Tag: security

On Episode 64 of The Edge of Innovation, we’re talking with entrepreneur Greg Arnette, about new business technology and archiving for perpetuity.

Show Notes

Greg Arnette’s Website
Find Greg Arnette on Twitter
Contact Greg Arnette
Find Greg Arnette on LinkedIn
Sonian’s Website
Barracuda’s Website
Blockchain
What is Blockchain?
Bitcoin
What is Bitcoin?
This Man’s Lost Bitcoin are Now Worth $75m – And Under 200,000 Tons of Garbage
How To Boost Your Internet Security With DNSCrypt
Cloudfest
Link SaviorLabs Cybersecurity Assessment

Sections

New Business Technology On Our Radar
Malware and Viruses: The Wild West
Are You Ga-Ga Over Blockchain?
The Conundrum of Bitcoin
Reinventing Business Solutions
What is Greg Up To?
Is Archiving Messages Relevant?
Archiving Family History: Storing Data for Perpetuity
How Can the History of Places Be Digitally Preserved
No End of Things to Get Excited About
Closing

Archiving for Perpetuity: Is it Relevant?

New Business Technology On Our Radar

Paul: So well let’s, let’s talk about like business technology. What’s fascinating out there now? What’s sort of on your radar. You’re sort of, if I dare, a visionary.

Greg: I think we share that same trait.

Paul: Well, yeah. So what are you seeing out there? I’m reading some of your articles. I’ll go into those if you, if you don’t remember some of the things.

Greg: Yeah. So from a business-technology perspective, a lot of security stuff, especially email collaboration security. That’s also part of my job function, is to be a security evangelist for the company or tech evangelist on data protection and security. I’m interested in the ever evolving set of technology building blocks that are being put out there by companies like Amazon, Microsoft, and Google that can help folks like us go and solve a business problem faster. So every six to nine months, there’s a new service that we can take advantage of that just means we don’t have to write more code.

And at some point down the road…So, tied into that is server-less types of ideas — so functions as a service or Lambda functions that they call them from Amazon or OpenWhisk from IBM — where we can get pure about the software we’re writing, not even thinking about how it has to run in any environment and just focus on the business logic. So, low-code/no-code environment, app environments, I think, are really interesting and going to make a comeback.

I remember doing tons of those Microsoft access web applications that didn’t really require much technology coding but solved the business problem. I think that’s going to coming back in full force. And I’m interested in the cloud building blocks and how we can take advantage of them to do more.

Malware and Viruses: The Wild West

Paul: I don’t know if you wrote an article about this, but what do you think about all the malware and viruses and all the attack vectors that are open now? Is it going to continue to be a problem, or is it going to level off and decline? It seems like the Wild West in some ways.

Greg: Yeah. I think that’s a great way to characterize it. I think it’s going to continue. It almost feels like an arms race or mutually assured destruction, especially now that machine learning and AI stuff is, can be used for good and for bad. The black hats and the white hats are going to be dueling it out in cyberspace, getting smarter on each other. And we’ll continue to see, I think, exploits and vulnerabilities, unfortunately. And we’ll get smarter. Hopefully we just shore up the defenses on all fronts, protecting data at rest, protecting data in transit, training people on stuff. Human behavior always gets in the way a lot in terms of where problems can happen. And so there’s lot of, I think, opportunities to keep solving these problems and leverage massive data sets, leverage machine-learning frameworks like TensorFlow to do good if you want to step in the dark side, I guess you could do all that stuff and cause problems.

Are You Ga-Ga Over Blockchain?

Paul: That’s true. That’s true. Now, are you ga-ga over blockchain?

Greg: Very interested in it and trying to figure out what the business problem to solve. Is there a problem to solve? Is there something you can do to make blockchain work better, or can you build business solutions on the blockchain technologies that somehow do something very different than what we have available today. I just came across a, what they call a collaboration system built on top of the blockchain to foster open but open yet encrypted and audited collaboration. So it’s like a Google Docs equivalent but built on top of the blockstack.

I thought, oh, okay, this is interesting. These things are starting to show up. I think Office 365 and G Suite are very popular and not going to go anywhere. But if you want to kind of roll your own and do it in a blockchain-like of way, there, there’s these new platforms that are coming out that probably a technologist can subscribe to but yet not a business person.

