Archive for June, 2023

American Airlines And Southwest Airlines Disclose 3rd Party Data Breach Affecting Pilots 

Posted in Commentary with tags on June 26, 2023 by itnerd

According to breach notifications filed on Friday by American Airlines and Southwest Airlines, both disclosed data breaches caused by the hack of Pilot Credentials, a third-party vendor that manages numerous airlines’ pilot applications and recruitment portals.
 
On May 3rd, the two airlines were informed an unauthorized individual gained access to Pilot Credentials’ systems on April 30 and stole documents containing the data of 5,745 American Airlines and 3,009 Southwest applicants in the pilot and cadet hiring process. The incident was limited solely to the systems of the third-party vendor, with no compromise on the airlines’ own networks.
 
“Our investigation determined that the data involved contained some of your personal information, such as your name and Social Security number, driver’s license number, passport number, date of birth, Airman Certificate number, and other government-issued identification number(s),” American Airlines revealed.

“We are no longer utilizing the vendor, and, moving forward, Pilot applicants are being directed to an internal portal managed by Southwest,” Southwest Airlines said.

Roy Akerman, Co-Founder & CEO, Rezonate had this to say:

   “Third party access and supply chain risks continue to be the leading reasons for recent security breaches. Whether critical information is managed by a third-party application, or a vendor has direct access to one’s infrastructure, additional security risk is introduced and therefore must be monitored and controlled. While organizations are realizing more and more that third party risk is their risk, more work is required to enable this awareness across people, technology and processes.”

Supply chain attacks are real. Thus organizations need to make sure that the diligence that they apply to their internal systems is applied to all the external systems that they use. That way the chances of getting pwned by hackers is way less.

Confirmed: Petro Canada Parent Company Pwned By Hackers

Posted in Commentary with tags on June 26, 2023 by itnerd

Yesterday, I noted that every Petro Canada gas station that I went to wasn’t accepting debit or credit cards. Instead they were cash only. And their mobile app wasn’t working as well. At the time, I said this:

But this reminds me of the Sobeys situation as well as the Garmin situation. In both cases, normal business was disrupted for some period of time. Neither company commented in any significant way on their issues. Then it later came out that both companies were pwned by ransomware. This Petro Canada situation has that feel to it. 

It appears that I might have been correct on them getting pwned by hackers. As per Reuters:

Canadian energy firm Suncor on Sunday said it experienced a cybersecurity incident, adding that some transactions with customers and suppliers could be impacted while they investigate and resolve the situation.

“At this time, we are not aware of any evidence that customer, supplier or employee data has been compromised or misused as a result of this situation,” the company said in a statement.

Suncor owns Petro Canada. Thus if Suncor has been pwned, Petro Canada has been pwned. The question that we all have to be asking is what did the hackers do (chances are it’s ransomware, but let’s leave that question open ended for now) and what info did they steal? And is any of that information personally identifiable information? For example, I use the Petro Canada app, is any of my info on the dark web someplace? These are all questions that Petro Canada needs to answer. And answer soon as silence isn’t an option if they want to regain the trust of Canadians that almost certainly been shaken because of this incident.

Reddit’s New Problem: The Lack Of Accessibility Features

Posted in Commentary with tags on June 26, 2023 by itnerd

Well, this is going from bad to worse for Reddit. On top of everything else that’s going on with the API protests, and Reddit’s frankly ham fisted response to them. The company has a new problem. Accessibility. Or rather the lack of it. Via The Verge:

Reddit will make “accessibility improvements” to many moderator tools in its official mobile apps by July 1st, the company announced on Friday

Some moderators rely on third-party apps because Reddit’s apps have what they characterize as “significant accessibility challenges,” and the accessibility community has expressed concerns over how they will moderate on mobile after popular apps like Apollo shut down on June 30th due to potentially expensive API pricing changes. It seems this roadmap, which promises improvements to features like the moderation queue and the ModMail messaging system on Android and iOS, is intended to assuage those fears.

Based on the replies to the announcement post, however, many are still unhappy with the company’s plans. “A multibillion dollar corporation forcing disabled people (including the profoundly disabled) to simply ‘learn new tools,’ and to stop using the accessibility tools they’re used to — the tools they depend on — to access / moderate the communities they depend on — is cruel,” wrote PotRoastPotato, a moderator who has advocated for disabled communities as part of the recent protests across Reddit. “As long as there are disabled users who depend on and are accustomed to the accessibility features of third-party apps, these apps need to be preserved,” PotRoastPotato added in an email to The Verge.

