In the digital age, effective communication and information management are pivotal for any team’s success. With inboxes flooding with emails and teams juggling multiple platforms for communication, it’s easy to miss out on critical updates.This is where automation comes into play, offering a seamless solution to streamline communication and ensure no important information slips through the cracks.

The Power of Automation

Automating the flow of information from emails to a team’s communication channel like Slack not only saves time but also ensures that everyone is on the same page. By leveraging Zapier to connect Gmail, OpenAI, and Slack, you can create a system that:

• Automatically detects new emails in Gmail.
• Summarizes the content using OpenAI’s advanced natural language processing models.
• Posts the summaries directly to a Slack channel.

This process eliminates the need for manual email checks and summaries, freeing up time for more critical tasks and reducing the risk of overlooking important information.

Setting Up the Automation: A General Overview

Setting up this automation involves a few general steps:

1. Integration of Services: Start by linking your Gmail, OpenAI (ChatGPT), and Slack accounts to Zapier. This foundational step ensures that Zapier can access and orchestrate actions between these platforms.
2. Creating the Zap: A Zap is an automated workflow that defines how these services interact. You’ll create a Zap that triggers on new Gmail messages, processes these messages through OpenAI to generate summaries, and then posts these summaries to a specified Slack channel.
3. Customization and Activation: Customize your Zap by specifying criteria for the emails to be summarized and selecting the Slack channel for posting summaries. Once configured, activate your Zap to run automatically.

Zapier flow: Gmail → OpenAI → Slack

Let’s test the Zapier flow to see how it works

Step 1: Gmail Trigger

The process begins with a test message arriving in a Gmail inbox. This message serves as the trigger for the Zap. In Zapier, a trigger is an event that starts a Zap. When you set up a Gmail trigger in Zapier, you specify certain criteria for the emails that should initiate the workflow. For example, you might choose to trigger the Zap for every new email arriving in your inbox or only those that match specific labels or search criteria. Once the criteria are met, Zapier detects the new email as the trigger event, marking the first step in the automated workflow. This step is crucial as it sets the stage for the subsequent actions by capturing the data (such as the email’s subject, sender, body, etc.) that will be used in the next steps.

Tested e-mail message

Step 2: OpenAI Analysis

After the email is detected by the Gmail trigger, the next step involves analyzing the content of the email using OpenAI (ChatGPT). In this step, Zapier passes the email’s data (such as the subject and body text) to an OpenAI action. This action utilizes OpenAI’s powerful language models to analyze the email’s content. The analysis can vary based on the specific needs of the workflow; for instance, it might involve summarizing the email, extracting specific information, or even assessing the sentiment of the message. This step is automated and occurs in real-time, providing immediate insights or processed data from the email content. The outcome of this analysis will determine the nature of the data or insights that are then passed on to the final step in the workflow.

Step 3: Slack Notification

The final step in this automated workflow involves taking the analyzed data or insights from the OpenAI step and posting it to Slack. Based on the results of the OpenAI analysis, a custom message is crafted. This message might include a summary of the email, key points extracted by the AI, or any other relevant information determined in the previous step.

Then, using a Slack action in Zapier, this message is automatically posted to a specified Slack channel or sent as a direct message to a team member. This step ensures that the team is promptly informed about the important aspects of the email, leveraging the analysis done by OpenAI, without having to manually check their emails.

It streamlines communication and ensures that actionable insights derived from email communications are efficiently shared among team members.

Conclusion

Incorporating automation into your team’s workflow can transform how information is managed and shared. By leveraging Zapier, Gmail, OpenAI (ChatGPT), and Slack, you can create a streamlined process that ensures important email content is quickly summarized and accessible to all team members.

Artykuł Boost Your Team: Gmail to Slack Email Summaries pochodzi z serwisu LEOCODE.

I’m going to start with quite not politically correct, yet very much true statement. We, the developers, get sick and tired, as soon as we hear “accessibility”. There is a simple reason behind it. Often times the word “accessibility” is used very wrong. Many people think that accessibility equals aria labels and making you app usable by the blind. But this is only a small fraction of accessibility.

So what “accessibility” is?

Let’s start the other way round and explain disability. We all know disability as a permanent state where a body doesn’t have all motor skills, but that’s again, just part truth.