Paul: Well, I tend to be a reductionist, I reduce things. I try to, in my head, reduce them to the simplest things. So let me ask it. Isn’t it just a… it’s not even federated. But it’s a bunch of people, a bunch of nodes recording that block, and they all agree on it. And because, if there’s 99 blocks that agree on it and one that doesn’t, they’re going to discard the one. So if you wanted to – I know this is…at the scale we’re talking about, it’s not reasonable – if I could coerce the 99 to change all of the blocks that credibility could be broken.

So, we store the number 25 in the block, and if I can convince every one of those 99 or 100 blocks owners to go in and change it to 26, I have now changed reality. So that rolls me back to the point of a blockchain is to give some authenticated this-is-what-the-answer-truly-is, or what the information truly is. Am I reducing it too far, or is that what blockchain is?

Greg: From what my understanding and newbie, nascent in this, it sounds right. The open transparent, distributed ledger kind of concept – so the transactions are in the transparent, so to speak and so yeah. So if you could convince those 99 computers or nodes that you have a different version of reality, in theory, that should not be possible given the mathematical sequences that require to compute the blockchain, so to speak. So I guess that’s the counter measure of, it’s not, in theory, supposed to be possible, but we often say that and we actually find that.

Paul: Exactly. So now then we say, okay, well that’s great. So I have a public ledger. That’s great. Now a lot of people seem to infer that it’s anonymous, but the blockchain is inherently referential – from most of the implementations I’ve seen – that will say that, oh, Greg put that number in 10 days ago at 4:00 in the afternoon. And so I think – again, I’m exactly like you. I’m sort of like trying to understand it, and I’m nowhere near an expert. And so people that are listening can correct us – or me – please do so. But it doesn’t seem anonymous at all. In fact, it seems non-anonymous because I can know where that data entered the thing. I might not be able to identify you, but that’s ultimately…

Greg: Yeah. My goal is that it’s supposed to get rid of that problem of anonymous stuff, which is what people get concerned around. And, especially kind of in the social media aspect of things, and haven’t seen anything that blockchain can solve in that world right now, but maybe down the road a future version of Twitter or Facebook will be based on that kind of concept so. You’ll have authenticated entities not bots or whatever that are polluting the conversations and so forth.

Paul: So yeah. We could get to the root of the message, where the message originated, that it came from Paul, or it came from Greg. And we know that because when it got introduced, everybody journaled that.

Greg: Right. And all the attributes were journaled, and it can’t be tampered with. You should not be able to go back and alter that record because that’s going to become bedrock of knowledge, a source of truth, so to speak.

Paul: Right. Exactly.

Greg: I think that’s what appeals to me about this whole concept is the source of truth that can’t be altered. Because it’s a theme that I deal with in my work life is we provide a service that has immutable records of conversations with an audit trail so that we can attest that this is what was said, and here’s when it was said, and it hasn’t been tampered with, and here’s all the infrastructure around that to supports that way of operating.

The Conundrum of Bitcoin

Paul: So, switching gears just a slight little bit here, did you buy bitcoin 15 years, 10 years ago?

Greg: No. It was invisible to me.

Paul: It was just like… I thought about it. I thought, oh, I should just throw up an old machine and mine some.

Greg: Yeah. Shoulda, woulda, could– All those domain names you could have purchased 15, 20 years ago.

Paul: That’s true.

Greg: I just lump them into that category of just whistling through the fields here.

Paul: That’s right. Exactly. Why did you buy McDonalds.com?

Greg: There’s that well known story of the person in England that lost the hard drive with the bitcoin wallet.

Paul: That’s scary.

Greg: Trying to actually go back in the landfill and find it.

Paul: Are they really?

Greg: That’s what I heard. I don’t know if that’s true or not.

Paul: Wow.

Greg: There will be lots of examples of that. I guess the thing about bitcoin and the wallets, it feels like the way we think about bearer bonds. If you have that thing, it’s yours.

Paul: That’s a good analogy.

Greg: You can’t really question it, I guess. I mean, I guess you could go into the courts or legal system. But if you have it, it’s yours.

Paul: Right. It’s a redeemable…that’s it. That’s the redeemable-ness of it. It’s, it’s like a gold coin.

