« First...102030...713714715716717...720730740...Last »

Impact Of COVID-19 On Quantum Computing Market 2020 Industry Challenges, Business Overview And Forecast Research Study 2026 – The Daily Chronicle

Posted on by

The study of Quantum Computing market is a compilation of the market of Quantum Computing broken down into its entirety on the basis of types, application, trends and opportunities, mergers and acquisitions, drivers and restraints, and a global outreach.

Based on the Quantum Computing industrial chain, this report mainly elaborates the definition, types, applications and major players of Quantum Computing market in details. Deep analysis about market status (2014-2019), enterprise competition pattern, advantages and disadvantages of enterprise products, industry development trends (2019-2024), regional industrial layout characteristics and macroeconomic policies, industrial policy has also be included. From raw materials to downstream buyers of this industry will be analyzed scientifically, the feature of product circulation and sales channel will be presented as well. In a word, this report will help you to establish a panorama of industrial development and characteristics of the Quantum Computing market., The Quantum Computing market can be split based on product types, major applications, and important regions.

Download PDF Sample of Quantum Computing Market report @ https://www.arcognizance.com/enquiry-sample/739795

Major Players in Quantum Computing market are:, Intel Corporation, QxBranch, LLC, Hewlett Packard Enterprise (HP), Toshiba Corporation, Magiq Technologies Inc., Cambridge Quantum Computing Ltd, Google Inc., Accenture, University Landscape, Nippon Telegraph And Telephone Corporation (NTT), Rigetti Computing, Evolutionq Inc, D-Wave Systems Inc., 1QB Information Technologies Inc., Fujitsu, Quantum Circuits, Inc, QC Ware Corp., Station Q Microsoft Corporation, Hitachi Ltd, International Business Machines Corporation (IBM), Northrop Grumman Corporation

Major Regions that plays a vital role in Quantum Computing market are:, North America, Europe, China, Japan, Middle East & Africa, India, South America, Others

The global Quantum Computing market report is a comprehensive research that focuses on the overall consumption structure, development trends, sales models and sales of top countries in the global Quantum Computing market. The report focuses on well-known providers in the global Quantum Computing industry, market segments, competition, and the macro environment.

A holistic study of the Quantum Computing market is made by considering a variety of factors, from demographics conditions and business cycles in a particular country to market-specific microeconomic impacts. Quantum Computing industry study found the shift in market paradigms in terms of regional competitive advantage and the competitive landscape of major players.

Brief about Quantum Computing Market Report with [emailprotected]https://arcognizance.com/report/global-quantum-computing-industry-market-research-report

Most important types of Quantum Computing products covered in this report are:, Simulation, Optimization, Machine Learning

Most widely used downstream fields of Quantum Computing market covered in this report are:, Aerospace & Defence, IT and Telecommunication, Healthcare, Government, BFSI, Transportation, Others

There are 13 Chapters to thoroughly display the Quantum Computing market. This report included the analysis of market overview, market characteristics, industry chain, competition landscape, historical and future data by types, applications and regions.

Chapter 1: Quantum Computing Market Overview, Product Overview, Market Segmentation, Market Overview of Regions, Market Dynamics, Limitations, Opportunities and Industry News and Policies.

Chapter 2: Quantum Computing Industry Chain Analysis, Upstream Raw Material Suppliers, Major Players, Production Process Analysis, Cost Analysis, Market Channels and Major Downstream Buyers.

Chapter 3: Value Analysis, Production, Growth Rate and Price Analysis by Type of Quantum Computing.

Chapter 4: Downstream Characteristics, Consumption and Market Share by Application of Quantum Computing.

Chapter 5: Production Volume, Price, Gross Margin, and Revenue ($) of Quantum Computing by Regions (2014-2019).

Chapter 6: Quantum Computing Production, Consumption, Export and Import by Regions (2014-2019).

Chapter 7: Quantum Computing Market Status and SWOT Analysis by Regions.

Chapter 8: Competitive Landscape, Product Introduction, Company Profiles, Market Distribution Status by Players of Quantum Computing.

Chapter 9: Quantum Computing Market Analysis and Forecast by Type and Application (2019-2024).

Chapter 10: Market Analysis and Forecast by Regions (2019-2024).

Chapter 11: Industry Characteristics, Key Factors, New Entrants SWOT Analysis, Investment Feasibility Analysis.

Chapter 12: Market Conclusion of the Whole Report.

Chapter 13: Appendix Such as Methodology and Data Resources of This Research.

Some Point of Table of Content:

Chapter One: Quantum Computing Introduction and Market Overview

Chapter Two: Industry Chain Analysis

Chapter Three: Global Quantum Computing Market, by Type

Chapter Four: Quantum Computing Market, by Application

Chapter Five: Global Quantum Computing Production, Value ($) by Region (2014-2019)

Chapter Six: Global Quantum Computing Production, Consumption, Export, Import by Regions (2014-2019)

Chapter Seven: Global Quantum Computing Market Status and SWOT Analysis by Regions

Chapter Eight: Competitive Landscape

Chapter Nine: Global Quantum Computing Market Analysis and Forecast by Type and Application

Chapter Ten: Quantum Computing Market Analysis and Forecast by Region

Chapter Eleven: New Project Feasibility Analysis

Chapter Twelve: Research Finding and Conclusion

Chapter Thirteen: Appendix continued

List of tablesList of Tables and Figures Figure Product Picture of Quantum ComputingTable Product Specification of Quantum ComputingFigure Market Concentration Ratio and Market Maturity Analysis of Quantum ComputingFigure Global Quantum Computing Value ($) and Growth Rate from 2014-2024Table Different Types of Quantum ComputingFigure Global Quantum Computing Value ($) Segment by Type from 2014-2019Figure Simulation PictureFigure Optimization PictureFigure Machine Learning PictureTable Different Applications of Quantum ComputingFigure Global Quantum Computing Value ($) Segment by Applications from 2014-2019Figure Aerospace & Defence PictureFigure IT and Telecommunication PictureFigure Healthcare PictureFigure Government PictureFigure BFSI PictureFigure Transportation PictureFigure Others PictureTable Research Regions of Quantum ComputingFigure North America Quantum Computing Production Value ($) and Growth Rate (2014-2019)Figure Europe Quantum Computing Production Value ($) and Growth Rate (2014-2019)Table China Quantum Computing Production Value ($) and Growth Rate (2014-2019)Table Japan Quantum Computing Production Value ($) and Growth Rate (2014-2019)continued

If you have any special requirements, please let us know and we will offer you the report as you want.