Reddit’s roadmap notes that some features won’t be available until late July or sometime in August, and some are critiquing the company for that choice. “Why are these not blockers that you are forcing Reddit to delay API changes for?” one user wrote. “Do you find it acceptable to have an inherently worse moderator accessibility experience while pulling the rug out from underneath the community?”

Well, I am sure that this isn’t the response that Steve Huffman and company were hoping for. But it’s Reddit’s fault that they are in this situation. If they thought this whole situation through rather than taking an Elon Musk approach to this, perhaps they would be in a different place. But much like Elon Musk, Steve Huffman doesn’t strike me as the type to think things through. Instead he strikes me as the type to just do stuff and then be surprised when there’s blowback. This is another reason, on top of the ones that I outlined here, why Reddit is doomed.

UPDATE: Meanwhile on Reddit, posts like this are starting to appear:

This situation may be about to get really bad for Reddit.

Petro Canada Gas Stations And More Are Offline Due To Unspecified Computer Problems…. Have They Been Pwned?

Posted in Commentary with tags on June 25, 2023 by itnerd

Last night I went out to get gas at my local Petro Canada which is the closest gas station to my home. Upon arrival, I was greeted with this:

If you look at the top right corner, there’s a handwritten note that says “only cash”. But I wasn’t deterred as I opened the Petro Canada app and tried to do the pay at the pump method via the app. However I was met with this:

You can see that it says “Login is currently unavailable”. So that was a #Fail. Since I didn’t have any cash on me, I was forced to go to my nearest Esso station to fill up. Upon returning home, I decided to go to the Petro Canada website. I was met with this:

If you look at the top, it says “Login is temporarily unavailable”. Thus it didn’t take a rocket scientist to figure out that something is up with Petro Canada. I then checked the companies Twitter feed and it hasn’t been updated in over two days. That’s odd. And checking the local and national media, I I found two stories talking about this online. Twitter has people talking about this as well:

That last Tweet highlights what many are thinking. Which is that this is some sort of cyberattack. I don’t say that lightly. But this reminds me of the Sobeys situation as well as the Garmin situation. In both cases, normal business was disrupted for some period of time. Neither company commented in any significant way on their issues. Then it later came out that both companies were pwned by ransomware. This Petro Canada situation has that feel to it. And we’ll find out what the deal is soon enough because Petro Canada has a very high profile in Canada, which means the Federal Government will start to ask questions about this (if they haven’t already) as in many parts of Canada, gas stations are few and far between. Thus if your closest option for gas is Petro Canada, and the next option is miles of away, you might have a problem. The Federal Government knows that and will want answers. Hopefully Petro Canada will be able to answer them fully and transparently.

We Only Have To Look To History To See Why Reddit Is Doomed

Posted in Commentary with tags on June 25, 2023 by itnerd

The API protests and Reddit’s heavy handed reaction to said protests are getting a lot of attention. And as far as I am concerned, Reddit is doomed as a result of that. I’ve been saying that for a while and I am sticking to that because from where I sit, this Reddit situation a case of is history repeating itself.

For those of a certain age who were using the Internet in the early 2000’s, one of the best places to go on the Internet was digg. Wikipedia describes Digg like this:

Digg, stylized in lowercase as digg, is an American news aggregator with a curated front page, aiming to select stories specifically for the Internet audience such as science, trending political issues, and viral Internet issues. It was launched in its current form on July 31, 2012, with support for sharing content to other social platforms such as Twitter and Facebook.

It formerly had been a popular social news website, allowing people to vote web content up or down, called digging and burying, respectively. In 2012, Quantcast estimated Digg’s monthly U.S. unique visits at 3.8 million. Digg’s popularity prompted the creation of similar sites such as Reddit.

In short, it digg was Reddit before Reddit even existed. But much like Reddit, management who figured that digg was immune to failure made a mistake that killed the site. Again, from Wikipedia:

Digg’s v4 release on August 25, 2010, was marred by site-wide bugs and glitches. Digg users reacted with hostile verbal opposition. Beyond the release, Digg faced problems due to so-called “power users” who would manipulate the article recommendation features to only support one another’s postings, flooding the site with articles only from these users and making it impossible to have genuine content from non-power users appear on the front page. Frustrations with the system led to dwindling web traffic, exacerbated by heavy competition from Facebook, whose like buttons started to appear on websites next to Digg’s.

