Mumsnet reports data breach to ICO after problematic cloud move


Bobby Hellard

8 Feb, 2019

Mumsnet has reported itself to the Information Commissioner’s Office (ICO) after a botched upgrade resulted in users accidentally logging into the accounts of others.

The parental forum believes that the breach was caused when moving its services to the cloud on Tuesday afternoon. The problem ran from 2pm Tuesday to 9am Thursday when the changes were reversed.

The breach concerns logins where for three days users logging into their accounts at the same time as another user could have had their account info switched. A user alerted the company to the breach on Wednesday night saying that they were able to login and view another user’s account.

Mumsnet said it is investigating its logs to determine the impact of the breach. Approximately 4,000 users were logged in during the three-day window, but Mumsnet doesn’t know how many of those were actually breached. The company has only been made aware of 14 incidents so far and those individuals have been notified of the issue.

According to the site, logging into another user’s account allowed them to see email addresses, account details, posting history and personal messages, but not passwords as they are encrypted.

No further incidents have been reported suggesting that it was the move to the cloud that caused the issues. Mumsnet founder Justine Roberts posted a blog post to apologise to users and notify them that it will report the breach to the ICO.

«You’ve every right to expect your Mumsnet account to be secure and private,» she said. «We are working urgently to discover exactly how this breach happened and to learn and improve our processes. We will also keep you informed about what is happening. We will, of course, be reporting this incident to the information commissioner.»

Mumsnet is not alone in this regard, as 2018 saw an unprecedented number of companies reporting data breaches, with almost 60,000 reported across Europe since GDPR came into force.

What’s interesting about the Mumsnet incident is it’s due to a fault during an upgrade to cloud services, highlighting the dangers of rushing digital transformations. To the company’s credit, it acted swiftly and took steps to shut down the problem, notify its users and involving the regulator.

IBM scores a major cloud win with multi-million dollar deal


Clare Hopping

8 Feb, 2019

IBM and Smart Energy Water have signed an agreement to boost the global energy and water provider’s cloud platform with the addition of IBM’s cloud infrastructure to host its mobile and web apps.

US-based Smart Energy Water will host various workloads on IBM’s cloud platform, including its customer and mobile workforce apps, online billing, energy efficiency monitoring, reward programmes and data collection tools.

SEW will offer the infrastructure for other energy businesses to build their apps upon IBM’s cloud. The utilities tech provider works with more than 150 energy and water businesses around the world, so this is a noteworthy deal for IBM.

“Consumers are open to new ways of engaging with their utility,» said Harman Sandhu, President at Smart Energy Water. «Together with IBM, we can deliver solutions at large scale that help utilities lower the cost-to-serve by moving customers from the call center to lower-cost digital channels, personalize service to increase overall customer satisfaction, and target customers for the right opportunities for value-added programs and services.»

The five-year deal will help SEW expand its offerings into analytics, artificial intelligence (AI), machine learning and Internet of Things (IoT), helping clients develop a more diverse set of tools to benefit customers.

“Smart Energy Water is anticipating the major impact connected technologies will have on their customers business,» said Brad Gammons, global managing director, IBM Energy, Environment and Utilities. «By investing in data, their workers can do their job better than ever before and customers will have access to self-service capabilities that can help improve client service.»

IBM has sealed deals with some pretty big businesses of late, including BNP Paribas and Vodafone.

Culture of Continuous Improvement | @DevOpsSUMMIT @GreenHouseData #Cloud #CIO #DevOps #DevSecOps #Serverless #ContinuousDelivery

Even if your IT and support staff are well versed in agility and cloud technologies, it can be an uphill battle to establish a DevOps style culture – one where continuous improvement of both products and service delivery is expected and respected and all departments work together throughout a client or service engagement. As a service-oriented provider of cloud and data center technology, Green House Data sought to create more of a culture of innovation and continuous improvement, from our helpdesk on to our product development and cloud service teams. Learn how the Chief Executive team helped guide managers and staff towards this goal with metrics to measure progress, staff hiring or realignment, and new technologies and certifications.