About Us:Analytical Research Cognizance (ARC)is a trusted hub for research reports that critically renders accurate and statistical data for your business growth. Our extensive database of examined market reports places us amongst the best industry report firms. Our professionally equipped team further strengthens ARCs potential.ARC works with the mission of creating a platform where marketers can have access to informative, latest and well researched reports. To achieve this aim our experts tactically scrutinize every report that comes under their eye.

Contact Us:Ranjeet DengaleDirector SalesAnalytical Research Cognizance+1 (646) 403-4695, +91 90967 44448Email: [emailprotected]

NOTE: Our report does take into account the impact of coronavirus pandemic and dedicates qualitative as well as quantitative sections of information within the report that emphasizes the impact of COVID-19.

As this pandemic is ongoing and leading to dynamic shifts in stocks and businesses worldwide, we take into account the current condition and forecast the market data taking into consideration the micro and macroeconomic factors that will be affected by the pandemic.

See the article here:
Impact Of COVID-19 On Quantum Computing Market 2020 Industry Challenges, Business Overview And Forecast Research Study 2026 - The Daily Chronicle

Nature through the looking glass | symmetry magazine – Symmetry magazine

Posted on by

Our right and left hands are reflections of one another, but they are not equal. To hide one hand perfectly behind the other, we must face our palms in opposite directions.

In physics, the concept of handedness (or chirality) works similarly: It is a property of objects that are not dynamically equivalent to their mirror images. An object that can coincide with its mirror-image twin in every coordinate, such as a dumbbell or a spoon, is not chiral.

Because our hands are chiral, they do not interact with other objects and space in the exact same way. In nature, you will find this property in things like proteins, spiral galaxies and most elementary particles.

These different-handed object pairs reveal some puzzling asymmetries in the way our universe works. For example, the weak forcethe force responsible for nuclear decay has an effect only on particles that are left-handed. Also, life itselfevery plant and creature we knowis built almost exclusively with right-handed sugars and left-handed amino acids.

If you have anything with a dual principle, it can be related to chirality, says Penlope Rodrguez, a postdoctoral researcher at the Physics Institute of the National Autonomous University of Mexico. This is not exclusive to biology, chemistry or physics. Chirality is of the universe.

Chirality was discovered in 1848 by biomedical scientist Louis Pasteur. He noticed that right-handed and left-handed crystals formed when racemic acid dried out.

He separated them, one by one, into two samples, and dissolved them again. Although both were chemically identical, one sample consistently rotated polarized light clockwise, while the other did it counterclockwise.

Pasteur referred to chirality as dissymmetry at the time, and he speculated that this phenomenonconsistently found in organic compoundswas a prerequisite for the handed chemistry of life. He was right.

In 1904, scientist Lord Kelvin introduced the word chirality into chemistry, borrowing it from the Greek kher, or hand.

Chirality is an intrinsic property of nature, says Riina Aav, Professor at Tallinn University of Technology in Estonia. Molecules in our bodily receptors are chiral. This means that our organism reacts selectively to the spatial configuration of molecules it interacts with.

Understanding the difference between right-chiral and left-chiral objects is important for many scientific applications. Scientists use the property of chirality to produce safer pharmaceuticals, build biocompatible metallic nanomaterials, and send binary messages in quantum computing (a field called spintronics).

Physicists often talk about three mirror symmetries in nature: charge (which can be positive or negative), time (which can go forward or backward) and parity (which can be right- or left-handed).

Gravity, electromagnetism and the strong nuclear force are ambidextrous, treating particles equally regardless of their handedness. But, as physicist Chien-Shiung Wu experimentally proved in 1956, the weak nuclear force plays favorites.

For a completely unknown reason, the weak nuclear force only interacts with left-handed particles, says Marco Drewes, a professor at Catholic University of Louvain in Belgium. Why that might be is one of the big questions in physics.

Research groups are exploring the idea that such an asymmetry could have influenced the origin of the preferred handedness in biomolecules observed by Pasteur. There is a symmetry breaking that gives birth to a molecular arrangement, which eventually evolves until it forms DNA, right-handed sugars and left-handed amino acids, Rodrguez says.

From an evolutionary perspective, this would mean that chirality is a useful feature for living organisms, making it easier for proteins and nucleic acids to self-replicate due to the preferred handedness of their constituent biomolecules.

Every time an elementary particle is detected, an intrinsic property called its spin must be in one of two possible states. The spin of a right-chiral particle points along the particles direction of motion, while the spin of a left-chiral particle points opposite to the particles direction of motion.

A chiral twin has been found for every matter and antimatter particle in the Standard Modelwith the exception of neutrinos. Researchers have only ever observed left-handed neutrinos and right-handed antineutrinos. If no right-handed neutrinos exist, the fact that neutrinos have mass could indicate that they function as their own antiparticles. It could also mean that neutrinos get their mass in a different way from the other particles.

Maybe the neutrino masses come from a special Higgs boson that only talks to neutrinos, says, Andr de Gouva, a professor at Northwestern University. There are many other kinds of possible answers, but they all indicate that there are other particles out there.

The difference between left- and right-handed could have influenced another broken symmetry: the current predominance of matter over antimatter in our universe.

Right-handed neutrinos could be responsible for the fact that there is matter in the universe at all, Drewes says. It could be that they prefer to decay into matter over antimatter.

According to de Gouva, the main lesson that chirality teaches scientists is that we should always be prepared to be surprised. The big question is whether asymmetry is a property of our universe, or a property of the laws of nature, he says. We should always be willing to admit that our best ideas are wrong; nature does not do what we think is best.

See the article here:
Nature through the looking glass | symmetry magazine - Symmetry magazine

OSFI’s Consultation on Technology: Understanding the risks inherent in the technologies that power the financial industry – Lexology

Posted on by

INTRODUCTION

On September 15, 2020, the Office of the Superintendent of Financial Institutions (OSFI) released a discussion paper regarding technology risks in the financial sector. The paper, Developing financial sector resilience in a digital world: Selected themes in technology and related risks, focuses on digital risks arising from cybersecurity, data analytics, third party ecosystems and data. Today, technology and data are central to the operations of federally regulated entities (FREs). In the paper, OSFI focuses on some of them including quantum computing, artificial intelligence, cloud computing, and data. OSFI poses questions in areas that it wishes to investigate further, potentially signaling OSFIs interest in collaborating with stakeholders to develop guidance that balances the safety and soundness of the Canadian financial sector against the needs of the sector to innovate.

