibly effective. It can get the attention of developers working on similar problems, build developer awareness of your company and attract thousands of developers to your site over a number of years

While it can be a lot of work, allowing your technical teams to publish some of the software they create as open source solutions can be very effective too. Not only will open sourcing some of the projects your teams work on attract external developers to your company, it often makes your engineering team work more effectively by forcing them to build reusable solutions to common problems.

These strategies will help you reach the right people, but after you have reached them, it is still up to you to win them over. That means understanding fair market rates, developer culture, and engineering management. If you can foster an environment in which great developers want to work, you will have a much easier time getting great people to join your company.

One common misconception I have heard from business owners is that if you hire great developers they will perform well. This is not true. All developers can perform well under certain conditions, but it is up to you to design a hiring process that ensures the developers you hire will flourish based on your engineering culture, management, company values and technology needs.

When you are designing a developer hiring process the first thing you need to know is that testing developers and finding a great fit is tricky. There is no perfect way to do it and you will never be able to guarantee you always hire the right people.

With that said, here are the things that I have found work well in a developer hiring process.

Ask developers in-depth questions about projects they have worked (or are working) on. Avoid just asking them what they are doing currently, instead have them explain it to you in great depth. Ask them why they are doing things certain ways and how they might change things. Probe at a deeper level and you can gain a deeper understanding of how they think and what their realm of expertise is.

It is important to ask a candidate what their favourite project has been. I often have them walk me through it what they liked about it, and what they disliked. This is a great way to figure out not only what the candidate knows, but also the types of projects they enjoy working on.

Instead of coding-puzzles, give candidates a take-home project. Not only are coding-puzzles a poor reflection of what candidates will actually be doing on the job, they also incentivise poor behaviour. Instead of making the interview process about a candidates experience and depth of knowledge, coding-puzzle-style technical quizzes end up merely testing the candidate on how well they have memorised a series of common math problems, which is almost certainly what you do not want to test for.

Instead of forcing a candidate to solve problems on a whiteboard, consider giving them a take-home project. What I like to do is ask candidates to build a very small application (which they should spend no more than four hours on); something similar to what they would be working on if they get the job. This way, the candidate has a chance to think through what they are working on without the performance pressure of an interview and can show you how they perform in a real-world scenario.

An added benefit of the take-home project is that if the candidate does come in for an onsite, you will have plenty to talk about using the take-home assignment as a basis for conversation. I like to ask candidates what they liked and disliked about the assignment and use those questions as a starting point to dive deeper into the technology choices and strategies they used.

Making sure every developer you hire understands your business challenges and how things can be improved is critical. Bringing on developers who will just take orders is a recipe for disaster, as your business will be unable to innovate effectively with this mindset. It is vital that the strongest members of your team have the same vision for fixing issues and pushing for change that you do.

When this is all done successfully, developers will be one of the strongest growth factors for your business. Taking the time to make the right hires and carefully thinking through your recruiting strategy is one of the best investments your business will ever make.

Read more here:
Recruiting Developers: the importance of finding the right people - Techerati

Assistive Technolgy Switch Is Actuated Using Your Ear Muscles – Hackaday

Assistive technology is extremely fertile ground for hackers to make a difference, because of the unique requirements of each user and the high costs of commercial solutions. [Nick] has been working on Earswitch, an innovative assistive tech switch that can be actuated using voluntary movement of the middle ear muscle.

Most people dont know they can contract their middle ear muscle, technically called the tensor tympani, but will recognise it as a rumbling sound or muffling effect of your hearing when yawning or tightly closing eyes. Its function is actually to protect your hearing from loud sounds screaming or chewing. [Nick] ran a survey and found that 75% can consciously contract the tensor tympani and 17% of can do it in isolation from other movements. Using a cheap USB auroscope (an ear camera like the one [Jenny] reviewed in November), he was able to detect the movement using iSpy, an open source software package meant for video surveillance. The output from iSpy is used to control Grid3, a commercial assistive technology software package. [Nick] also envisions the technology being used as a control interface for consumer electronics via earphones.

With the proof of concept done, [Nick] is looking at ways to make the tech more practical to actually use, possibly with a CMOS camera module inside a standard noise canceling headphones. Simpler optical sensors like reflectance or time-of-flight are also options being investigated. If you have suggestions for or possible use case, drop by on the project page.

Assistive tech always makes for interesting hacks. We recently saw a robotic arm that helps people feed themselves, and the 2017 Hackaday Prize has an entire stage that was focused on assistive technology.

Continued here:
Assistive Technolgy Switch Is Actuated Using Your Ear Muscles - Hackaday

China To Enforce First-ever Cryptography Law As It Kicks-off Its First Digital Currency – The Coin Republic

Steve Anderrson Thursday, 02 January 2020, 01:28 EST Modified date: Thursday, 02 January 2020, 02:23 EST

Reports from the Reference News Network has now stated that the cryptography law passed in October 2019 will now go into full effect starting the 1st January 2020. The legislation divided passwords into core passwords, ordinary passwords, and commercial passwords.

The law allows the Chinese government to hold full management over the core and regular passwords while it has promised to help nurture the industry to manage commercial passwords. Although the law doesnt directly mention cryptography, passwords are at the core of protecting data within a blockchain network.

Blockchain technology based on a decentralized, transparent, ledger system that takes data and distributes them into blocks, each protected by its hash. The hash is a very complex cryptographic password that helps maintain the integrity of the block. This powerful cryptographic encryption and transparency of the ledger are why blockchain technology is profoundly revolutionary and influential.

This is part of an aggressive push from the Chinese government on the adoption of blockchain technology over the past couple of months. This is a significant move to improve on the core technology behind the blockchain network to facilitate Chinas digital currency. The digital RNB that will be launched by the Peoples Bank of China will be the first digital currency form ever in a major country.

The issuance of a digital RNB will be most likely using the blockchain network, and it aims to strengthen the financial economy of the country while holding strict supervision of funds. It would also help reduce the load on financial institutions in the regulation of currency.

It as also reported that Chinese leaders have also made a policy that makes a strong argument for the acceleration of blockchain-based technology. This crypto law passed is a first step in improving the blockchain technology that will likely be backing the digital RMB. The bill also demands the Chinese government will hold authority over the designation of national and industry cryptographic standards.

Reports suggest that the Chinese government will also keep oversight over overseas remittances and production lines, from raw materials to manufacturing on the assembly line and circulation to make sure none of the records tampers.

This move has also seen with some criticism from Facebook CEO, Mark Zuckerberg who is also planning on releasing the Libra stablecoin, purportedly sometime during 2020. He argued that allowing Chinese superiority in the cryptocurrency space could prove disastrous for the value of the US dollar and that it could quickly lose its leading position in the currency space if it doesnt innovate.

Read this article:
China To Enforce First-ever Cryptography Law As It Kicks-off Its First Digital Currency - The Coin Republic