In short, they took the ability for ordinary users of digg to upvote or downvote web content out of the users hands and put it into the hand of a few. On top of that, the site became buggy. That started the downward spiral that eventually led to the demise of digg. Yes digg did try to fix a lot of this stuff. But by the time they did, it was too little too late.

Now let’s compare that to Reddit, Steve Huffman who is Reddit’s CEO is trying to make money from Reddit at the expense of their user base. Specifically he’s ignoring its users, alienating the volunteers it depends on for literally everything, and killing third-party apps which work better than the first party Reddit app. Not to mention he’s ignoring the threat of subreddits moving to places other than Reddit such as Beehaw which will take traffic away from Reddit. In a way, Reddit is following down the same path as digg. And what is ironic about this situation is that Reddit was one of the sites who actively added to the factors that led to their demise:

Disgruntled users declared a “quit Digg day” on August 30, 2010, and used Digg’s own auto-submit feature to fill the front page with content from Reddit. Reddit also temporarily added the Digg shovel to their logo to welcome fleeing Digg users.

And now Reddit is on its way to becoming the next digg.

Can Reddit stop itself from becoming the next digg? Sure it can. All it needs to do is to have a CEO who will listen to users, respect them and change course accordingly. But Steve Huffman isn’t that CEO. So I’m not holding my breath in terms of seeing Reddit change course. And I expect that Reddit will join Digg, not to mention other sites like MySpace, and LiveJournal as being footnotes in Internet history as a result.

Makers Of MOVEit File Transfer Software Served With Class Action Lawsuit

Posted in Commentary with tags on June 24, 2023 by itnerd

The Clop ransomware gang has been pwning organizations right, left and centre via vulnerabilities in the MOVEit file transfer software. And with the scale of these attacks growing by the day, you knew it was a matter of time to before a lawsuit was filed. And now we have a class action lawsuit:

On June 20, three Louisiana individuals headed up a class-action lawsuit filed in a Massachusetts district court against Progress Software, the Bedford, Massachusetts, makers of the MOVEit file Transfer and Cloud file transfer service that are used by thousands of entities and have been exploited over the past month to compromise an ever-growing list of companies and government agencies.

The plaintiffs represent more than 100 individuals who say Progress Software’s security practices were negligent, resulting in their personal data being exposed and stolen through the hack. The complaint characterizes this information as “a gold mine for data thieves” and the victims are seeking damages in excess of $5 million.

One of the lead plaintiffs, Shavonne Diggs, reportedly received “numerous phishing calls” following the breach from scammers who claimed she had signed up to attend different academic institutions, as well as an unauthorized charge on one of her payment cards.

“Armed with the Private Information accessed in the Data Breach, data thieves can commit a variety of crimes including … opening new financial accounts in Class Members’ names, taking out loans in Class Members’ names, using Class Members’ names to obtain medical services, using Class Members’ information to obtain government benefits, filing fraudulent tax returns using Class Members’ information, obtaining driver’s licenses in Class Members’ names but with another person’s photograph, and giving false information to police during an arrest,” lawyers for the plaintiffs wrote.

The company hasn’t really addressed this lawsuit. Instead they said that they are focused on helping those affected by these attacks. But I think it’s a safe bet that this will never go trial. Instead Progress will likely settle this out of court. Having said this, the repetitional damage to Progress will be huge.

Twitter Caves To The EU…. No Seriously, They Really Did

Posted in Commentary with tags on June 23, 2023 by itnerd

I have to admit that I didn’t have this on my Twitter BINGO card, but according to The Guardian, Twitter is going to comply with the EU’s disinformation laws. This after trying to bail out on that not too long ago:

Twitter has agreed to comply with tough new EU laws on fake news, Russian propaganda and online crime after a team of officials from the European Commission entered its headquarters to stress test its capacity to operate legally in Europe.

The move came just weeks after Elon Musk, Twitter’s owner, quit the bloc’s voluntary code of practice on disinformation.

In the first exercise of its kind, EU officials were allowed into the company’s headquarters on Thursday to carry out a mock exercise with Twitter staff to test its controls on Russian propaganda, fake news and criminal activity including child sexual exploitation.

