Patric Lenhart on LinkedIn: Two intense weeks of asking questions and understanding how others secure… (2024)

I'm in São Paulo and my sightseeing is pretty much limited to looking out the window of my hotel room.I'm currently on a business trip to South America and it's interesting to compare this experience to the last time I was in São Paulo as a tourist, about 6 years ago.This time we are focused on making the most of our time here, talking to local colleagues and spending most of the day in workshops.I think we're getting a lot more done and a lot deeper insights than we would have from remote sessions, and that obviously doesn't leave much time for anything else.While last time I got to see a lot of sights and take pictures of all the beautiful places, this time I get to experience how people work here and how things are done.The next stop will be Buenos Aires, where I have never been before. I hope to be able to see at least parts of the city when we are free on the weekend.

22

After not leaving my home office for a couple of weeks, I am sitting in a train again, this time taking the direct connection between Bonn and Berlin.After a short stop in Berlin, my journey continues to Waren, where our Senior Manager Bootcamp will take place.This is the first time I'm taking part and I'm really looking forward to the planned sessions.

12

U.S. warrantless surveillance is not new to us Europeans, but apparently Americans will also be subject to it in the future.It is also interesting to see when progressives and the far right come together to work against a bill.Sen. Ron Wyden said that “the House bill represents one of the most dramatic and terrifying expansions of government surveillance authority in history,”https://lnkd.in/eyBcQpr4#surveillance #privacy

1

Mal wieder gibt es eine Menge personenbezogener Daten im Internet mit dem Potenzial für Identitätsdiebstahl.Immerhin sind keine Kreditkarten- oder Kontodaten der Mitglieder betroffen. Warum Urban Sports Club jedoch Personalausweiskopien und Daten über Check-Ins in ein öffentlich zugängliches Verzeichnis bei Google Cloud Storage lädt, ist eine gute Frage.Ich bin gespannt, wie sich das noch entwickelt.https://lnkd.in/esxxUexB#cybersecurity #datenschutz

2

Here's a great overview of the CRA (EU Cyber Resilience Act) and what it means for manufacturers by Sarah Fluchs.2027 may seem like a long way off, but if you're thinking about product development lifecycles, you should definitely start thinking about the impact of this EU regulation.We can see what is happening in the automotive industry, where Porsche will stop selling certain models because of the UNECE regulation coming into effect this year.I'm not sure I can agree with the optimistic outlook at the end of the article:"As a manufacturer, you can moan about the CRA — but it’s coming anyway. Then you might as well see it as an opportunity to finally tackle the annoying security issue in a structured way, right?"The pessimist in me says that most vendors will try to do as little as possible.Security will certainly be in the spotlight, and then it will be up to security professionals to show the value they bring, and up to customers to finally show that they care about better security in products.At the end of the day, how much security is built into a product is a business decision, and laws and regulations set the framework.If we had a better security culture in companies and security played a bigger role in purchasing decisions, we might not even need the CRA.

5

1 Comment

A few weeks after visiting our #eraneos office space in Frankfurt, I was back in Cologne today.There are not as many desks, but the screens are wider and the view out the window is nicer.

3

I thought Meta was spying on its users, but I hoped it was limited to what users did in Meta apps or on sites with Like buttons.It will be interesting to see where this goes, as I can't imagine much justification or claims of consent for this.

2 Comments

This is a quick reminder from the #germanydigital exhibition that moving to the cloud will not magically make all your problems go away.There are reasons to use #cloud services, but you should be aware that there is always some loss of control over your information and you should consider this in your risk assessment.Know what you are doing and have an exit strategy.#cybersecurity

10

After hearing about the temporary exhibition #germanydigital for a while, I managed to get to the Haus der Geschichte der Bundesrepublik Deutschland before the end of the exhibition on April 7th.Digitalization has changed our lives quite a bit and it is interesting to be reminded of what we take for granted nowadays.The exhibition also does a good job of raising awareness of the downsides and dangers of living a fully connected life.I also took a look at "Forgot your password" by Aram Bartholl, where you can look through 8 books of alphabetically sorted passwords from the 2012 LinkedIn leak.I was glad I didn't find my password there, and decided it was better not to be inspired by it when choosing a new one.