Looking at the picture above you probably already are aware that at some point of our lives we’ve all experienced some sort of disability. Either temporary (broken arm) or situational (occupied hands). Cambridge dictionary defines disability as “an illness, injury, or condition that makes it difficult for someone to do some things that other people do”. Taking this one step farther, physical disabilities are not the only ones that exist. Any learning impairment, like dyslexia, is also a disability, but again this one in a permanent one. Taking it a step back to temporary / situational mental disabilities as well as definition “difficult for someone to do things that other people do” even not knowing a language well, regardless if it’s due to some learning impairment or that language not being one’s native tongue.

For all this, I want to introduce a better way of saying “accessibility” namely, as the title of this article states, “universality”. To me this is a better term, as we all do want our apps, documentations, articles be universally accessible by as many people as possible, regardless of their physical location and their own ability to access your content.

What “accessibility” really is, is an answer to a question “Can I get access to information?”

Here, I don’t want to focus on good HTML structures or aria labels, there is plenty great articles about that. I want you to improve your way of thinking about accessibility. I want you to make information as much accessible as possible.

Touch

We’ve all seen people, usually older, using styluses to navigate their phone. Some of us might even laught, but have you ever wondered why they do it? It’s simply because they have hard time taping on items they’d like to navigate to. This happens because, as you get older your motor skills worsen, but to be completely honest with you, I sometimes struggle to tap on the thing I’d like to. Why? Mostly because of bad UX. See it for yourself.

Looking at this map, at the first glance you realize that, tapping on the correct map pin is nearly impossible. A very simple fix for this may be grouping some nearly located pins into one that would cause the map be zoomed in to that area with nicely spread pins.

Generally with any touchable / clickable area a great rule of thumb is “could I tap it”. The more touchable area the better, but the minimum should be 48dp (or 48px / ~3rem) [what is a dp?] .

Contrast

Here I won’t say a word about colorblindness, nor any other permanent disability. Just look at the picture below.

Screens get better and better in terms of brightness, but if you never had an issue with sun making your screen unreadable, you probably live in the dungeon. This one is a struggle for every single person in the world every single day. When you create your app with bad contrast or some unusual fonts, you make it a lot worse for your users to get the information they need from you website.

An excerpt from “Refactoring UI” by Adam Wathan & Steve Shoger says:

By designing in grayscale, you’re forced to use spacing, contrast and size to do the heavy lifting. It’s little more challenging, but you’ll end up with a clearer interface with a strong hierarchy that’s easy to enhance with color later.

Leave handwritten fonts for logos, leave weird colors schemes and just make it simple. Simple is better.

Language

Simple is better, but what’s even more better, especially with language, is plain. I left this one to the end on purpose. This is a point relevant not only to copy writers or developers, but honestly to everyone. Ever written documentation? Procedure? Email to employees? A Slack message? You need to understand that plain is better. And now plain language is also an ISO standard.

I said earlier that accessibility is the answer to “Can I get access to the information?” question. What is better for that than a language. A language is the key to get out message across. Regardless of what that message is.

If English is your native language, you are in a better position, as majority of the web is in English, but keep in mind that there are millions of users that either know English as a second language, or don’t know it at all. Think what is easier to translate. I personally worked with an app where where you could have peers instead of friends, principals instead of leaders and articles could be appreciated, not liked. People sometimes think if they do things different, they will be better, but in communication this is not the way.

If you’re happy and you know it, clap your hands.
If you’re happy and you know it, clap your hands.
If you’re happy and you know it, and you really want to show it.
If you’re happy and you know it, clap your hands.

We all know this nursery rhyme, it’s one of the most popular ones that is used in English as Second Language teaching as well. If you look at it again, what do you see? There’s a lot of repetition and simple words.

This brings me back down the memory lane when I was studing English teaching. We were to create a children Christmas story, but the goal was to use no more than 30 different words. Tough challange, but has its point. Same as the nursery rhyme. That’s how we learn and understand language the best. With simple words and repetition.

An average 5–6 year old child knows 2500–5000 different words, by the age they’re 9 their primary set of words is around 5000, and secondary around 10000. If you think it’s more when you’re an adult you’d be wrong. It is basically this for the rest of our lives. We tend to use same words over and over again, and you know what? It is good! Using complex and unusual words does not make us sound smarter. It’s just making us less understandable.