The paper is something that should not be taken lightly or ignored. OSFI has requested stakeholder comments on the paper by December 15, 2020. These comments will likely form the basis for further consultations before OSFI tables any firm proposals. Any new guidance from OSFI purporting to regulate technology and related risks could therefore have wide ranging impacts on the financial sector, including in connection with the following:

Financial institutions have long been seen to be powered-by and dependent on a vast array of digital technologies. The ability of financial institutions to reliably deliver critical products and services during the COVID-19 pandemic is but one recent example of how financial institutions are successfully harnessing the power of digital technologies to deliver flexible, reliable and powerful products and services. With that said, this increasing reliance on digital technologies could trigger or amplify operational and financial risks to financial institutions. OSFI indicates that it is assessing the merits of a focus on operational resilience objectives with respect to technology and related risks and believes that a holistic view of operational risk management and operational resilience is warranted.

This consultation is a continuation of earlier work by OSFI to identify and mitigate risks presented from digital technologies, including:

PRIORITY TECHNOLOGY RISK AREAS IDENTIFIED BY OSFI

The discussion paper focuses on principles related to three priority areas: cyber security, advanced analytics and third party ecosystems. As data is foundational to each of these areas, the discussion paper also includes a separate discussion on data risk. OSFI intends on using these principles as a basis for building out more specific regulatory expectations in these areas going forward.

Cyber Security

The cyber security principle focuses on the confidentiality, integrity and availability of information. This builds on the existing work from OSFI related to cyber security, including the 2013 Cyber Security Self-Assessment Guidance, the 2019 advisory regarding cyber incident reporting and the ongoing circulation of Intelligence Bulletins and Technology Risk Bulletins that are intended to complement OSFIs guidelines and advisories. OSFI notes that it continues to observe gaps in many financial institutions cyber security policies, procedures and capabilities and many opportunities exist for improvement.

As part of this principle, OSFI flags two specific points of focus:

Advanced Analytics

OSFI notes that advanced analytics, and in particular the use of artificial intelligence (AI) and machine learning (ML) models, present a novel set of opportunities and risks. OSFI intends on using the stakeholder feedback received from this discussion paper to inform the development of regulatory and supervisory frameworks that address the risks resulting from the use of AI and ML. OSFI has identified soundness, explainability and accountability as being core principles to manage elevated risks associated with advanced analytics, including AI and ML. Through the consultation, OSFI seeks feedback on whether these three principles appropriately capture such elevated risks or whether there are any additional principles or risks that should be considered.

Third Party Ecosystems

OSFI has long sought to manage the risks presented by reliance by financial institutions on third party ecosystems, most notably though Guideline B-10. OSFI notes that while the existing principles in Guideline B-10 remain relevant, those guidelines and expectations require review. Areas of specific interest that are noted include:

OSFI will be undertaking a separate consultation process related to the expectations contained in Guideline B-10 which will be informed by the findings of this consultation.

Data

The overarching concept of data is the final area covered by the discussion paper, and in particular how to maintain sound data management and governance throughout the data lifecycle. The areas of focus highlighted are:

See the original post here:
OSFI's Consultation on Technology: Understanding the risks inherent in the technologies that power the financial industry - Lexology

IBM, HP Partner with HBCUs to Drive Diversity and Inclusion – ChannelE2E

Posted on by

by Sharon Florentine Sep 20, 2020

IBM and HP each have announced expanded partnerships withHistorically Black Colleges and Universities (HBCUs) to drive a more diverse and inclusive tech workforce.

The IBM Quantum education and research initiative is led by Howard University (pictured above) and includes 12 additional HBCUs. The initiative will offer access to IBMs quantum computers and enable collaboration with academic, education and community outreach programs, according to a statement from IBM.

IBM also will make a $100 million investment in technology, assets, resources and skills development by partnering with HCBUs through the IBM Skills Academy Academic Initiative, the company said in the statement.

Dario Gil, director of research, IBM

The IBM-HBCU Quantum Center is a multi-year investment designed to prepare and develop talent at HBCUs from all STEM disciplines for the quantum future, IBM said in the statement. It will focus on developing students through support and funding for research opportunities, curriculum development, workforce advocacy and special projects focusing on quantum computing, according to the statement.

Diversity is a source of competitive advantage, essential to create a thriving quantum industry, saidDario Gil, director of IBM Research. We could not be more excited about partnering with our HBCU colleagues to help educate and empower the first generation of quantum computing native students and researchers.

Lesley Slaton Brown, chief diversity officer, HP

Meanwhile, HP announced its latest HBCU Business Challenge, designed to engage Black students interested in pursuing careers in business and technology, according to a statement from HP.

Participants in HPs fourth annual HBCU Business Challenge will tackle critical business problems, gain real-world, on-the-job experience and identify potential career paths and job opportunities while expanding their professional networks, HP said in the statement.

In March 2020, HP piloted a new learning program in partnership with North Carolina A&T State University that provided HP MultiJet Fusion 3D printing equipment and a commitment to provide HBCU students with internships and apprenticeships to the universitys College of Engineering and College of Science and Technology, HP said in the statement. HP believes the pilot program will serve as a model for future similar programs with other HBCUs, according to the statement.

The HBCU Business Challenge is an integral part of our holistic partnership with the HBCUs and it embodies our commitment to provide talent with access, knowledge and opportunity. At HP, our long-term goal is to reinvent the standard for diversity, inclusion and belonging and this begins with paving the way for more Black talent to pursue careers in the tech industry, said Lesley Slaton Brown, chief diversity officer at HP.

ChannelE2E closely follows tech vendor and channel partner companies efforts to create a more equitable technology industry. You can find our coverage and news here.

See original here:
IBM, HP Partner with HBCUs to Drive Diversity and Inclusion - ChannelE2E

U.S. continues on economic road to recovery under Trump – Boston Herald

Posted on by

In less than two months, Americans will choose a president for the next four years. If your vote is based on which candidate can rebuild our economy, the choice is clear.