read more

WSO2 to Present at ServerlessSUMMIT at @CloudEXPO | @wso2 @lakwarus #CloudNative #Serverless #DevOps #Docker #Kubernetes #Ballerina

Docker and Kubernetes are key elements of modern cloud native deployment automations. After building your microservices, common practice is to create docker images and create YAML files to automate the deployment with Docker and Kubernetes. Writing these YAMLs, Dockerfile descriptors are really painful and error prone.Ballerina is a new cloud-native programing language which understands the architecture around it – the compiler is environment aware of microservices directly deployable into infrastructures like Docker and Kubernetes.

read more

Japan’s NTT Communications to Present at @CloudEXPO | @JETROUSA @NTTcom #AI #Analytics #CloudNative #Serverless #Docker #Kubernetes

Function as a Service is the popular solution of Serverless, which runs a short-lived function. In contrast, we will show a new Serverless: run long-lived function to deal with stream data. Running containers per stream, each container’s code footprint became small, and the system complexity got significantly simple. This made it easy to realize a new use case like enriching an application with AI-powered analytics using video stream in real-time.

NTT Communications has developed a new platform with Kubernetes to orchestrate this new style of media stream processing. We will throw a live demo to send voice stream from browser to this platform and run media processing functions in real-time. The functions will be open sourced, and all participants can try it out from tomorrow.

read more

Call for Papers Opens for @DevOpsSUMMIT Silicon Valley 2019 | #CloudNative #DevOps #APM #Serverless #Monitoring #ContinuousDelivery

DevOpsSUMMIT at CloudEXPO, to be held June 25-26, 2019 at the Santa Clara Convention Center in Santa Clara, CA – announces that its Call for Papers is open. Born out of proven success in agile development, cloud computing, and process automation, DevOps is a macro trend you cannot afford to miss. From showcase success stories from early adopters and web-scale businesses, DevOps is expanding to organizations of all sizes, including the world’s largest enterprises – and delivering real results. Among the proven benefits, DevOps is correlated with 20% faster time-to-market, 22% improvement in quality, and 18% reduction in dev and ops costs, according to research firm Vanson-Bourne. It is changing the way IT works, how businesses interact with customers, and how organizations are buying, building, and delivering software.

read more

Golden State Warriors use Google Cloud to up their game

American professional basketball team Golden State Warriors will use Google Cloud’s data-crunching technology to improve the performance of the players.

Apart from improving their game on court, the NBA champions will also use Google Cloud to track analytics to crunch scouting reports and better rope in athletes. According to Google Cloud, this data can easily be shared with coaches, staff and players.

It is also reported that the basketball team is planning to host a mobile app on the Google Cloud platform. This app — which will be developed by the Warriors and Accenture — will leverage Google Cloud technologies, such as App Engine and Firebase, for personalisation and Maps to support navigation. The app will also allow Warriors’ fans to find their seats.

Moreover, Google Cloud will also become a founding partner of the Chase Centre in San Francisco, California. This will become the new home venue for the team as it will be opening in September 2019.

According to Google Cloud, the Chase Centre will use the same analytics to promote sporting and entertainment events at the venue.

Kirk Lacob, assistant general manager and vice president of GSW Sports Ventures at the Warriors, said: “Today, 70% of the Golden State Warriors analytics team's time is spent collecting and shaping data and only 30% of time is spent analysing it. Partnering with Google Cloud to automate the collection of valuable data will allow us to free up resources and spend more time turning these insights into action.”

(Photo by TJ Dragotta on Unsplash)

https://www.cybersecuritycloudexpo.com/wp-content/uploads/2018/09/cyber-security-world-series-1.pngInterested in hearing industry leaders discuss subjects like this and sharing their experiences and use-cases? Attend the Cyber Security & Cloud Expo World Series with upcoming events in Silicon Valley, London and Amsterdam to learn more.