Keep it simple!

Look at the examples below, they both mean exactly the same, but which one is actually understandable?

The recently implemented categorical standardisation procedure on waste oil should not be applied before 1 January 2015.

or

Do not use the new waste oil standards before 1 January 2015.

What is more, when we use longer words (8 or 9 letters), users are more likely to skip shorter words (3, 4, or 5 letters) that follow it. People just don’t read one word at a time. They bounce around, especially online, and anticipate words, subconsciously filling them in. You don’t need to read every word to understand what is written. It is estimated that people can drop around 30% of text and still understand it perfectly. An exception from that rule are people with learning disabilities who read letter for letter, and do not bounce around like other users. However, keep in mind that they cannot understand a sentence if it’s too long!

THIS IS MEGA IMPORTANT

Capital letters are harder to read. By around 13 to 18%.

Capital letters were great when you started learning to read. At first, you might sound out every letter, but you did not understood the concept of lower and upper case by the age of 6. At this point instead of letters, you start recognising the shape of words. This speeds up comprehension and speed of reading.

People do not read words, people recognise the shape of a word and understand it. It is a lot faster that way, and we all value our time greatly.

Online vs Paper

Users read very differently online to paper. They do not read top to bottom or even from word to word. Instead, users only read about 20 to 28% of a web page. Think of a letter F, that is a shape in which users browse content of a web page. they want to complete their task as quickly as possible, so they skim across the top, then down the side, reading further across when they find what they need. So, Keep it Simple. Give access to the information as quickly as possible.

Learnings?

• be concise — simple and shorter is better. Be understood, especially when you write procedures.
• address the user — use active voice
• DO NOT CAPITALIZE — unless it’s logo
• use text version of signs — and is easier to read and understand than &, same with dates use to instead of —
• Be gender neutral — use plural “they”

And make sure you use plain language, see https://www.gov.uk/guidance/style-guide/a-to-z-of-gov-uk-style for full list of words that can be easily replaced. But to give you a few to avoid that I’ve seen use quite extensively:

• collaborate, use ‘work with’
• empower, use ‘allow’ or ‘give permission’
• key (unless it unlocks something), usually not needed but can use ‘important’ or ‘significant’
• streamline, use ‘simplify’ or ‘remove unnecessary administration’

I hope that now you understand better what is the goal of accessibility. It’s simply to allow as many users access the information you want to provide in a way they can understand it as you intended. I believe you want that too.

Artykuł Universality, because accessibility is not about disability pochodzi z serwisu LEOCODE.

Reality of programmers

Let me tell you how I discovered a solution that enables me to efficiently perform my daily tasks and solve problems in seconds, not days.

I sat in my chair, hunching over with cramped hands and twisted wrists, using a small pointing device for menus and web browsing. And I couldn’t help but wonder if I was the only one suffering from what I call FWF –  Fatal Wrist Factor, or maybe I’m just a dinosaur. So I decided to ask…

What is a Neovim?

I came across a potential solution on a developer forum and decided to try it out. It’s called NeoVim, which is a version of Vim that utilizes LUA to enable scripted extensions to the editor. I quickly realized that it not only fulfilled all of my requirements, but also had a streamlined approach to keyboard commands that allowed me to effortlessly and rapidly edit my files.

I quickly picked up NeoVim and found myself completing all coding tasks much more efficiently compared to using a mouse and a full IDE, thanks to NeoVim’s approach to text editing and the extensions I added to it. The LSP-ZERO plugin fixed all syntax highlighting issues, while Gitsigns made my editor aware of all git changes in the edited files, filling all the gaps of the Vim Fugitive project for git management. Treesitter made code completion work flawlessly, and Telescope and Harpoon made NeoVim project-aware entirely. And let’s not forget Vimspector, which helps you debug all your code.

There was one thing missing, though. Not everything could be done solely within the editor. I needed the terminal – one that could be made project-aware like I did with my NeoVim. However, there were other factors that raised concerns, such as having multiple graphical interfaces open at once…

How the Terminal Multiplexer (TMUX) concept works?