Our economy is roaring back from the depths of the pandemic, because President Trumps pro-growth economic agenda over the last four years laid the groundwork.

On Sept. 4, the Department of Labor announced that 1.4 million jobs were created since April. The national unemployment rate fell to 8.4%, a 6.3% improvement during that period. These results exceeded the expectations of economists and even the most bullish Wall Street analysts. Reflecting confidence in the economys recovery, the stock markets have traded at record highs since the nationwide economic closures that began in March.

Under Trump, the Republican Senate and then Republican-controlled House passed the most comprehensive tax cuts and tax reform legislation in a generation. The Tax Cuts and Jobs Act of 2017 reduced taxes for businesses from 35% to 21%. It also provided valuable incentives for manufacturers and small businesses including restaurants to hire more employees and allowed business owners to write off any investment in new equipment and tools for their businesses.

One of the presidents earliest directives was tomandatethat for every one new regulation, two old regulations must be eliminated. InTrumpianstyle,the presidents teamactuallyexceededhis own initialdirectiveand eliminated 22 regulations for every new regulation issued. According to the Council of Economic Advisers, Trump deregulation has reduced regulatory burden on our economy by nearly $50 billion and helped American families save at least$3,100 each year.

Since the pandemic struck, the presidents economic leadership has also been bold and decisive. For example the Pledge to Americas Workers and the White House Initiative on Industries of the Future are centered on jumpstarting high-tech job training and bolstering American dominance in transformational industries such as 5G wireless broadband, quantum computing and artificial intelligence. These are the sectors that will determine long-term American leadership of the global economy.

But as our nation continuesthe transition from pandemic tosustained economic recovery,the contrast between Trumpsoptimistic andpro-worker jobs agendaandformer vice president Joe Bidensembrace ofindefinitequarantine and economic closure is clear.During the Democratic presidential primary,Biden, who wastrailing inenthusiasmamongDemocraticactivists,raced to embrace theGreen New DealchampionedbyRep. AlexandriaOcasio-Cortezof New York.

Included in the Green New Deal is a fracking ban that would eliminate hundreds of thousands of energy, manufacturing and construction jobs in Pennsylvania, Ohio and other states. Biden wont even renounce the Green New Deals mandate to eliminate U.S. commercial airlines within a decade. This would further devastate already suffering high-skilled union jobs in the aviation, aerospace manufacturing and hospitality sectors. According to recent studies, the demise of American aviation alone would cost us 1.6 million jobs and a 1% decline in our gross domestic product.

At the end of the day, actions speak louder than words.Progressives and media naysayersscoffed at the Trump administrations vision for economic growthduring the darkest days of the pandemic. Despite the doomsday projections of sustained economic depression, Trumps economicplatformoftax cuts, deregulation and limited government have been rocket fuel for Americas coronavirusrecovery.

On the flip side, the former vice president would undermine our economy and put American workers back on the ropes.

Joseph Lai served as White House special assistant for legislative affairs from 2017 to 2019.

Read more here:
U.S. continues on economic road to recovery under Trump - Boston Herald

Why there is no speed limit in the superfluid universe – Newswise

Posted on by

Newswise Physicists from Lancaster University have established why objects moving through superfluid helium-3 lack a speed limit in a continuation of earlier Lancaster research.

Helium-3 is a rare isotope of helium, in which one neutron is missing. It becomes superfluid at extremely low temperatures, enabling unusual properties such as a lack of friction for moving objects.

It was thought that the speed of objects moving through superfluid helium-3 was fundamentally limited to the critical Landau velocity, and that exceeding this speed limit would destroy the superfluid. Prior experiments in Lancaster have found that it is not a strict rule and objects can move at much greater speeds without destroying the fragile superfluid state.

Now scientists from Lancaster University have found the reason for the absence of the speed limit: exotic particles that stick to all surfaces in the superfluid.

The discovery may guide applications in quantum technology, even quantum computing, where multiple research groups already aim to make use of these unusual particles.

To shake the bound particles into sight, the researchers cooled superfluid helium-3 to within one ten thousandth of a degree from absolute zero (0.0001K or -273.15C). They then moved a wire through the superfluid at a high speed, and measured how much force was needed to move the wire. Apart from an extremely small force related to moving the bound particles around when the wire starts to move, the measured force was zero.

Lead author Dr Samuli Autti said: "Superfluid helium-3 feels like vacuum to a rod moving through it, although it is a relatively dense liquid. There is no resistance, none at all. I find this very intriguing."

PhD student Ash Jennings added: "By making the rod change its direction of motion we were able to conclude that the rod will be hidden from the superfluid by the bound particles covering it, even when its speed is very high." "The bound particles initially need to move around to achieve this, and that exerts a tiny force on the rod, but once this is done, the force just completely disappears", said Dr Dmitry Zmeev, who supervised the project.

###

The Lancaster researchers included Samuli Autti, Sean Ahlstrom, Richard Haley, Ash Jennings, George Pickett, Malcolm Poole, Roch Schanen, Viktor Tsepelin, Jakub Vonka, Tom Wilcox, Andrew Woods and Dmitry Zmeev. The results are published inNature Communications.

View post:
Why there is no speed limit in the superfluid universe - Newswise

Hash, Salt and Pepper: How cooking your password makes it safer – Gearbrain

Posted on by

Data breaches are a nearly daily occurrence, with passwords and other personal data captured by hackers from the companies where you shop, eat and bank. Often, though, the password you diligently remember when you order groceries for the week, has been stored in a way that protects you fairly well. That process is called hashing, with a second step, called salting, and a third called peppering. All three can be used together often they're not but even one step one can help to lock down your special word, phrase or string of characters even more.

Here are the differences between the three, and most keenly why you should want to make sure that the companies you entrust with your business, also take steps to protect your information too. Even if you use a password manager to securely store your own credentials, hopefully the places where you go online are taking these security measures too.

Hashing transforms your password from plain text to a new outputGetty Images/iStock

What is Hashing?

Hashing is a way of transforming your password into a unique identifier and fingerprint that are hard to invert and essentially reverse. Basically you're mincing up your data, and creating a fixed output. Why would you want to use a hash? If a password is just stored as plain text, then if a hacker gained access to that data they would have the keys to your account and potentially others if you've reused that password in other places.