Druva to Exhibit at @CloudEXPO Silicon Valley | @DruvaInc @WCPreston #Druva #Cloud #GDPR #Security #AWS

Druva is the global leader in Cloud Data Protection and Management, delivering the industry’s first data management-as-a-service solution that aggregates data from endpoints, servers and cloud applications and leverages the public cloud to offer a single pane of glass to enable data protection, governance and intelligence-dramatically increasing the availability and visibility of business critical information, while reducing the risk, cost and complexity of managing and protecting it.

Druva’s award-winning solutions intelligently collect data, and unify backup, disaster recovery, archival and governance capabilities onto a single, optimized data set. As the industry’s fastest growing data protection provider, Druva is trusted by over 4,000 global organizations, and protects over 40 PB of data. Join the conversation at twitter.com/druvainc

read more

Best Practices for Enterprise Hybrid Cloud | @CloudEXPO @Platform9Sys #Cloud #CIO #HybridCloud #Containers #Serverless #Kubernetes

To enable their developers, ensure SLAs and increase IT efficiency, Enterprise IT is moving towards a unified, centralized approach for managing their hybrid infrastructure. As if the journey to the cloud – private and public – was not difficult enough, the need to support modern technologies such as Containers and Serverless applications further complicates matters. This talk covers key patterns and lessons learned from large organizations for architecting your hybrid cloud in a way that:

Supports self-service, «public cloud» experience for your developers that’s consistent across any infrastructure.

Gives Ops peace of mind with automated management of DR, scaling, provisioning, deployments, etc.

read more

Are you really ready for the cloud?

7 Feb, 2019

The rise of cloud platforms and services has arguably been the most important development in business computing since the birth of the internet. Cloud vendors now allow organisations across the world to take advantage of cutting-edge IT capabilities with little more than a credit card.

Moving to a cloud-based IT model has a huge amount of advantages. There’s a much lower cost-of-entry than a traditional approach, and the ‘pay-as-you-go’ consumption model makes it much easier for companies to scale up as they grow. On top of that, there’s more flexibility and greater choice, and access to a much wider range of capabilities than would be possible with on-premise infrastructure.

With this in mind, it’s not very hard to see why, according to a survey of IT professionals, 77% ranked cloud technologies as the most important tool in their arsenal. However, migrating your IT to the cloud isn’t an easy process. In fact, if not properly managed, it can become a black hole of time, money and effort which ends up adding stress rather than reducing it.

There are many moving parts to consider when planning a cloud migration, and it’s imperative that you fully think through your migration strategy and plan out your roadmap. Without a comprehensive roadmap, you run the risk that your migration could fall at the first hurdle.

The first step is to ensure that all of the organisation’s primary stakeholders are in agreement about the migration, including the board, the IT department and so on. This may sound like a simple and obvious step, but skipping over it can lead to major trouble later on, if one of your board members decides to oppose the project when it’s already underway.

For Joel Berwitz, the head of cloud services at CDW, this dovetails with some key questions that arise when considering cloud migration: “Is the organisation setup to understand, migrate and run services in the cloud, and is there sufficient skills and desire from the business to undergo the changes required?”

With everyone on board, you can start planning your migration in earnest, and the first decision to make is whether you want to use a public, private or hybrid cloud infrastructure. Public cloud infrastructure involves renting server capacity from a third-party provider like Microsoft or Google, while private cloud infrastructure involves hosting your own cloud servers in your own data centre (or a third-party host’s). Hybrid cloud, as the name suggests, is a mix of both strategies.

There are advantages and disadvantages to each approach. Public cloud gives you effectively infinite capacity without having to purchase expensive hardware, but it also means you’ll be sharing server space with other clients. Private clouds, however, are more expensive to set up and maintain but allow for greater customisation of the stack itself, ensuring that problematic but essential legacy apps can be supported.

Hybrid is proving to be a very popular option, as it can offer a ‘best of both worlds’ approach – workloads that are high-volume but non-critical can be run in the public cloud, but anything particularly sensitive can be hosted on a private cloud for security and peace-of-mind.

