Chris Betcher

I was cleaning out a drawer in my home office this morning and found this collection of old USB memory sticks dating back quite a few years. Remember those days when you thought you were so cool because you had this little storage drive full of all your stuff in your pocket? I recall working in a school back in those days where we actually mandated that every student had to have a "USB"*, such was the apparent importance of these things. The intention was for students to keep their personal data safe and secure, but we used to constantly find them left behind in the USB ports of the classroom computers after a lesson. Or they would sometimes mysteriously just stop working. Or the kids would lose them. USBs may have been cool, portable and handy, but they were about the most insecure method for managing data I can think of. *(Side note: Calling them simply a "USB" seems stupid to me, because USB - or Universal Serial Bus - is a data interface standard, not a name fo...

I received an email recently from a colleague asking about data sovereignty, and in particular asking about how schools deal with the  need to store all personal data on Australian servers to be compliant with the law. This was my reply... When deciding whether to do a thing - any thing - you need to assess the relative risk. There is NOTHING that can have it's risk mitigated to zero. So while we can have debates about the security of the cloud, the fact is that ANY service is generally only as safe as the password that protects it. It's far simpler to socially engineer your way into a system than to hack it, and it's easier to follow someone through an open doorway before the door shuts than to crack the lock. There are security risks involved with every system. What makes you think that data saved on a server that happens to be geographically located on Australian soil is any safer than data on a server located on the other side of some imaginary geographical dividing l...

He rolled his eyes and tried not to look distrustful. "I'm not sure about all this 'cloud computing' nonsense . It seems to me it's just a passing fad and a huge security risk.  I'd never trust my important stuff there. I'd only put my files on my own computer. I like to know where they are so I can get to them when I need them." His friend responded with a wry grin. "Do you have a bank account?", he asked. The cloud sceptic replied, "Yes, of course I do." "Well... what do you think that is?   Do you think your pile of money is sitting in your very own little personal vault somewhere with your name on it?", he smiled. "No", he continued, "your money is nothing more than a record in a computer database, a series of 0s and 1s kept on a server somewhere as a series of magnetic codes. You don't know where your money is kept or what sort of machine it's kept on, or who maintains it, or how often it's...