"If you use the more simple implementation, and not have [passwords] hashed at all, and a password data base is breached, everyone's password is fairly accessible," Arve Kjoelen, chief information security officer at McAfee told GearBrain.

So that's why many companies will say, if they've been breached, that while their database was captured, it contained hashed passwords. Think of these then as phrases that have been encoded into a secret language. You really can't reverse engineer a hash. But intrepid hackers can try and find the secret language, pushing a slew of words through coding, and then compare those results with hashed passwords. They may not know the hash a company has used, but they can just compare their hashed collection to a company's and try to match the hashes together. If they find a match they can then figure out the password.

And that's exactly what some hackers do, Jim Miller at Trail of Bits told GearBrain.

"An attack called a rainbow table can generate a giant value where they compute the hash of those passwords," said Miller, a serious security engineer for Trail of Bits' cryptography team. "And so an attacker can compare those values against the table and easily identify a password in a database."

Not great. So that's why many companies then take a second extra step called salting.

Salting adds another layer of security, attaching a new random character to your passwordGetty Images/iStock

What is Salting?

Salting works a little bit as it sounds. Just like the way people add salt to their food, salting in cryptography adds another element to your password, designed to make it just that much harder to crack or guess.

The way a salt works, a random character is assigned to your password the same random character each time but you, nor even the company, knows what it is. Then, your new password, what you think of as your password plus the added salt, is hashed. And voila, you have something that is pretty hard to decipher.

"You can find a rainbow table online," said Miller. "But you can't predict what the salt value will be, and so that makes the table useless."

You never see this process when you're logging on to buy those books for class. Instead, you're just entering your password, and the system is looking up the salt for you, and then the hash. And that happens in less than a second. It does cost more to add this second, salting step, but it's that extra step that helps locks down a consumer's information and protects a company's reputation too.

"You don't have to salt passwords to be more secure, but it's the right thing to do," Dave Hatter, a cybersecurity consultant in Cincinnati, Ohio told GearBrain.

Peppering takes your security to another level, assigning another value and storing that away from the original password Getty Images/iStockphoto

What about Peppering?

Peppering takes the whole salting concept another step further, and assigns a second random value to the password but this value is never stored with the salt nor the password.

You could think of a pepper is just an extra salt. But the pepper is a not only a secret key that only shows up when a customer is logging into a site, it also has to be stored in a separate location so it actually remains a secret.

You may be able to guess the hash, and even get into the salt, but if the pepper is somewhere physically elsewhere, a hacker would have to have access to both databases to really make any headway.

"Peppering improves the security of a salt and hash because without the pepper value, an attacker cannot crack a single hash," Hatter said.

So what should I do to protect myself?

First, you should make sure you're doing the basic security steps to protect your password and secure your digital life. That includes basic things from changing the default password that comes on your new device to not using your child's name as your across the web. (Please.) These are actions you can take on your own and they're free.

Then, you wouldn't be wrong to check to see how the company you're working with, whether that's your financial institution or the online grocery store where you regularly shop, is securing your personal data including your password.

You don't have to be a coder to understand whether a company is encrypting data you enter into their web site. You just have to be willing to make a decision on whether you want to work with those firms who are trying to protect your accounts, or not. That's a step many people should consider taking.

"I think consumers should be aware of the various ways of storing their passwords," said McAfee's Kjoelen. "And if it's not stored securely, when there is a breach, those passwords could potentially be cracked."

Link:
Hash, Salt and Pepper: How cooking your password makes it safer - Gearbrain

How breakthroughs in privacy-enhancing technologies enable the future of biometric authentication – IFSEC Global

Posted on by

London Tech Week

The first virtual London Tech Week took place in early September, providing attendees with unmissable content from a range of experts discussing the latest innovations in tech and its impact on businesses. Security featured in several discussions, including in one seminar where Fabian Eberle explored how breakthroughs in privacy-enhancing technologies were enabling the future of biometric authentication. Olaf Jensen reports.

Passwords have been around for around 60 years, but they no longer provide the protection from cyberthreats they once did, and new alternatives have emerged that may yet supplant them.

Indeed, Fabian Eberle, COO and Founder of cybersecurity firm Keyless speaking at London Tech Weeks digital conference earlier this month, sees it as an ambition to eliminate the humble password. He can do this, he says, through a combination of machine learning and multimodal biometric authentication that he believes will revolutionise how people are identified and authenticated.

The need to replace passwords is particularly pressing because they are notoriously insecure. It may come as no surprise that an astonishing 2.3 billion credentials were stolen by hackers and cybercriminals in 2017 alone.

Why? Because nobody follows best practice when it comes to password security. Even IT leaders are not immune: around 55% of them reuse the same password across multiple services in fact, 51% of all passwords are reused. All this means that around half of all helpdesk calls are for password resets, and passwords cause approximately 80% of all data breaches.

There are typically three factors of authentication used today: inherence, such as physical characteristics used in biometric security like our face or fingerprints; possession, as in something we carry that generates a pin code; and knowledge, which covers anything we have to remember like a PIN or a password.

Each has benefits and drawbacks. For instance, while passwords are quite secure in theory, remembering them can be difficult and once they are compromised, they offer no additional security, and a centralised database of passwords attracts the attention of hackers. Biometrics, meanwhile, are unique to us, meaning theres nothing for us to forget, but it is sensitive data and storing it is a burden for businesses they also cannot be changed.

The main challenge is to balance the trade-off between security and privacy on one hand, and convenience and user experience on the other. Which of these matters most is extremely dependent on context: users consistently rank security above convenience when it comes to, for instance, a banking app, while prioritising convenience for social media.

COVID-19 has arguably highlighted the need for what Eberle calls a password-less paradigm. Greater digitalisation and an increasingly mobile or homeworking workforce has made the password more cumbersome. Indeed, data suggests that the average worker spends around 24 hours entering passwords each year.

Biometric security is set to play a big role. A demand for a better customer experience, the growing threat of cyberfraud there has been a 600% rise in phishing attacks during the coronavirus pandemic and more stringent data protection regulations such as GDPR have driven the adoption of biometric authentication. Its convenient, already familiar from our smartphones, and requires the use of something we always carry around with us, such as our face and fingerprints. But its not fool proof, and still needs an extra layer of protection.