Once you’ve decided on a cloud strategy, the next step is to take a full inventory of all of the workloads that run in your data centre. This is an excellent chance to do some spring cleaning; work out which workloads and apps are still useful and which ones you no longer need to support. This can trim down your consumption significantly, saving you money when using metered public cloud services.

In addition to data centre workloads, you should also make a note of what business software is in use by your staff. It’s worth incorporating cloud-based replacements into your roadmap so you can ensure compatibility with the rest of your IT estate.

With a full catalogue of your workloads, identify which ones can be ported over to the cloud with minimal fuss, which ones will need to be tweaked, and which ones will need to be revised or replaced altogether. This is a crucial step, as you don’t want to get halfway through the process only to find out that a critical workload won’t run on your new cloud.

Berwitz also notes that businesses need to ensure that their migration is underpinned by a solid commercial strategy, and that all of their services and applications are properly cloud-optimised, “whether that’s a lift-and-shift to Infrastructure-as-a-Service or re-architecting the applications into code which can be run more effectively.

“We’re seeing organisations who are migrating to the cloud hit some common hurdles along the way,” he says. “Certainly, ensuring that the services and applications are right sized in the first instance is key to making the move commercially viable. Network architecture, alongside resilience/backup and DR should also be discussed, as utilisation in the cloud can mitigate many of the risks that companies traditionally see on premise.”

At this point, you should start comparing cloud providers. It’s tempting to just go for the lowest-cost provider, but take some time to talk to them about your specific requirements to be sure that they can fully support you – not just now, but in the future. It’s worth looking outside the ‘big three’, too – unless you’re a giant multinational company, you may find that a smaller local cloud provider is actually better-suited to meeting your individual needs.

Once you’ve picked your provider, you’ll want to start working on the roll-out, but pacing is key. Stagger the deployment of your new cloud tools, making sure that each one is running as expected before moving on to the next one. This makes it much easier to test each one thoroughly, and minimises business disruption; rather than your staff having to learn how to operate multiple new systems all at once, they only have to learn one at a time.

Speaking of which, staff training is paramount. Make sure that team leaders and department heads are briefed and trained on how to use any new tools and systems that are relevant to their roles, before they’re deployed to the rest of the company.

Once a system is rolled out, you’ll need to make sure that all staff have easy access to user-friendly guides and documentation on how to use it, and training courses are a good idea for anything particularly complex or business-critical. Adopting a new cloud system is pointless if your staff don’t utilise it effectively, and if they don’t know how it works, they’re not going to use it.

Naturally, it’s important to thoroughly test your cloud-based workloads – not just to make sure they’re working, but to make sure that they’re delivering the efficiency, performance and value that you anticipated at the start of your cloud journey. Ensure that you continuously monitor and tweak your cloud estate – identify new technologies and tools you want to deploy, and regularly check that your cloud tools are serving their intended purpose.

As you may have gathered by now, migrating to a cloud-based infrastructure model isn’t as simple as it may first appear. There’s a whole range of hidden pitfalls that an unprepared company could fall foul of. Making sure that your cloud migration roadmap is airtight can be a big task, especially when you’re also trying to run your business at the same time – but you can make this mammoth undertaking quicker and easier by working with a capable and experienced partner.

Thanks to its team of experienced cloud architects, CDW can work together with your business to draft and implement a migration roadmap, offering an end-to-end service to support you at every stage. CDW understands that cloud deployments should be built around business needs rather than the other way around, and has the experience and expertise to help you craft the cloud model that’s perfect for your specific business goals.

“We have a portfolio of cloud services which can help organisations understand their current environment and help to make the right decisions on which services and applications are right for which platforms,” says Berwitz. “We also represent the market, helping make the transition more risk free by using our experience across the many hundreds of customers who we’ve assisted in their migrations to cloud services. Alongside the technical design, we’re also able to assist with the managed services to optimise and transform customer environments as they continue to make the most out of these investments.”

A well implemented cloud solution could deliver your business improved efficiency, productivity, availability and resilience, and with the right planning and partner, the migration needn’t be a worry.

To learn more about CDW Cloud Services, download your free guide or contact CloudEnquires@uk.cdw.com