The idea behind TMUX is to organize your terminals into windows, each of which can have multiple panes. You can name your windows like projects, for example, and the panels will display the currently running task in the title. Since NeoVim is already running in your terminal, you can easily script TMUX to quickly switch between projects in your folder. This creates a powerful IDE that doesn’t require a mouse.

What was all that about?

To sum up, was this just a middle-aged hippie trying to come up with an excuse to use more terminals on a modern computer? After all, one can always learn to use the mouse more efficiently and adapt, right?

Well, the answer is both yes and no. It wasn’t just about alleviating cramps, although that did help. By repositioning my screen and choosing a better keyboard, I was able to overcome the challenges of aging. However, it had some incredible side effects.

Side effects: more and faster

Firstly, it made me more conscious of the systems and tools available to me. All command line tools I used to use before I found more flexible and faster than any plugin you could add to my Visual Studio Code or any other graphical IDE, for that matter.

But it also significantly accelerated everything I was doing. By focusing on a screen full of text and knowing all the shortcuts for better and more efficient editing and finding solving issues in seconds rather than days.

And maybe that’s just my romantic nature, but thanks to all of that, I feel more like Hemsworth or Reeves now than a dinosaur with a hump and two cramped hands.

Do you want to join a team where you will be able to use the latest technological solutions? We are hiring! See open positions at Leocode

Artykuł Neovim: a way to program faster pochodzi z serwisu LEOCODE.

In this comprehensive article, we will explore the benefits, challenges, and future prospects of implementing AI in our company’s software development processes, emphasizing the importance of proper training and adoption strategies.

Benefits of AI in Our Company’s Software Development

The integration of AI into our company’s software development processes offers numerous benefits. Our internal research and testing suggest that AI can increase developers productivity by 20%, leading to more consistent coding styles, secure software, and better optimization. AI also allows developers to focus on more complex tasks while AI assists with repetitive code generation and research. 

At the planning and architecture stage, AI can detect potential issues and recommend a better alternative. Furthermore, AI aids in automating documentation and testing processes, as well as designing views and making simple changes.

Challenges in Implementing AI

Incorporating AI into everyday programming tasks introduces a range of challenges, including the creation of a strong work ethic with AI. This is important, as AI may inadvertently lead us astray, necessitating that these tools act as assistants rather than fully taking over our work. Staying abreast of the latest tools and techniques is vital, as AI technology is in a constant state of evolution. It is essential to ensure that our programmers possess the required skills to utilize AI tools both effectively and safely. 

Our company has noted that, prior to AI implementation, 40% of developers held a neutral stance toward AI, 20% were resistant, and only 40% were enthusiastic about its use. We are now in the midst of integrating AI, and addressing these challenges is crucial for its successful incorporation. Encouragingly, preliminary tests on a smaller group of developers indicates that, with appropriate training and guidance on correctly using these tools, even those with negative attitudes can be persuaded of their advantages.

Training and Adoption Strategies

To fully leverage the potential of artificial intelligence, our company is instituting all-encompassing training and adoption initiatives. We are conducting pilot tests of AI tools with a select group of developers to proactively identify and address potential challenges before deploying these tools throughout the organization. 

Customizing training programs to cater to each developer’s unique needs and skill set is crucial for optimizing AI integration efficacy. Sharing real-world examples of successful AI implementations can enable developers to grasp its practical applications, while providing them with ongoing support during the adoption of AI tools is key to ensuring sustained success.

The AI tools encompass machine learning algorithms for automating monotonous tasks, natural language processing for code completion and analysis, and predictive analytics for detecting potential issues before they arise. We are confident that incorporating these tools into our daily programming activities can notably improve our software quality and expedite development. 

Nonetheless, we acknowledge that the triumph of these tools necessitates thoughtful consideration of potential risks, such as biases in AI algorithms, and balancing automation with human discernment. As a result, we persistently assess and fine-tune our AI integration strategy to guarantee alignment with our company’s values and objectives.

ROI and Client Perception

Most clients appreciate the potential for faster work, increased efficiency, and enhanced software security offered by AI in software development. However, some clients face legal limitations that may hinder their ability to embrace AI-driven solutions fully.