The solution, explains Eberle, is to combine multiple authentication factors, such as a one-time, generated pin code and a fingerprint scan. This is known as two-factor authentication and is increasingly recommended to individuals as well as businesses as the best line of defence against cybercriminals. To Eberle, multi-factor security should be baked into a system by design.

Eberles Keyless software is just one of a new generation of security providers that combine multiple security measures. In this case, that means machine learning, cryptography and biometrics. It lacks a centralised database, making it less of a target for hackers, and features anti-spoofing software that means photographs wont fool the biometric sensor. In the future, the system may even measure behavioural characteristics such as keystrokes or the precise way the user holds their phone.

A greater consumer awareness of privacy and security means firms will increasingly seek to give users personal control over their data. Services like Keyless are the start of that process, because they do not centralise control of their users data in one place. But the humble password, stored centrally or dependent on the users memory, may have no place in that future.

Find out more about the topics under discussion at London Tech Week.

Enjoy the latest fire and security news, updates and expert opinions sent straight to your inbox with IFSEC Global's essential weekly newsletter. Subscribe today to make sure you're never left behind by the fast-evolving industry landscape.

Sign up now!

How breakthroughs in privacy-enhancing technologies enable the future of biometric authenticationOlaf Jensen reports from London Tech Week, this time a digital event for the first time, where privacy-enhancing technologies to improve biometric security was on the discussion table.

Olaf Jensen

Biometric security systems: a guide to devices, fingerprint scanners and facial recognition access control

Use of automated facial recognition by South Wales Police deemed unlawful, court rules

Inner Range announces updates to Inception

Continued here:
How breakthroughs in privacy-enhancing technologies enable the future of biometric authentication - IFSEC Global

Feds Yell PATCH NOW over Windows AD Zerologon Vuln – Security Boulevard

Posted on by

CISA sent an unusual warning late last week. The federal cybersecurity agency instructed government IT departments to drop everything and patch their Windows servers.

The source of all their fears? The Zerologon vulnerability, disclosed last week. Augusts patch Tuesday fixed the bug, but its feared many organizations will have delayed installing it on their AD domain controllers.

The thing is,Zerologon rates a perfect 10 on the CVSS scale. In todays SBBlogwatch, we run and hide.

Your humble blogwatchercurated these bloggy bits for your entertainment. Not to mention:Maiden Goes To Hollywood.

Whats the craic, Zack?Mister Whittaker reportsHomeland Security issues rare emergency alert:

The Cybersecurity and Infrastructure Security Agency, better known as CISA, [is] requiring all federal departments and agencies to immediately patch any Windows servers vulnerable to the so-called Zerologon attackciting an unacceptable risk to government networks. Rated the maximum 10.0 in severity, [it] could allow an attacker to take control of any or all computers on a vulnerable network, including domain controllers.The bug was appropriately called Zerologon, because an attacker doesnt need to steal or use any network passwords to gain access to the domain controllers. With complete access to a network, an attacker could deploy malware, ransomware, or steal sensitive internal files.Although the CISA alert only applies to federal government networks, the agency said it strongly urges companies and consumers to patch their systems as soon as possible if not already.

AndDan Goodin addsAgencies that dont update must disconnect all domain controllers:

Microsoft published a patch last Tuesday. No later than 11:59pm EDT on Wednesday, agencies are to submit a completion report attesting the update has been applied to all affected servers or provide assurance that newly provisioned or previously disconnected servers will be patched.Its possible for attackers to exploit the vulnerability over the Internet [if] organizations expose their domain controllers. [Or, if they] have exposed Server Message Blockor Remote Procedure Call, [it] may be exploitable. Queries using the Binary Edge search service show that almost 30,000 domain controllers are viewable and another 1.3 million servers have RPC exposed.Zerologon is tracked as CVE-2020-1472. Further raising that stakes was the release by multiple researchers of proof-of-concept exploit code that could provide a roadmap for malicious hackers.Researchers continue to find evidence that people are actively developing attack code. Given the stakes and the amount of publicly available information about the vulnerability, it wouldnt be surprising to see in-the-wild exploits emerge in the coming days.

Feeling smug because you dont use Windows?Stop that, say Sambas Andrew Bartlett and Douglas Bagnall:

Installations running Samba asthe Active Directory DC [or] the classic/NT4-style DC [are] vulnerable. However, since version 4.8the default behaviour of Samba has been to insist on a secure netlogon channelequivalent to having server schannel = yes in the smb.conf.Versions 4.8 and above are not vulnerable unless they have the smb.conf lines server schannel = no or server schannel = auto. Samba versions 4.7 and below are vulnerable unless they have server schannel = yes. Each domain controller needs the correct settings in its smb.conf.Samba 4.10.18, 4.11.13, and 4.12.7 have been issued as security releases to correct the defect. Samba administrators are advised to upgrade to these releases or apply the patch as soon as possible.Our Code, Our Bugs, Our Responsibility.

Wait. Pause.?Why havent these IT people already done the job? v1 cant understand whats taking them so long:

The CVE was initially released on August 11. Funny theyre just now in a hurry to patch a severity-10 thats been out now for six weeks.Granted, it took Microsoft until last Tuesday to publish a patch, but any competent admin would have looked at that and said that goes on now and has already closed that barn door. Sure, tell the idiots to get it done immediately, then review the completion reports and fire everyone that waited until they were ordered to patch their servers, and hire competent replacements.

Butacdha reckons it aint that simple:

Youre missing the biggest reason: enterprise IT shops with strict change management processes and, especially in government, years of austerity budgets cutting resources for both sysadmins and rigorous testing.If you have a charge management process which takes a month to approve updates, the problem is not the sysadmin. If years of skimping means that the operators are afraid to patch because theyll be punished if it breaks things and they dont have a robust testing process, the problem is not the sysadmin.This is more expensive than people like to admit. You either need to accept lower security/reliability or spend more on staff, capacity, and licenses. Lots of places try to cut that corner and itll seem to work until, as Warren Buffet likes to say, the tide goes out.This is a really tricky problem in government because the pay scales can be very hard to change. Historically the higher-level positions were senior and relatively limited, so its not like you can just effortlessly bump all of your developer positions up to the highest grade without hitting budget caps. That probably means youre hiring people at lower levels which are more like entry level pay.

