Category: b.r.m.

BCR: yesterday's news today

The term 'Binding Corporate Rules' (BCR) first appeared in the EU Data Protection Working Party in June 2003. The idea was to create a flexible instrument for data transfer that would also meet the requirements of data protection law. The result was a procedure that allows companies to individually structure data protection when transferring data to third countries, provided that the Binding Corporate Rules applied meet certain minimum standards.

These included, among others:

1. development and implementation of a security concept 2. data protection training for employees 3. mandatory participation in an audit program 4. payment of compensation in the event of violations 5. regulated complaints procedure 6. assurance of transparency 7. definition of the scope of application.

The advantage of the introduction of 'corporate binding rules' seemed to be the possibility of individually structuring data transfers to 'unsafe third countries'. The main disadvantage was the high organizational effort and the lengthy review process. However, as data protection was subsequently not guaranteed even in the 'safe third countries' (see, for example, the Facebook scandal and Cambridge Analytica), a European General Data Protection Regulation (GDPR) has now replaced a European General Data Protection Regulation (GDPR) the BCR. The new regulation provides for unexpectedly high penalties for companies that do not handle data protection responsibly.

CPU: The smaller, the bigger

The 'heart' of every computer is the CPU. This Central Processing Unit (CPU) is a miniaturized computing chip that processes defined computing processes ('algorithms') according to its 'architecture' of semiconductors (or 'transistors'). CPUs are no longer only found in computers, but nowadays also in washing machines, cars and ticket machines, for example.

A CPU consists of several components. The arithmetic-logic unit (ALU) forms the center. It is supplemented by the control unit, which primarily manages addresses. Registers and a memory manager (Memory Management Unit or MMU) complete the core of the chip.

Small 'helpers' - or co-processors - support the central processing unit in its tasks, for example by performing floating point operations. Today's CPUs are designed as multi-core units, which increases parallel processing and the speed at which tasks are solved. The data lines ('buses') ensure communication with the other components of the computing system, especially with the main memory. 'Caches' (intermediate memory) enable rapid further processing of partial results.

The choice of processors used in a company should be based on the tasks to be performed. The most expensive solution is by no means always the best or most efficient. Just ask us ...

Ransomware - ransomware solves nothing

The number of cases where a 'ransom' is to be extorted by blocking the computer is increasing. The user of a computer sees a 'demand' from the attackers on the monitor instead of the usual working environment, but their data is encrypted. The perfidious thing about this is that the method itself is increasingly becoming a hindrance: If the victim responds to such a demand, their computer usually remains blocked anyway. Only very rarely can you 'buy your way out' with Bitcoins. Whoever pays therefore looks just as stupid as the person who refuses to pay. Which increasingly takes away any 'business character' from the use of 'ransomware' ...

Ransomware has long worked independently of the operating system. Whether Linux, Mac OS or Windows, all users are affected by this digital form of highway robbery. The instructions for building the ransomware, the so-called 'CrimeWare kits', are circulating on the DarkNet. The program often does not encrypt the entire computer, but mainly the data that is important to the user, such as the 'My Documents' folder under Windows.

Protection against ransomware is very similar to protection against other viruses or Trojans. For example, a user receives an email with the attachment of an unpaid invoice, with a threat of punishment from the Federal Criminal Police Office, or with alleged usage violations by GEMA. Anyone who opens such an attachment has already handed the blackmailers the 'house key'.

You should therefore NEVER open an e-mail attachment that does not come from an absolutely trustworthy source. GEMA and the BKA still use good old snail mail. It is also important to regularly back up all relevant data on external data carriers, as this keeps it out of reach of the blackmailers. Browsers can be protected against the execution of critical Java commands by installing applications such as 'NoScript', and even ad blockers offer increased protection.

All right - that's how good we are!

From the very beginning, the IT service provider b.r.m. has been a member of the Bremen-based 'Partnerschaft Umwelt Unternehmen'. The aim here has always been - and still is - to find the best possible solution for both employees and the environment. The technical term for this is 'work ecology'. In the university-affiliated working group 'NaGut - sustainable good work', this work ecology approach is tested in practice - with the help of advice, research and training. This working group has now published a brochure in which particularly successful models of implemented work ecology are presented. On pages 8 and 9 you will also find a company portrait of us ...

Healthy digitalization?

The introduction of e-files, digital business models, new software functions, documentation, project planning 'on the run', constant availability - the rapid pace of digitalization is not only overwhelming employees, but has also long since overwhelmed many employers. The pressure to implement is increasing, while at the same time there is a growing fear that one's own skills and job security could be automated tomorrow. This fear is no longer limited to 'simple tasks', but also extends to the 'carpeted floors' - for example, in accounting as well as with lawyers and notaries.

