German Cloud Provider receives Trusted Cloud Certification

The first company to meet the TÃœV Trust IT requirements has been announcedTUV:

Die Kunden sind vollständig voneinander getrennt und können die Produkte je nach Bedarf skalieren, um flexibel auf ihr Business reagieren zu können. Zusätzlich werden umfassende Zutrittskontrollen zu den Gebäuden des Unternehmens, Datenzugriffskontrollen und regelmäßige Stresstests der Infrastruktur sowie eine systematische Notfallplanung durchgeführt. Besonders hervorzuheben ist, dass die Host Europe GmbH die Daten ohne Ausnahme in eigenen deutschen Rechenzentren unterbringt und somit die deutschen Datenschutzbestimmungen und Gesetze gelten.

Here’s my translation:

The customers are completely separated and the platform can scale as needed to flexibly respond to demand. In addition, the company has extensive access controls for the buildings, data access control and regular stress testing of the infrastructure as well as systematic contingency planning. Most noteworthy is that Host Europe GmbH cloud solutions are located only in German data centers and thus accommodate German data protection regulations and laws.

US Navy orders fuel for Green Hornet

Wired reports that the F/A-18, dubbed the green hornet in 2010, will receive a new shipment of biofuel.

Two companies will split the Navy order. Dynamic Fuels, half-owned by agribusiness giant Tyson Foods, converts fats and waste greases into biofuels. Solazyme uses algae as a means of fermenting everything from plant matter to municipal waste into fuel. Both are considered leaders in the next-gen biofuel industry — Dynamic is one of the first companies in the field to have a commercial-scale refinery up-and-running. Solazyme has already delivered 150,000 gallons of its fuels to the Navy.

Substantial hurdles remain, however. The Navy paid about $1,000 for each barrel of biofuel it bought to test out in its jets. This new purchase will cost just as much: $26 per gallon, or $1,092 per barrel. (In contrast, old-school jet fuel is currently trading at $126 per barrel.)

$1000/barrel? That’s a lot of green (pun intended). The Navy claims the price is now half as much as the same fuel cost them in 2009. Perhaps it is a true bargain when compared to other Pentagon initiatives of the past like the $435 hammer.

The hammer contract has been investigated by Congress, discussed during the 1984 presidential debates, and used as Exhibit A by politicians, journalists, and businessmen in their recent calls for military reform.

But here’s the rub: the DOD didn’t pay $435 for a hammer. It’s a good bet we paid too much for it (for reasons related in part to something called the equal allocation method and in part to larger problems in defense procurement). But the Pentagon didn’t pay nearly $428 too much.

Aside from the accounting oddities in the story, it is no secret that innovation brings with it a higher cost than just production. It is the same argument used by the oil industry to ask for help subsidizing their exploration. And of course if you factor in the cost of overseas American military operations to protect petroleum into the current price of petroleum (e.g. defending foreign soil) then “old-school jet fuel” might not seem so inexpensive.

The bottom line is that domestic and localized production of fuel for military vehicles is a far more secure model with a much lower total cost over time.

“The Navy has always led the nation in transforming the way we use energy, not because it is popular, but because it makes us better war fighters,” stated [U.S. Navy Secretary Ray] Mabus.

[…]

The biofuel will be mixed with aviation gas or marine diesel fuel for use in the Green Strike Group demonstration. It is a drop-in fuel, which means that no modifications to the engines are required to burn the fuel. Its cultivation did not interfere with food supply and burning the fuel does not increase the net carbon footprint. In preparation for this demonstration, the Navy recently completed testing of all aircraft, including F/A-18 and all six blue Angels and the V-22 Osprey, and has successfully tested the RCB-X (Riverine Command Boat), training patrol craft, Self Defense Test Ship, and conducted full-scale gas turbine engine testing.

Although the U.S. is still in the early phase of military testing and trials I suspect the results will filter into the civilian market in the next five to ten years. The new fleet of 120 mpg high-performance cars may therefore run on waste grease or algae thanks to gov/mil innovation and investment, as I presented at BSidesLV 2011.

Video from the Navy of what some now call the earth-friendlier killing machine:

Rwandan ATMs to Dispense Cash with PIN Only

Last month I wrote about the shift in threats to ATMs. Explosives and cash trapping are on a sharp rise. The ATM Security 2011 conference in London confirmed this but also speculated that insider threats using malware attacks also will rise.

The conference highlighted that 80% of unauthorized withdrawals against European chip cards now come from American ATMs. It also had a couple presentations with control suggestions for solid and gas explosive attacks.

The increase in the number of ATMs in unsecured locations has presented criminals with new opportunities for brute force attacks such as burglaries, explosive attacks and ram raids. This case study will show how the use of an indelible security ink can successfully mark cash as stolen in the event of an attack.

But the most interesting ATM security news of late is an announcement from the Banque Populaire du Rwanda. allAfrica reported yesterday that people with a mobile phone and without bank accounts can now withdraw money from the ATMs using only a denomination and a PIN-code:

[The Bank’s Head of Marketing and Product Development, Richard Ndahiro] explained that a BPR account holder can send money from his/her bank account using a phone to the receiver who gets a pin number and the amount.

“The receiver pushes a pin code and amount received on the mobile phone on any BPR ATM to access the money,” he said, explaining that the bank has introduced alternative banking channels and streamlined its operations for better services.

Currently, BPR has over 1.4 million clients, with 190 branches….

It is free for both sender and receiver. Of course mobile phones may be shared, so it could be people without mobile phones and without bank accounts can withdraw cash from ATMs. In other words cash can be withdrawn without any trace of identity information for the cash recipient. This seems to be a new direction from the South African FNB system, which used mobile phones as authentication to replace ATM cards, and quite unlike the fingerprint requirement of NCR.

While the card brands say America is past the tipping point for chips to be added to cards to reduce cash withdrawal fraud, Africa appears to be quickly headed towards obsoleting cards altogether.

Emperor Penguin Endangered

The Center for Biological Diversity today announced a formal petition to the U.S. government to protect the emperor penguin with the Endangered Species Act

In 2006, the Center filed a petition to list 12 penguin species as threatened or endangered. The Interior Department conducted status reviews for 10 of those species. After delays and ultimately a court order, the agency protected seven species but denied protection for the remaining ones, including the emperor. Today’s petition presents new scientific information demonstrating that emperor penguins are imperiled.

[…]

Listing under the Endangered Species Act would provide broad protection to these penguins, including a requirement that federal agencies ensure that any action carried out, authorized or funded by the U.S. government will not “jeopardize the continued existence” of the penguin species. For example, if penguins are listed, future approval of fishing permits for U.S.-flagged vessels operating on the high seas would require analysis and minimization of impacts on the listed penguins. The Act also has an important role to play in reducing greenhouse gas pollution by compelling federal agencies to look at the impact of the emissions generated by their activities on listed species.