AndDeputy Cartmans been there done that bought the T-shirt:

Once organizations reach a certain size, they seem to instill a very very strong sense of Dont rock the boat if you dont have to mindset. You want to be proactive and apply a patch? Well what if it breaks something!? Just sit on your ***, keep looking at Tik-Tok, and counting down the days for your pension.Fix **** after the duct tape breaks, and move on with your life. Im already starting to feel this way at my defense company job due to its size. Fixing all the **** Im seeing thats pants-on-head stupid would go about as well as punching a concrete wall until my fists are hamburger.Just roll your eyes, take your time with that 8th cup of coffee, and just do what you can.

What went wrong, anyway?With a neat precis, heres tialaramex:

This is an amazing bug. What happens is, youre supposed to fill out a bunch of bytes as proof of who you are, and then a bunch of bytes that represent stuff like seconds since the start of the Unix epoch. If you cant do this, NetLogon figures you arent really who you say you are.The exploit is: Fill everything out with all zeroes. This will succeed one time in 256 on average.[It] isnt a bug in the code, its a design mistake: If you implement exactly what Microsofts design document says for NetLogon, one time in 256 all zeroes lets you in. By design. Stupid stupid design.It stands out how terrible Microsoft is at cryptographic design. Microsoft does this over and over.

IT people deserve blame too.Coppercloud dreams up the best simile:

Wait, people have domain controllers present on the public internet? Like, no firewall, port forwarded or no NAT, no VPN? Just out there?This is plugging a hole in a leaky chicken fence and hoping it floats.

Cue:the inevitable conspiracy theory. jiggawatts approaches 88 mph:

I am now convinced that Microsoft is purposefully degrading the quality of the cryptography at the behest of the NSA. Microsoft products have all of the following current cryptographic problems: There is no support for TLS 1.3. HSTS is very hit and miss. Until very recently, youd have to jump through hoops to enable TLS 1.1 and 1.2. Across a forest trust, RC4 is the default cipher. If you try to enforce AES ciphers youll break some forms of single-sign-on from Azure AD. If you use ECC certificates, youre stuck with the handful of now very thoroughly legacy curves. You cant have elliptic curve certificates with: NDES, AD FS, SQL Server, SCCM until very recently, and in fact just about every Microsoft product except for IIS. Which I remind you still cant do TLS 1.3. Azure Key Vault cant issue anything but RSA certificates from third-party CAs. The NSA does exist. They do degrade cryptographic algorithms, either through national security letters or simply bribery. The Dual_EC_DRBG fiasco happened. It really happened. Private United States based organisations do cooperate with these programs, either willingly or because they are forced to.Its one thing to accuse a neighbour randomly of murder. Its entirely another thing if you see them putting a shockingly large and heavy rolled up carpet in the boot of their car.

Meanwhile,kaur thinks a thought experiment:

Every country in the world is [asking] questions: Why do we use a consumer OS built by an US company? Can we trust USA to be our ally and not abuse its power over Microsoft? Can we trust USA to stay our ally in the forseeable future?

Maiden Goes To Hollywood

Previously in And Finally

You have been readingSBBlogwatchbyRichiJennings. Richi curates the best bloggy bits, finest forums, and weirdest websites so you dont have to. Hate mail may be directed to@RiCHiorsbbw@richi.uk. Ask your doctor before reading. Your mileage may vary. E&OE. 30.

Image sauce: Ryan McGuire (via Pixabay)

Recent Articles By Author

Link:
Feds Yell PATCH NOW over Windows AD Zerologon Vuln - Security Boulevard

Early Edition: September 22, 2020 – Just Security

Posted on by

Signup to receive the Early Edition in your inboxhere.

A curated guide to major national security news and developments over the past 24 hours. Heres todays news.

RUSSIAN INTERFERENCE IN US PRESIDENTIAL ELECTIONS

A top-secret CIA assessment has concluded that Russian President Vladimir Putin and his tops aides are probably directing a Russian interference operation aimed at denigrating Democratic presidential nomineeJoe Biden and supporting President Trump ahead of the 2020 presidential election, the first line of the assessment states. The documents also set out the CIAs assessments of Ukrainian lawmakerAndriy Derkach, who has previously been linked to Trumps lawyer Rudy Giulianis efforts to discredit Biden however, it does not go as far as to name Giuliani, who has now been working with Derkach publicly for months, instead stating Derkach had interacted with a prominent person linked to Trump. Josh Rogin writes in an op-ed for the Washington Post.

Andrew Weissmann, a former deputy on Special Counsel Robert Muellers team that investigated Russian interference in the 2016 election, says Muellers team could have done more to hold Trump accountable and uncover the truth, his new book, Where Law Ends: Inside the Mueller Investigation, states, which Random House will publish next week. Weissmanns book criticizes Muellers top deputy, Aaron Zebley,for halting deeper investigations into Trumps finances, which might have established a source of Russian leverage over Trump. It also makes clear that Mueller had enough evidence to conclude that Trump obstructed justice, charges which could rear their head if Trump leaves office in November as he would lose immunity from criminal prosecution. Weissmann also charges Attorney General William Barr of betraying both friend and country. Matt Zapotosky and Spencer S. Hsu report for the Washington Post.

US DEVELOPMENTS

The office of Manhattan District Attorney Cyrus Vance Jr., which is currently in a contentious legal battle with President Trump over obtaining eight years of his tax returns and related records, suggested yesterday for the first time specific criminal charges that may follow, including tax and insurance fraud and falsifying business records, citing news reports and public testimony that accused Trump of misconduct as justification for the grand jury investigation into possible criminal charges, court filings made yesterday by Vances legal team have revealed. The offices investigation into Trump started over two years ago and is looking into alleged hush-money payments he made in 2016 to two women who claimed they had had an affair with the president, and also a variety of business transactions, Carey Dunne, the offices general counsel said. Benjamin Weiser and William K. Rashbaum report for the New York Times.

The Trump administration yesterday announced an executive order and new unilateral sanctions against Iran which aim to reimpose an indefinite international arms embargo on the country, bypassing strong opposition from world leaders who dismiss the move as unlawful and ineffective.The new executive order gives the administration a new and powerful tool to enforce the U.N. arms embargo and hold those who seek to evade U.N. sanctions accountable, Secretary of State Mike Pompeo said, adding that its first targets include Irans Ministry of Defense and Armed Forces Logistics, Irans Defense Industries Organization and its director, Mehrdad Akhlaghi-Ketabchi, many associated with the Atomic Energy Organization of Iran, and also Venezuelan President Nicols Maduro. Quint Forgey reports for POLITICO.