As a result, the number of mental illnesses is rising and rising: psychological stress, burn-out, depression. No technical revolution in the history of mankind has taken place at such a speed as digitalization. One of the reasons why this change should be accompanied by psychosocial support ...

The letter carrier is called 'Domain' ...

Without a clear address, no message reaches the recipient on the Internet; in this respect, 'virtual life' and 'real life' are similar. This address, called a 'domain', is a coherent sub-area within the Internet hierarchy that allows exact addressing. Network customers can freely choose the names of the domains - if not already assigned. They register the name with the responsible registry, the NIC (Network Information Center) of the respective top-level domain to which the endings on the far right of the Internet address refer (e.g. .de, .com or .org). In Germany, 'DENIC eG' registers all Internet addresses ending in .de.

The domain system resembles a widely ramified root system. At the top of the hierarchy is the root level, followed by the top-level domains and then the subordinate second- and third-level domains. In the address www.brm.de, for example, the 'www' is the root level that refers to the 'World Wide Web', the '.de' determines the German top-level domain, a 'brm' refers to our own domain in the second level, and possible further additions in the third and fourth levels allow precisely defined pages on our homepage to be accessed. The selection and registration of domains is a standard task, also for our for our IT service.

Impress - the page impressions

Page views - or page impressions - measure the number of page views of online content, i.e. clicks. It is primarily a commercial key figure that is determined monthly by the 'Gesellschaft für die Verbreitung von Werbeträgern e.V.' (IVW). Those who take part in the process are also subject to the IVW's regulations. To date, this includes around 1,000 fixed websites, 300 mobile offerings and 300 apps. The IVW figures are of particular interest to media providers, media agencies and other advertisers who are looking to use their customers' budgets as effectively as possible and are looking for suitable online advertising platforms to do so. Not every action counts as a 'call'. Automatic reloads, multiple visits by web robots or clicks when closing a page, for example, are not included in the figures.

It smells like quantum

Anyone who deals with quantum computers will soon find their head spinning. You will suddenly find yourself deep in the field of theoretical and atomic physics. Here is just this much: where 'traditional computers' are based on two voltage states that are either exceeded or fallen short of (the bits), a quantum computer uses the many different states that an electron can assume at molecular level (the qubits). Instead of the usual 'physical space', a quantum computer uses the 'complex space' of quantum mechanics. The computing power increases and completely new algorithms become possible. It is also clear that such computers will no longer run under Windows 10 or MacOS.

Quantum computers have not yet progressed beyond the experimental stage - up to a maximum of 1,000 qubits - even if there are occasional announcements of success, presumably to attract funding. Furthermore, quantum computers are unlikely to be suitable for commercial or private use because they generally require 'superconductivity', i.e. the loss-free transmission that only occurs near absolute zero. To put it bluntly: if you want to use a quantum computer, you first have to build your own power station. Nevertheless, quantum computers are of course extremely interesting for government and intelligence tasks: no conceivable encryption could withstand the attack of quantum-based computing power. This is what makes research in this field so interesting. We, on the other hand, assume that we will not need any knowledge of quantum mechanics for our IT service in the foreseeable future.

Sandbox: The data training ground

Almost everyone has had them in their folders: emails with dubious attachments. The 'sandbox' was created for such potential malware. Like generals who first play through the suspected course of a battle in a sandbox, the impact of the code is analyzed in a quarantine area. Some programs already have a (weak) sandbox function as a plug-in, e.g. the Java Runtime Environment (JRE). Other methods take a much more restrictive approach: the entire browser is executed in an isolation area, sealed off from all write access to the hard disk. Any attempted access is redirected to a separate subdirectory that can be easily deleted. Possible 'malware' does not reach its target. Others build a 'virtual machine' (VM). The computer is simulated on a software level, isolated from the real computer in every respect. Only a 'virtual prison' is then 'infected'. Attempts at system changes, the creation of new network connections or the unmotivated opening of files are always considered suspicious.

Excellent as a trainer

In the digital sector, many paths lead to ROM. There are career changers, online students and do-it-yourself experts. As one of the first regional IT companies, b.r.m. has now been recognized by the Oldenburg Chamber of Industry and Commerce for its "outstanding achievements in vocational training". We would like to thank you for this honor, also on behalf of the many partners with whose help we have been able to pave the way to a successful future for young people. You can find the certificate here ...