Future Prospects and Preparing for Changes

AI offers significant growth potential for our company’s software development processes. As technology continues to advance, we should stay updated on emerging trends and solutions, preparing to integrate them into our processes. By proactively embracing AI and its benefits, our company can position itself at the forefront of innovation in the software development industry.

Conclusion

As AI technology continues to reshape the software development landscape, our company is well-positioned to reap the benefits. By focusing on AI’s benefits, addressing challenges, and investing in comprehensive training programs, our company can ensure a smooth transition into the AI-driven future of software development. Embracing AI can unlock a world of possibilities and drive innovation in the field of software development for our company.

How to convince your team to introduce AI?

• Check out how we did it – talk to us!
• Let’s draw a roadmap for your business
• Present to your team and create and implementation plan

Artykuł AI Implementation for Enhanced Software Development pochodzi z serwisu LEOCODE.

Is LEOCoin just another worthless coin? Why does the owner call it a revolutionary solution? I visited Leocode, and I already knew the truth. When I heard about the next revolutions, only one word kept ringing in my head: scam. I quickly created a new identity: The owner of a tech company from Botswana. Difficult to verify, and at the same time, a potential customer. Bull’s-eye. It worked.

Straight into the lion’s den

Leocode. The lion on the building tells me I’m in the right place. 5 minutes to the meeting. I’m going in. Of course, I have a briefcase and a laptop with me. I prepared myself well so that they wouldn’t get suspicious. I sit in the conference room. Everything is minimalist and modern. We’ll see if it’s just appearances.

It starts normally. I am talking about my equally modern and revolutionary technology company in Botswana. They are impressed – so am I. But I’m getting to the point. I want to strengthen the loyalty of my employees and introduce non-standard employee benefits. A friend told me about the amazing “Treasury” project. And I want it.

The “Treasury” project – a modern bonus system

Let’s start with the basics. I want to know what the solution is. You may find it hard to believe, but… the Treasury project is a great way to show appreciation for the hard work and dedication of our employees. By setting aside a portion of profits each year to be distributed as bonuses, Leocode can motivate and incentivize workers to continue striving for excellence.

Red Flags: Does LEOCoin Work?

The first red flag. LEOCoin enables the company to grow by paying bonuses to employees. Impossible, right?

The second red flag. That’s where I’d end a date, but this is a business meeting… I don’t believe that employees are certainly happy to accept imaginary LEOCoins instead of cash.

The third red flag. When deciding to introduce LEOCoins, do I lose control over the implemented bonus system?

Red flags turn green

It turns out that Leocode transfers power to its employees thanks to the “Vault”. We all know that power works like a magnet. An employee who joins the Vault is given the opportunity to decide who will receive a bonus in a given month.

Tokens, which are awarded as part of the commitment to the company, build a sense of community among employees, as they all strive for a common goal, which is to increase the value of the company.

Each employee decides for themself whether they want to join the project. An additional motivator is the fact that the earlier you join the project, the more you can earn.

As an owner, I don’t lose control. Rewarded workers can convert tokens strictly after transfer into cash. All of these terms are gathered in one place – the terms and conditions. The document has been individually suited to the needs and expectations of the board and workers and meets the legal requirements.

Is virtual currency a real risk?

Hearing “cryptocurrency”, I see many risks. Leocode replies: Are you sure about that? The Treasury project is strictly related to the company’s profits. After finishing each financial year, the board decides how much of the year’s profits will be put in the treasure pocket intended for the worker’s bonuses. What’s more? It contributes to the increase in the value of LEOCoin. 

The Treasury’s value is expressed in amounts, and every year, the value of the treasure pocket is getting higher as part of the company’s development. Every awarded worker becomes part of the Treasury project and collects the tokens in the Metamask Wallet. 

Leocode found the Holy Grail?

I spent many hours talking to Leocode, looking for an answer to the question: is LEOCoin the holy grail? Imagine that… The LEOCoin is an innovative type of token that offers many benefits to the company and its employees. Being emitted on the Polygon chain means that it is reliable, secure, and can handle large volumes of transactions quickly and efficiently. The fact that the tokens can be converted into cash also makes them a valuable asset for employees, who can use them to supplement their income or invest in other opportunities. 

The regular updates to the token’s value based on the company’s profits ensure that it remains a fair and accurate reflection of the company’s success.

