Mind My Own Business

People often react to my use of social networks to "check in" at a location,  regularly posting my adventures in travel, food or special events. Those of you who may follow me on Facebook pretty much know where I am or where I am headed, what I am eating, drinking or cooking, and sometimes the people who are with me. "Why do you want everyone to know where you are and what you are doing?" I am asked, "Don't you want some privacy in your life?"

Allow me to explain.

First, I segregate my network activity into social and business, and while there may be occasional crossover, these social posts are purely for fun. My social posts are done using Swarm (successor to Foursquare), Facebook and a personal Twitter account. More recently I started posting via Instagram in an effort to keep up with current trends. The accounts are connected so, for example, a Swarm check-in automatically posts to Facebook and tweets. Similarly, my Instagrams also post to Facebook and Twitter.

My friends, family and I all derive a certain pleasure in sharing. I know this from the "likes" and comments garnered over the years. With people segregated in both time and space, this turns out to be a great way to keep everyone apprised of events, however important or mundane, in my life. Whether its a simply an extraordinary meal at a local restaurant or family wedding photos, what better way to 'broadcast' this small chapter of your life to those who care? Followers can choose to view, react or ignore each however they please.

So, what about privacy? Well the most effective means of keeping something truly private is to not tell anyone. So where I want privacy you are not likely to see any posts.  It's that simple.  Most of the time I have nothing to hide and no reason to be secretive. In fact, there have been a couple of instances where posting my whereabouts has lead to an unexpected and pleasant chance meeting with a friend or family member. Unless you are ducking bill collectors or the mob, why not let people know you are around?

Posting on LinkedIn, Google+ and my business Twitter persona are whole different kettle of fish. There the main purpose, as it says on this blog, is to educate, inform and sometimes entertain in a professional way. On these networks I share my blog posts, business knowledge, experience and even pieces of useful information gleaned at seminars, conferences, events and publications. It is important to remain informed, connected, active and visible in today's business world.

That's how I leverage social nets to keep friends and family informed, share life experiences and to remain ever present among my colleagues and peers in business.

How does that differ from what you routinely do?

Captain Joe

Follow me on Twitter @JPuglisiLLC

Thoughts on Immortality

This morning I read yet another article declaring how some current piece of technology will soon be dead and gone. This time it was that conventional, spinning storage medium we call disk. Solid state devices are getting cheaper and faster and more efficient and so naturally all those floor space mongering, power hungry, heat generating mechanical antiques are going to simply vanish.

I disagree.

The truth is none of this stuff ever really dies. Of course you don't encounter many 3.5 inch floppy disks any more. But we can cite an almost endless list of technologies that the prognosticators have assured us are destined for the the grave, most of which are still around.

For instance there are still as many or more lines of COBOL code in production today as there are in any other computer programming language. Mainframe computers abound. Even the RIM Blackberry is still with us despite Apple and Android, and the company's own missteps. Pagers and PDAs still sell well years after the advent of the ubiquitous and all powerful mobile device. The list goes on and on.

In fact, outside the computer realm, people continue to read books and magazines, VCRs are still around and so are CDs. According to the CEA, digital cameras, e-readers and MP3 players are among the top gift holiday items. Even vinyl records have enjoyed renewed popularity and are staging a comeback. Heck, I own a hand cranked phonograph and a collection of 78s.

Okay, the phonograph is an antique and, though it works, I don't actually use it to listen to music. But the point is many of these things are very much in daily use many years after the prediction of their demise. If you expand your view outside of the US there are even more so-called obsolete devices very much alive and kicking.

Perhaps they aren't written about as much or advertised as heavily and so they slip quietly into the background of our minds. They are no longer the newest, hottest or sexiest thing on the market. But news of their death, as one famous author is reputed to have said, has been greatly exaggerated.

Captain Joe

Follow me on Twitter @JPuglisiLLC

The Danger Within

Security is surely on everyone's mind these days.  One merely has to pick up a newspaper, magazine or visit news sites on-line to read about the latest incident involving the release of personal data, confidential corporate files or government secrets. As a direct result of the rash of these high profile incidents, articles and presentations abound on the need for better means of protecting our information.

Some of the focus is on better educating the person at the keyboard, since they are most often the initial crack in the armor. I have even advocated for this in previous columns.

We are inundated with demands for better, more complex passwords, two-factor, three factor or biometric and other means of authentication. We must have improved edge security, faster intrusion detection, the latest anti-virus and web filtering systems. Network equipment vendors try to outdo one another with increasingly sophisticated methods of preventing unwanted visitors, while the security related software companies race to stay ahead of the nefarious individuals exploiting holes in the code by spotting the latest attack vectors.

What we do not hear enough about is an effort to ensure there are no holes in the code to exploit. In my recent work with the NAiC investor group I had an opportunity to learn about several companies with tools that automatically read and evaluate software code. These tools can be used to find logic flaws and identify opportunities to improve code efficiency. But importantly, they can also highlight potential security issues allowing these dangerous holes to be plugged before the code is ever released for use.