Greg: Right. Yeah. So it’s sort of, that’s sort of the analogy that we should be thinking about with these. Ways you protect them and… Was it Coinbase or one of these ones were hacked and, and so…

Paul: That’s scary.

Greg: I was thinking, well, you could just go back and trace the transaction. But no. If that, whoever has it owned now can just redeem it on an exchange, and now they can benefit from it.

Paul: Yeah, that is going to be interesting because you could see, you know, somebody say, “Well, I never transferred that to them.” It’s an interesting paradigm shift, because we don’t understand it. We really don’t. What’s the implication of it? You know, if I put a gold coin on the table here and walk out and you take it, there is no trace that I had it before. So bitcoin, I think, knows that I had it before, and now you have it. I think.

Greg: Right. That’s what I assume. And I was talking to a person who is much more versed on this subject, and they described to me why you would think that, but how it would be almost really difficult to actually trace that transaction down the road which surprised me.

I don’t know enough about how it works to…I thought, well how can you even steal these things because there must be a record that you had this at once. And how was it lawfully transferred to the other person? And so, yeah. It’s a conundrum.

Paul: A conundrum wrapped up inside of a what?

Greg: Enigma, I think.

Paul: That’s it. Yes, exactly. Fascinating.

Reinventing Business Solutions

Greg: Yeah, that’s, there’s a whole bunch of opportunity and, and, I think reinventing or reimagining current business solutions around a blockchain way of thinking and the distributed ledger concept – contract management, someone was even suggesting, think about DNS records on top of a blockchain environment or…

Paul: Yeah. I hear you, but it just isn’t solid. It’s not something I can grab onto yet because it seems like it has to be something that needs veracity over time. You know, and it’s like, yeah, DNS, that sounds interesting, but who cares? I mean, what the DNS was six months ago. Okay, you know. I mean, now, I think DNSCrypt – I don’t know if you’ve heard of that. That’s where you actually encrypt your DNS traffic so that somebody can’t get in the middle, and they can’t also just see where you’re trying to go and see where you’re trying to resolve. That’s a really nice thing. That’s cool.

Greg: I can see that being interesting.

Paul: That’s really cool. But, yeah, we’re doing that with a lot of our clients. We use something called Cisco Umbrella, which is basically, they bought OpenDNS. And they maintain their own DNS servers. So rather than going to the root servers or anything, you just use theirs. And so if you’ve got a bad site, they write it down as a bad site, and they won’t let you get there. And so the, they’re the arbiter – I mean, they could be the arbiter of taste. They could say, “No, we don’t want you to go here.” That’s the evil side of it. But what they’re doing is for malware and exploits and all that kind of stuff. And they could even do it for “I don’t want gambling sites being in my network.” And so it’s a cool concept, and it’s saved a lot of our customers’ bacon because they don’t know where they’re going, and then there’s an ad that shows up that has malware in it. Well, this blocks that ad. It’s some really cool stuff.

Greg: Yeah. I can see that being really valuable, especially for consumers and small businesses that rely upon MSPs for their IT services.

Paul: Yeah. Well, and even for big companies. Because what’s happening is… The reason why Cisco could do it is somebody has to keep up with the changes as the slew rate changing throughout the day, you know. This site got infected, so they say, “Okay, you can’t go there now.” And then it wears off, and that site is no longer infected, and they take it out of the list. So some cool stuff there.

Greg: That’s cool.

What is Greg Up To?

Paul: What else are you doing? What’s your days look like now that you’ve sold a company, work remotely, I would imagine. You probably have the same offices. Right?

Greg: Yeah. We have the same office. We’re one of two locations now for Barracuda in the Boston area. And the plan is to keep it the same way for the first, as far as I know, for the foreseeable future. And I spend a lot of my time on a focus of technology evangelism and also business development for the company on the product area that Sonian was responsible for. So I’ll be in Toronto next week meeting with partners and then going to CloudFest in Germany the week after. It used to be called World Hosting Days. I didn’t realize it got re-named, so I’ve been to WHD a few times, but it’s called CloudFest now. And I’ll be giving a presentation on the pros and cons at InfoSec in Orlando the week after that. So it’s an interesting time.

Paul: Yeah, you are busy.

Greg: Yeah, it’s good stuff. It’s a wide variety of activity. It keeps me close to the end customer and that’s what I crave, is hearing the feedback. What problems are you wrestling with? And always thinking of what is the best way we can help them solve the problem for that customer.