Whistleblower Edward Snowden, the former CIA contractor who was charged with espionage after releasing classified National Security Agency (NSA) documents related to US surveillance programs in 2013,has agreed to forfeit over $5 million he earned from his tell-all book, Permanent Record,according to court records. Snowdens book was published last year without approval from government, breaching contracts he signed with the CIA and NSA. The judge agreed with the Department of Justice (DOJ)s lawsuit and ruled that Snowden must pay back the financial gains he received. A forfeiture plan has yet to be approved by the judge. Katelyn Polantz reports for CNN.

Update: After publication, Snowden disputed the CNN reports characterization of these developments, and replied to Just Security on Twitter noting he disagreement.

A New York Police Department (NYPD) officer was yesterday charged with acting as a spy for the Chinese government to provide information on the New York Tibetan community, according to a criminal complaint filed, which accused Baimadajie Angwang, 33, of working at the direction and control of Chinese officials at the consulate in New York. Prosecutors have charged him with acting as a foreign agent without notifying American authorities, wire fraud and making false statements, according to the complaint. Sonia Moghe reports for CNN.

District Judge Victor Marrero yesterday ruled that the US Postal Service must ensure it processes election mail on time for the November presidential election, a 87-page ruling has revealed, in which Marrero stressed that, the right to vote is too vital a value in our democracy to be left in a state of suspense in the minds of voters weeks before a presidential election. Marreros judgment follows a decision by District Judge Stanley Bastian in Yakima, Washington, last week that ordered the USPS to end practices that were slowing down mail deliveries. In his judgement, Marrero said that: the Postal Service must treat all election mail as First Class Mail; the alleged reversal of highly-criticized operational changes were either unenforced and not yet fully implemented or possibly insincere; and that Trump, Postmaster General Louis DeJoy and the Postal Service had not provided trusted assurance and comfort that citizens will be able to cast ballots with full confidence that their votes would be timely collected and counted. Marrero gave those involved in the case until Friday to settle their issues in a manner that was in-line with his findings and ruling. AP reporting.

The House yesterday unanimously approved the Defending the Integrity of Voting Systems Act which would make hacking federal voting system as a federal crime. The Act received approval by the Senate last year July, and would make hacking any federal voting infrastructure a criminal offence under the Computer Fraud and Abuse Act, which the DOJ often uses to prosecute hackers. The bipartisan bill will now make its way to Trump for his approval. Maggie Miller reports for The Hill.

The Justice Department yesterday threatened to stop federal funding to New York, Portland, OR, and Seattle because of the cities handling of violence and unrest during protests over racial injustice and police brutality, which follows a memo sent earlier this month by the White House instructing the DOJ to identify jurisdictions it argued Democrats had permitted anarchy to persist. Attorney General William Barr said in a statement: We cannot allow federal tax dollars to be wasted when the safety of the citizenry hangs in the balance, adding that he hopes the three cities would reverse course and become serious about performing the basic function of government and start protecting their own citizens. Sadie Gurman reports for the Wall Street Journal.

House Democrats stopgap spending bill includes a provision for $1.6 billion for the Navy to enter into a contract, beginning with fiscal year 2021, for the procurement of up to two Columbia class submarines, the continuing resolution (CR) released yesterday revealed. The bill also grants the Navy authority to incrementally fund the new submarines. However, the bill is unlikely to make it through the Senate, with many Republicans expressing disdain for the bills silence on aid for farmers affected by the coronavirus pandemic. Rebecca Kheel reports for The Hill.

The Royal Canadian Mounted Police has started an investigation into an envelope sent to the White House, addressed to Trump, that reportedly contained the highly poisonous substance ricin. The police departments Chemical, Biological, Radiological, Nuclear, Explosives team is reportedly leading the operation, the police force said in a post on Twitter yesterday. Andy Blatchford reports for POLITICO.

Trump will announce his Supreme Court nomination by the end of this week, he said in an interview yesterday on Fox & Friends, adding that he is currently considering four or five women to potentially replace the late Justice Ruth Bader Ginsburg,who sadly passed Friday. Quint Forgey and Anita Kumar report for POLITICO.

CORONAVIRUS

The novel coronavirus has infected over 6.85 million and killed almost 200,000 people in the United States,according to data compiled by Johns Hopkins University. Globally, there is close to 31.35 million confirmed coronavirus cases and over 965,000 deaths. Sergio Hernandez, Sean OKey, Amanda Watts, Byron Manley and Henrik Pettersson report forCNN.

When Congress passed the Cares Act earlier this year it gave the Pentagon $1 billion to prevent, prepare for, and respond to coronavirus by building medical equipment however, the majority of this money was redirected to defense contractors and used to fund making new jet engine parts, body armor and dress uniforms. Even defense contractors who were protected under the Paycheck Protection Program were given some of the money, it has been revealed. Aaron Gress and Yeganeh Torbati report for the Washington Post.

The Centers for Disease Control and Prevention (CDC) suddenly removed yesterday guidance it published Friday that said that air transmission of the coronavirus might be one of the most common ways to spread the virus. The agency said that Fridays guidelines were a draft and posted in error, although it did say it was updating its recommendations regarding airborne transmission, which will be reposted online once reviewed and finalized. Apoorva Madavilli reports for the New York Times.

A map and analysis of all confirmed cases of the virus in the US is available at the New York Times.

US and worldwide maps tracking the spread of the pandemic are available at theWashington Post.

A state-by-state guide to lockdown measures and reopenings is provided by the New York Times.

Latest updates on the pandemicatThe Guardian.

OTHER DEVELOPMENTS

Afghan forces and the Taliban saw the worst night of clashes Sunday since peace negotiations between the two warring sides began in Qatar over a week ago, with at least 57 members of the Afghan security forces and 80 Taliban fighters reportedly killed across Afghanistan. The clashes took place in central province of Uruzgan, although casualties were also reported in the provinces of Baghlan, Takhar, Helmand, Kapisa, Balkh, Maidan Wardak and Kunduz, provincial officials have said. Al Jazeera reporting.

Here is the original post:
Early Edition: September 22, 2020 - Just Security


« First...102030...713714715716717...720730740...Last »