Thierry Breton, the commissioner responsible for enforcement of the new Digital Services Act, welcomed the fact the company voluntarily agreed to the test.

He reiterated his warning to all social media companies that the EU would act swiftly and sharply to uphold the sweeping new laws that enter into force in August.

“When it comes to online crime, there can be no half measures. Very large online platforms need to put the necessary internal controls and resources in place to be ready for the new European rules,” he said.

The new laws come into force on 25 August but EU fears that Twitter may not comply had become heightened, with one commissioner warning the company recently that a “wild west” operation would not be tolerated.

On one hand, I am blown away that this has happened. But realistically, I don’t think Twitter had a choice. Twitter could face a complete ban in Europe or fines running up to 6% of its global revenue if it does not comply with the laws. So seeing as Twitter needs money, I am guessing that Elon or his new CEO Linda Yaccarino came to the conclusion that fighting this was not in their interest. Though I have to wonder if this willingness to play nice with the EU is a today thing, or a long term thing. I suppose we’ll find out soon enough.

Neo Financial Unveils Secured Card With Unlimited Rewards & Zero Hidden Fees

Posted in Commentary with tags on June 23, 2023 by itnerd

Neo Financial (Neo) introduces Neo Secured Credit; a card designed to help Canadians build credit with guaranteed approval. This innovative product caters to those who have difficulty obtaining credit, seek to improve their credit score, or prefer to spend within their means. Cardholders can now set their own credit limit and start building credit history with a secured card that earns instant cashback. Plus, purchases made with the card earn an average of 5% cashback at over 10,000 rewards partners with the option to add additional perks on the card at any time.

Neo is building financial tools for all Canadians and this product expands its suite of offerings that empower customers to choose the right card for their needs. Recognizing that Canadians shouldn’t have to pay to build credit history, this card offers customers the ability to build credit. Opening an account is hassle-free and can be done in just a few minutes, requiring no hard credit check (except in Quebec where a check is required).

With Neo Secured Credit, customers benefit from:

  • Guaranteed approval
  • Monthly credit reporting
  • Unlimited instant cashback, with an average of 5% cashback at Neo partners
  • No credit history needed to apply
  • Upgradeable perks across dining, gas, grocery, travel and more
  • Mastercard Zero Liability for protection against unauthorized transactions

Neo Secured Credit grants cardholders the flexibility to increase their credit limit at any time and manage their finances with real-time spend insights – provided by Neo. The versatile cashback feature allows customers to pay off statement balances, purchase exclusive items in the Neo Store or add to savings in the Neo Money™ account. By using the card for everyday purchases, cardholders can build credit with transactions they typically make¹ and set up autopay so they never forget to pay their statement.

For more information on the Neo Secured Credit, visit https://card.neofinancial.com/secured-card.

ASUS Issues Warning To Some Router Owners To Upgrade The Firmware Of Said Routers To The Latest Version

Posted in Commentary with tags on June 23, 2023 by itnerd

A reader pointed me towards a Bleeping Computer article which then led me to this advisory from ASUS which basically says this. There’s a list of ASUS routers that ASUS is urging customers to upgrade to the latest firmware ASAP because of a security threat that seems to be out there. The company is recommending the following:

We strongly encourage you to periodically audit both your equipment and your security procedures, as this will ensure that you will be better protected. As a user of an ASUS router, we advise taking the following actions:

  1. Update your router to the latest firmware. We strongly recommend that you do so as soon as new firmware is released. You will find the latest firmware available for download from the ASUS support page at https://www.asus.com/support/or the appropriate product page at https://www.asus.com/Networking/. ASUS has provided a link to new firmware for selected routers at the end of this notice.
  2. Set up separate passwords for your wireless network and router-administration page. Use passwords with a length of at least eight characters, including a mix of capital letters, numbers and symbols. Do not use the same password for multiple devices or services.
  3. Enable ASUS AiProtection, if your router supports this feature. Instructions on how to do this can be found in your router’s manual, or on the relevant ASUS support page, at https://www.asus.com/Networking/.

Please note, if you choose not to install this new firmware version, we strongly recommend disabling services accessible from the WAN side to avoid potential unwanted intrusions. These services include remote access from WAN, port forwarding, DDNS, VPN server, DMZ, port trigger.