At Sonian, we were sort of had the indirect model. So we sold to a partner.

Paul: Right. So you were one step removed.

Greg: And we always were challenged with what does the end user, what does that end business need? And, you know, oftentimes our partners were really good at translating, but for many cases, we were the domain expert for the partner in this area that we focused on – email archiving kind of stuff – and we had our ideas about what was needed, but we always wanted to hear from the end customer.

So now with Barracuda having, hundreds of thousands of end customers, there’s a wealth of opportunity to engage with that business audience.

Paul: Will they change the model to be less partner driven and more direct?

Greg: I think the model is going to stay basically the same but we have a pretty diversified go-to-market engine. There is an MSP focus with Barracude MSP. There is now Barracuda OEM, which is what Sonian was, is. And then there’s the traditional channels and direct sales that they do for the security data protection products.

Is Archiving Messages Relevant?

Paul: So you’ve seen this, that we’re collecting all of this data over time. And how relevant is it that you have a message from 10 years ago in your archive?

Greg: You ask different people, and different people would have different opinions. I appreciate having a durable archive of things. I love using Gmail and typing into to search box and just seeing conversation histories and, if something happens to be 10 years old but it’s relevant, I think that’s valuable, and it doesn’t cost me any money to save it. It’s not dragging down my productivity to have it around. It’s there if it want it. And I’m personally not worried about discovery of stuff. I like having an infinite kind of repository behind the scenes.

I just recently stumbled upon a USB drive that I thought was empty. It turned out it had my PST files from a couple of different jobs ago. I thought, I should just load this up into my client so that I have an even further, longer-term library back, in case I run into people I have communicated with and that kind of stuff. So, it sounds a little bit like a packrat, but it’s not. And I think it’s valuable.

Paul: Well, it’s relationships.

Greg: It’s relationships. I want to use this to train future things, analyze my communication patterns and help me do better going forward, that kind of stuff.

Now for businesses, there’s pros and cons of retaining everything for forever. Sometimes they can’t or they shouldn’t. They have thoughtful policies on how to age stuff out nicely with an audit trail so that you know what you got rid of, and you can defend on in court kind of thing. And some companies are still very rigorous around they don’t want anything past a year. They don’t want anything after six months. And some are the opposite. They only see the value in keeping it and then to be able to correlate it with other records in the company like what’s happening in the CRM, what’s happening in the ERP, what’s happening in the HRIS systems. You start to get this wealth of analytics that can help drive better businesses decisions down the road. So I think that’s a very interesting area to work on in the future.

Archiving Family History: Storing Data for Perpetuity

Paul: What is your thoughts on sort of, I mean, you’re being very thoughtful about keeping your history of information. So you’ve sort of gotten this history. You put the old PSTs in there. And, and I’m struggling with some of the concepts around like family history and old photographs and things like that. I saw another YouTube thing. Norm McDonald with talking about when you talk about your great grandfather, you have one picture of him. And, he said, “In 10 years” – in the typical Norm McDonald – “you’re going to have a million pictures of your great-grandfather.”

Greg: Wow. So true.

Paul: And everything he said. Everything. Moment by moment. And so, as I have noticed with our kids growing up, they never met my father. He passed away long before they came along. It’s out-of-sight-out-of-mind. At some point, they may think about it and say, they get the nostalgia, maybe in their 30s or 40s or something and want to go after it, but it’s on a disk somewhere, in a closet after, maybe, I’ve passed away. And it is a very interesting conundrum.

And that’s just for normal families. But then you have these people that contribute intellectually, that do something more than that, they write a book, or they do all this different stuff. It used to be that you’d go in, and they’d get all their papers and look through them and maybe publish things. Well now, they’re on disks somewhere.

I’ve got this notion for a business of sort of perpetuity. How do you store stuff for perpetuity? Because, they may not be relevant for 20 years. It’s just an interesting thing because do you just say, okay, somebody died. They wrote a several different books. They impacted a bunch of lives. Delete? It’s so easy to store, but how do you perpetuate it? And then how do you also make it available in the universe so that people can discover it? It’s an interesting conundrum. It doesn’t seem like it should be all deleted and thrown away on an old hard drive.