Can I trust you? Treasury Management

Effective treasury management is crucial for the success of the project and the company as a whole. It is the responsibility of the owner and administrators to ensure that the rules and regulations of the project are followed and that workers understand their rights and responsibilities. 

Clear communication and transparency are key to maintaining trust and accountability among all parties involved. By working together, Leocode can ensure that the project is run smoothly and that all workers receive the recognition and rewards they deserve.

Am I ready for a powerful tool?

The “LEOCoin” panel is a powerful tool that enables the company’s owners and administrators to manage the tokens effectively and efficiently. With features designed specifically for their needs, they can easily track the value of the tokens and make decisions about how to distribute them among workers. The panel also allows for easy communication and collaboration between different departments and teams, helping to streamline the process and ensure that everyone is on the same page. 

In summary, the main functions of LEOCoin:

The Administrator:

• has the ability to freeze tokens,
• sets the accumulator address for token collection,
• adds tokens within the set limit,
• burns tokens,
• adds a new administrator using their wallet address,
• transfers coins between accounts.

The Owner:

• has the ability to change the emission limit,
• adds a new administrator using their wallet address,
• allows administrators to run the “coin transfer” function.

Mission successfully completed

Overall, the Treasury project and the LEOCoin offer a unique and innovative way for a company to reward employees and incentivize them to work towards a common goal. Effective treasury management is crucial for the success of the project, and the LEOCoin panel provides a powerful tool for owners and administrators to manage the tokens efficiently and effectively. 

By maintaining clear communication and transparency, Leocode can ensure that the project is run smoothly and all workers receive the recognition and rewards they deserve. With the right tools and resources in place, the Treasury project can be a great success and benefit everyone involved!

If you want to talk to us about your idea, let’s arrange a virtual coffee!

[Contact us]

Artykuł Mission: LEOCoin – revolution or another crypto? pochodzi z serwisu LEOCODE.

We are joining the AI revolution!

At LEOCODE we’ve been building internal tools for last few years. We wanted to simplify processes and address our own needs.

With the chatGPT and AI revolution we decided to go a step ahead. We created LEOCODE AI – a toolbox full of inspirations (tools, prompts etc) for every business owner, where you find a suitable tool, test it in action and apply to your needs in different areas (development, marketing, sales etc).

This site was done in a few hours with NoCode tools like Softr + Airtable. Seriously. No developer was involved. We will add more relevant content every week.

Plans for the future

We would love to gather like-minded people and explore some possibilities together. Join our WhatsApp group and share some inspirations. Let’s sit together in the front seat of this revolution and build some practical tools.

In upcoming weeks we will be adding more micro tools (made by LEOCODE), inspirations and some discussions. We will shape the vibrant community and give people voice.

What’s in it for me?

A lot. Join the ride. We will test and analyze different AI tools, that can boost the business and development. If you have some challenge or problem you would love to address let us know. We won’t build it for ourselves, it’s for you!

So, ready to jump to the Rabbit Whole and explore?

Let us know, we will be more than happy to guide you here.

Artykuł LEOCODE AI is born! pochodzi z serwisu LEOCODE.

Users of iOS from 2018 and macOS from 2021 can use the Shortcuts app. It allows you to create simple ( and not so simple!) automation that can make using both operating systems much more effortless.

By default, the app offers such shortcuts as recording water drinking, displaying the word of the day or an image (randomized from a NASA database). These automation, while quite valuable, are not wow-inducing functionalities. You can create a number of automation yourself, or use solutions developed by the Shortcuts community (e.g., on Reddit), which will significantly improve daily work on Apple devices.

iCloud Keychain

An example of such a shortcut, which I personally liked very much, is the shortcut that opens iCloud Keychain. A keychain is a password manager whose database is stored in iCloud. This allows a single password library to be used simultaneously on several Apple devices logged in with the same Apple ID.

Until now, the user path using a keychain could look as follows.

1. When logging in to a website or application, there is a prompt for verification via biometrics (Touch ID / Face ID) after which the user’s data in the form of (usually) login and password were completed with the data from the keychain.

2. when logging in to a website or application, the prompt to use the keychain does not appear. Then the user is forced to open the keychain manually. This one is found in the system settings after scrolling halfway through the settings list.

