The Future of Telephony?

[Zoe Brain is on assignment this week, but don't worry, she'll be back!]

As a child, I remember watching Star Trek’s Lt. Uhura with her wireless earpiece.  Today I use a similar peice of “science fiction” in my car so that I can keep both hands on the wheel.  In a generation we’ve gone from rotary dial telephones to mobile phones with wireless headsets.  From landlines to VoIP.  From dollars to pennies per minute to call other continents.  From hurried calls home to videoconferencing with the kids using Skype.

The telephone has become universal across most of the world and in many places wireless services are slowly but steadily displacing Plain Old Telephone Service (POTS) lines.  It’s easy to understand why a young person moving out on their own may simply not feel the need for a land-line.  After all, their friends all just call (or text) their mobile.

I’m wondering what’s next.  Will the land-line survive?  For how long?

According to my tea leaves, we’re one generation away from the death of the residential telephone service because only a few things keep them alive:

  • Mobile phones are too expensive in many areas.  While some US carriers are offering “all you can eat” plans, Canadian carriers aren’t there quite yet;
  • Most residential alarm systems rely on POTS lines; and,
  • Us ‘old’ people who are used to having them.

Over time, all these conditions will change.  I’ll be sure to save a touch-tone wall phone for the grandchildren — because they’ll probably never own one.

It’s Not Secure

Security is a hot topic today, at least partially thanks to the Internet.  It’s not that the Internet is good or bad – it’s neither – but rather because of the connectivity that the Internet provides.  Just as the car made it possible for criminals to seek out targets farther away than horses could carry them, the Internet enables criminals to seek out victims around the globe at the speed of light.

Over the past 15 years we’ve all had to learn about new methods of crime and how to protect ourselves.  That takes time.  And whether you live in an upscale urban neighbourhood, out in the country, or in a dangerous inner-city neighbourhood, to Internet fraud artists you’re just another potential victim.  That fact helps make security a hot topic.

Unfortunately security is also being used as an excuse, and I cringe whenever I hear the phrase, “It’s not secure.”  The problem is that we seldom talk about what security really means and we often misuse the word.  For example, we install a certificate on a web server and call it a “secure” server.  But is it?  An endless stream of vendors tell us that their products are “secure”.  Are they?

Part of the problem is that we’re not asking the right question: “Is it secure enough?”  There is no such thing as a secure building, a secure server or a secure application.  However, there are buildings, hardware, and software that provide high levels of security against specific threats. They are, in effect, secure enough for a specific purpose.

In some cases when you’re told at work that something “is not secure”, what the person means is, “that’s not secure enough” or “that doesn’t meet our security requirements.”  But it might also mean, “we just don’t want to do it,” and unfortunately there’s a lot of that going on. 

Security is a risk management discipline.  The goal of a security organization should be to help the business manage risk while embracing whatever technology the business needs to advance, compete, and thrive. We’re long past the day when simply saying “no” is an acceptable answer.

So next time you’re told that something “is not secure”, do us all a favour and ask questions.  What are the specific risks?  What can be done about them?  And next time a vendor tells you that their product is “secure”, “completely secure”, “absolutely secure” or other nonsense like that, call them on it.

Next week I’ll look at the topic of risk assessment and how we can determine risk levels and what to do about them.

Page 2 of 212