Greg: Yeah. It’s funny you mentioned this. It’s something I think about similarly and from different perspectives. I ran into a local tech seed investor who was describing a similar set of concerns that he had. He was querying me about whether things I did at Sonian could help solve that. And, very, very tangentially maybe, but it wasn’t as encompassing as video and audio and harvesting seed records.

Sometimes I think like Facebook wants to be that at some level as well. You know, they want to be the source of everything. But to self-serve it their own. And then there is the internet archive projects and all these different – whether they’re dot-orgs or paid-for services, was it Memory Box? You could put all your stuff into a… Like all your physical media and ship it off, and they digitize it. That has to be part of what you’re talking about.

Paul: Sure. Yeah. I’m doing the scanning of all the photos.

Greg: Right. Right.

Paul: And then I’m wondering, why am I doing this because is anybody ever going to look at them?

Greg: Yeah. And then analyzers will tell you who’s in it and how old they are and give you more details around it that makes it searchable – that index that you really want, because it’s the index that’s really going to be important of all this content that will probably live on the cloud. And then when the cloud becomes passé, it will live on a super high-powered box you have locally that will never die because it’s so durable. The pendulum is always swinging, right?

Paul: Well, I remember – I don’t know. It was probably in my teens or 20s when I learned about all of the archives at Ellis Island. My family came through Ellis Island. So it was like, wow. That’s really cool. Well, now we have the same thing but it’s not, it’s not stored in a ratified place, to say, this is where it’s stored. But we have it to the 9th degree. You know, we have all these details of these people’s lives. And I just worry about where is it going to go?

Greg: Yeah. How do you pass it on? How do you grant access? Insure, how do you sort of donate it to the public records? The Morman Church does a lot of this in terms of records online and so for a searchable database.

Paul: But they’re only doing it to the genealogical. That’s their interest is genealogies, but I’m saying me playing baseball when I was15 years old in a league. There’s pictures of that. Does that matter to anybody? I don’t even know.

The other thing that I also struggle with a lot is a sense of place, is that there’s not really a good place that says, here’s what’s here today, but here’s what’s here. Here’s what was here 20 years ago or 10 years ago. And the less we do of that, the more we’re losing, because you just don’t know. There’s the history of it is gone, I guess.

Greg: Yeah.

Paul: So those are some things that I’m struggling and thinking through. It’s like, well, what do I do?

Greg: Big brain questions.

Paul: Yeah. Exactly.

Greg: Yeah. I love thinking about that kind of stuff and anticipating maybe things that you could create that would help others sort of who are figuring this out or have a pain point in that area. There is something there. And there’s a couple of different things that are coming, vectors into it, lik the scanning of the media stuff as a service, so you don’t have to worry about it. And that’s a lot of friction to do it. No one has the time, and it becomes one of those rainy-day things you never get to. And then who pays for the storage and how do you pass it on to your heirs? And how do you search across it and analyze it? And then there’s privacy issues. So there’s a lot of things to consider.

Paul: It is.

Greg: It’s a meaty kind of subject.

Paul: Yeah. So well maybe if you have any thoughts on that, let me know. I’m very interested in that.

Greg: Yeah. I can connect you to this other person that was thinking or interested in this, more from like wants to use a service like that because they don’t have it, and they’re worried about records for their kids and ancestors and so forth.

My grandmother and her sister were very much into genealogy, going to cemeteries and rubbing gravestones and they actually wrote books for our family, internal books.

Paul: See, now that’s cool. That’s really cool.

Greg: And it’s a really nice thing to go back and look at occasionally. That’s all different now with online versions of everything. So, it’s really more the index and search-ability, I guess. That’s where some innovation could happen, as well as removing the friction of digitizing the physical assets that we have all around us that we want to get up into the cloud, so to speak.

Paul: Yeah. I think one of the, the coolest things that I’ve ever seen is the Google Face Movies. You know, in Picasa they introduced it, where you could do a person over time. It’s really cool. It’s really familial, if you will.

How Can the History of Places Be Digitally Preserved

Greg: And now, like even you’re mentioning what was the place looking like over time, like Street View, if it’s been a long, long visited place, you could go back in time and look at it, as long as they’ve been recording it.