Major corporations, particularly software houses, routinely have a QA group perform reviews. But the priorities of the company and demands of the marketplace often push the code release ahead of a complete review. Moreover, the QA department is often the poor, red-headed step-child with little power to truly complete the mission. They are only there to make sure the code doesn't crash the system or fail to perform in line
with some option on the menu.

Until we make the quality and especially security of applications as important as meeting the date we promised our customers new features, we will always run the risk that some employee will unwittingly allow malware to evade all the perimeter defenses and take advantage of flaws, infecting systems, stealing data or taking control.

Captain Joe

Follow me on Twitter @JPuglisiLLC

The Static Role of the CIO

Frankly, I am growing tired of hearing about the changing role of the CIO. It's the same tired story being told over and over again. It is no different than the heralding of all of the other dramatic changes in technology, each supposedly changing all the rules and creating new challenges and opportunities for business.

Why do we single out these particular senior leaders and judge them by standards different from the other members of the C-Suite?  Surely the tools and techniques, problems and issues the CFO deals with have evolved over time as they have for the head of Marketing, Sales and business leaders in general.  Yet, the people who occupy these senior roles have not been repeatedly threatened with extinction.

Could it be because the members of the C-Suite are not focused on the tools of their trade but rather bring their knowledge, experience and discipline to bear on those most critical aspects of running the business and meeting their specific criteria for success? Sales, quality, customer satisfaction and, yes, even profitability are some of the key concerns of these top managers. They strive to please their customers, shareholders and employees.

As a member of the C-Suite this is what a true Chief Information Officer focused on 20 years ago and what CIOs will focus on 20 years from now.

Whether your data center is in the basement or the cloud is not the issue. Is it operating efficiently, with speed and agility? Waterfall, agile, extreme or whatever may come next is not the question but rather, are the developers delivering the capability to run the business? Buy or build is not the question. Are we investing our limited capital in the manner which generates the best overall return.

I would argue simply, if your focus has been on managing technology and not managing the business, you never were a CIO.

Captain Joe

Follow me on Twitter @JPuglisiLLC

All Clouds Are Not Created Equal

Every CIO is constantly challenged by management's demand to control operating costs, maintain a high quality of service and yet support the ever growing needs of the business. Add to that the new pressures of transforming the company to compete effectively in the new digital economy.

We are all familiar with the triangle of price, quality and schedule. The conventional wisdom is you can have any two out of three -- but rarely can you achieve all three. If you want it fast and cheap, it isn't going to be very good. Add a strong desire for quality into the equation and keep the time frame short, and costs are likely to soar.

Enter the "Cloud." This is a latter day timesharing, service bureau or remote computing model (for those of us who have been around a while) with a bit of a twist. The platforms, tools and software systems available today truly enable computing power to be delivered as a utility to anyone, anywhere and at any time.

The cloud presents an opportunity to push routine or commodity services out the door, reducing the burden on internal resources, increasing agility, flexibility and predictability of costs. The cloud makes it easy to scale up and scale down as needed, and can free limited internal resources to focus on higher value projects.

But with these benefits come new concerns. The top of the list is always security. How can we be assured our data will be safe from theft or misuse when we put it in the hands of some outside data center operators? Clearing that hurdle brings us to other make or break decisions. Does the provider offer the platforms, API or software tools that are needed to run our applications and support the business? Can I meet all of my regulatory obligations?

Assuming we can identify a player or players that meet these and other necessary criteria we eventually turn our attention to cost.

Here is where it becomes really interesting because costs are not always that predictable. For Software as a Service (SaaS) we can apply the rates per user per month and have a reasonable estimate of the cost. However, this is not as simple in other types of cloud services such as Infrastructure as a Service (IaaS) where costs will depend heavily on the actual resources consumed by our application.

We can estimate resource consumption and, using published rate charts, try to predict the cost. But it turns out this may not be a fair basis for comparison. Research shows not all clouds are created equal. A series of benchmarks run by Krystallize Technologies demonstrated the same workload run on identical machines provisioned at different cloud service providers will yield different performance levels. This would suggest we will can expect different levels of performance for our application depending on its characteristics and the provider we choose.

That was not too surprising given different providers will have different equipment, architectures and design. What was very surprising was the performance varied within provider. The representative work load executed on several identically provisioned machines at the same provider also yielded different performance levels.  Moreover, these performance levels varied significantly over time. Keep in mind these cloud service providers operate data centers that are in a constant state of change.


While there are plenty of tools to simulate workloads, monitor the performance of an application or the network, and monitor costs, Krystallize CloudQoS™ provides the kind of visibility into the cloud that no other monitor delivers. You will be able to detect when the "sand" under the platform has shifted.

Whether you are first choosing a cloud service provider, managing an existing provider or just trying to maintain a quality of service, having the ability to measure the true performance of the platform supporting your application will be essential.

With the proper visibility, you may be able to rest easy knowing your cloud service will remain as fast and cost effective, and will continue to provide the same high quality service throughout the life of your application.

Captain Joe

Follow me on Twitter @JPuglisiLLC