The extended user path can cause frustration. Why is it taking so long to access iCloud Keychain?

The solution to this problem is a shortcut created in the Shortcuts application. Its overview looks as follows:

The biggest advantage is the ability to add a shortcut to the Dock (iOS/iPadOS/macOS) or Menu Bar (macOS).

Artykuł Improve Your Cybersecurity Today: Make your passwords easy to use pochodzi z serwisu LEOCODE.

A lot! To be honest I was quite a sceptic at the beginning. I imagined that all this paperwork wouldn’t bring any benefits other than good marketing. I was wrong. ISO 27001 standard helps to shape processes in the company in a well-structured and secure way.

It’s not commonly discussed, but consistency is a precious benefit of having ISO 27001 implemented in the organisation. These standards prompt us to build a coherent system for securing information. The system is a keyword in this context. I mean that all processes need to be integrated and work well in every single department. In such a shape, it’s much easier to avoid gaps or edge cases that could create risk. While you are making preparations for audits, you also improve organisation in the whole company.

We learned a lot during these months of preparations. However, the most crucial knowledge was about ourselves. We found some operational weaknesses, which needed to be addressed before the external audit. We were screening every single department and looking for fragility. As a result of these internal audits, we planned activities to improve the level of security at LEOCODE.

We were preparing LEOCODE for an external audit for several months and we found out that there are some milestones that have to be done before inviting auditors:

• choose the certifying body,
• set up an internal team that would take care of ISO 27001 implementation and will be informing the board about the progress,
• plan and conduct internal audits for every department. Prepare reports which are describing potential non-compliances, among other things.
• take care of found issues: measure the risks, plan how to manage them, and keep resolving tasks one by one.
• keep informing the whole organisation about changes you implement. Remember – your system doesn’t change anything if you do not inculcate it with your employees.
• Invite auditors when you are ready. Ready means you know the system and it actually works. Auditors are going to ask for proof that your whole organisation acts like it was planned in system documents. If you have considered carefully the suggestions contained in the ISO 27001 standard while creating your Information Security Management System, don’t worry. After a dozen hours of interviews with auditors you can enjoy the meritorious certificate.

Is this the end of the story?

Nothing further from the truth. Implementing ISO 27001 is a continuous process of adapting the organisation to security standards. The business environment is changing, so you need to be ready for new security threats. However, by using the standards offered by ISO 27001, you can feel confident and secure in your pursuit of excellence.

Artykuł ISO 27001 Implementation at LEOCODE. pochodzi z serwisu LEOCODE.

Using the same password everywhere

Password storage

1. Rainbow table attack. An attacker (or all of them in cooperation) can use a precomputed list of hashes for every possible string combination, and then look for the hash in such a list. The answer to this problem is another good practice that can be used by software developers: salting. Salting basically means adding any long-enough and random-enough string of characters to the user password before hashing (and before comparing). Salt does not have to be obfuscated. This way, the password will have a completely different hash, and probably won’t be present in the rainbow table.
2. Exploit security issues of the hashing method itself. Hashing is based purely on math. And in math, often there are shortcuts to achieve the same result. The same applies to hashing functions. If the hashing function is not strong enough (and usually modern enough), then an attacker can very quickly compute (by guessing) the password that produces some particular hash.
3. Guess the password (and therefore the hash if it is not salted) in a clever way. As long as rainbow tables just take a pure brute-force approach to the problem, we can use tools like hashcat, which along with an attacker’s experience, can very quickly build hashes not of random characters, but of popular words, numbers, combinations of those and so on. This is nicely described in video by Computerphile.

Remembering all of the passwords

On single sign-on (SSO)

Lack of encrypted connection

Hey, I’m using VPN bro, I’m secured, no worries! :-)

Convenience

Trust

• What guarantee do we have, that our password manager account won’t be locked for any reason, and we’ll lose all of our passwords?
• What guarantee do we have, that everything is stored securely, when we actually cannot check how it’s stored?
• What guarantee do we have, that service provide doesn’t have bugs, that allow to access account without password at all?

What to do?

Author: Mateusz Koteja

Artykuł Password security pochodzi z serwisu LEOCODE.