Paul: That’s cool. Yeah. That’s cool. But I can always remember. There’s this department store called Big N that was at the one end of town that we used and I used to buy my plastic models there. And it’s gone. And if you’re not 50 years old, you have no concept that that it’s a K-Mart or something, and then now it’s probably closed. And it’s really like what’s there? Even this building. This used to be Bay Bank.

Greg: Oh, wow.

Paul: And the room we’re next to, there’s a safe that’s the size of a car. That’s where they put the checks that they were cleaning every night. They were physically clearing the checks.

Greg: That’s a really cool history.

Paul: And this office is where they did that. So it’s like, that’s a cool piece of history and that’s not anywhere except in our heads, and there’s no geotagging way to deal with that. So, anyway, some of the things that keep me up at night.

Greg: And a place for people who have the memories can contribute into the system and others can add to it or double check or verify. It feels like the Googles of the world have the infrastructure for that and potentially the resources like financially and sort of like, hey, let’s just go do it because we can and without having to have a business case.

Paul: Right. Exactly. But this is how businesses get born is these kinds of conversations to say, this would be really cool. And I think what you’re pointing out is that the technology now is… 20 years ago, there would have been… Oh, gosh. I mean, think about building YouTube 20 years ago. Oh my gosh. Who’s going to pay for the storage? But now, like you’re saying, we can buy these components, these utility computing things and just do it and see how it grows.

Greg: It’s going to foster a huge amount of exponential experimentation and potentially you solve solutions to problems that plague us today that we felt almost insurmountable.

No End of Things to Get Excited About

Paul: Have you done much, any, anything in the Maker Space stuff or being a maker? Because that’s really what you were, is probably a maker.

Greg: Yeah, yeah. It’s funny. I haven’t. I haven’t dabbled in 3D printing. It just feels like that’s something I keep saying, oh, that’s when I get more free time. I’d love to get involved with that.

Paul: They are exponentially improving every year. So it’s sort of the longer you can wait, the better it gets.

Greg: I didn’t mean to say 3D printing is the Maker Space but I was at, are you familiar with Twilio, the AP, telephony? I was at their customer conference last year, and they’re fostering a lot of hardware innovation around devices that integrate physical devices that implement their protocol and so forth. And there is this representative from a consortium of Chinese manufacturers that sell to the maker space, and I’m drawing a blank on the name of it right now. But it’s, you can add it to the show notes. I have the card at home. And it was just like a marketplace of everything you could have want, you could imagine. Remember the Edmond’s catalog?

Paul: Yeah, yeah.

Greg: So it was like that, like on like steroids. Anything you had an interest in making, you could get the, like the parts for that through a marketplace, like an Alibaba type of thing.

Paul: It’s not Banggood?

Greg: No, it has like double Es in it, like three or four Es in it.

Paul: I’d like to know that. Have you done much with like Arduinos and Raspberry Pi and things like that?

Greg: Nah. I have a couple. Just played around with it.

Paul: Oh, they’re some cool stuff. They’re really cool stuff.

Greg: Yeah. I have friends that are doing this, and they’re doing things with drones and all that kind of stuff, and getting the drone racing.

Paul: Oh, really? Oh, I hadn’t heard of that.

Greg: Yeah. It’s becoming a thing.

Paul: Is that really?

Greg: Yeah. So as electronics get lighter, faster, all that kind of stuff.

Paul: Oh, that’s cool.

Greg: Yeah, putting on virtual reality, augmented reality stuff. Watching it, kind of from afar and getting… Your know, maybe I’ll take a step in that direction. I didn’t jump on the Google Glass thing when it was on the first iteration, but maybe the next one I’ll figure that out.

Paul: And Entel’s got something, some sort of glasses.

Greg: Yeah. That seems pretty cool. So, yeah. No end of things to get excited about.

Closing

Paul: So, alright. Well, we’ve been talking with Greg Arnette, and what’s your official title now?

Greg: Technical evangelist, business development for the OEM platform.

Paul: Of…

Greg: Barracuda Data Protection.

Paul: Okay. Barracude Data Protection.

Greg: Yeah. That’s the group that I’m in. Yeah.

Paul: Okay. Cool.

Greg: Yeah, it’s like an exciting opportunity.

Paul: So, good friend, great insights. We’ll hopefully see you soon again.

Greg: Thank you for the opportunity to get together. This has been a great conversation.

Paul: Excellent. Thank you.

Greg: Thanks.