The advisory also lists the following routers as being affected by whatever threat is out there:

  • GT6
  • GT-AXE16000
  • GT-AX11000 PRO
  • GT-AX6000
  • GT-AX11000
  • GS-AX5400
  • GS-AX3000
  • XT9
  • XT8
  • XT8 Version 2
  • RT-AX86U PRO
  • RT-AX86U
  • RT-AX86S
  • RT-AX82U
  • RT-AX58U
  • RT-AX3000
  • TUF-AX6000
  • TUF-AX5400

Now what strikes me as interesting is that a cursory look at the affected routers shows that a fair number of them have had firmware updates in the last few days. While others have not. Take the XT8 that I own for example. The last firmware update was in May which I wrote about my experiences with that. Others like the RT-AX86U PRO has have firmware updates in the last day or two. That might imply that all of these routers are about to get firmware updates shortly. But I am not 100% sure about that. It might be worth your while to keep an eye on the firmware page for your ASUS router to see if there’s an update for your router. As for if you should update to this new firmware, I would do so as there’s a clear benefit to doing so which is is security. But I would do it with caution and be prepared to roll back to an earlier firmware version as ASUS firmware can either be fine or buggy and there seems to be no middle ground in terms of that.

Today Is International Women in Engineering Day (INWED)

Posted in Commentary on June 23, 2023 by itnerd

International Women in Engineering Day (INWED) was founded by the Women’s Engineering Society (WES) in the United Kingdom. INWED was first celebrated in 2014 with the aim of raising awareness about the achievements of women in engineering, encouraging more girls and women to pursue careers in the field, and promoting diversity and inclusivity in the engineering profession. Since its inception, INWED has gained global recognition and is now celebrated annually on June 23rd.

Leading professionals in the engineering and technology fields have shared their insights in anticipation of INWED. Their comments highlight the significance of diversity, gender equality, and inclusion, while celebrating the achievements of women in these industries. These professionals emphasize the need to inspire and empower future generations, break stereotypes, and create equal opportunities for all in engineering and STEM.

Malini Nair, Principal QA Software Engineer, Context Labs:  

“As a female engineer, International Women in Engineering Day holds deep significance for me. It is a moment to celebrate the achievements of women in engineering and inspire future generations to pursue their passions in this field. This day serves as a reminder that gender should never limit one’s aspirations or opportunities. It highlights the importance of creating a supportive and inclusive environment where women can thrive and contribute their unique perspectives to drive innovation and success. 

I feel incredibly fortunate to work for a company that shares my belief in the power of diversity and inclusion. At Context Labs, we understand that diverse teams are stronger teams. We embrace and celebrate the talents and contributions of individuals from different backgrounds, experiences, and perspectives. We recognize the immense value that women bring to engineering and provide equal opportunities for growth, mentorship, and leadership. By fostering an inclusive culture that values and respects everyone, we create an environment where all voices are heard, ideas are nurtured, and collective success is achieved.”

Annie Shoup, Senior Data Scientist, Context Labs

“International Women in Engineering Day holds immense importance in promoting gender equality and encouraging girls to pursue careers in STEM. This day serves as a powerful platform to celebrate the achievements of women in engineering, while also inspiring and empowering young girls to explore the exciting opportunities available in STEM fields. It is crucial to showcase diverse role models and highlight their remarkable contributions, breaking the stereotypes and barriers that may discourage girls from pursuing their passions in science, technology, engineering, and mathematics. 

On this day, let us come together as a collective force to champion gender equality, foster inclusivity, and create pathways for girls to pursue their dreams in engineering and STEM. By nurturing their talents, inspiring their curiosity, and providing equal opportunities, we can build a world where all aspiring engineers, regardless of gender, can thrive and make significant contributions to the advancement of society. International Women in Engineering Day is a reminder of the transformative power of diversity and the boundless possibilities that await when we break down barriers and empower girls to pursue their passion for STEM.”

Priya Germer, Professional Services Manager, Context Labs:

“Diversity in the workplace is critical because it brings together individuals with different perspectives, backgrounds, and experiences, fostering innovation and driving better business outcomes. By embracing diversity, organizations can tap into a wide range of ideas, insights, and approaches that lead to more creative problem-solving, increased adaptability, and a deeper understanding of diverse customer needs. A diverse workforce also enhances employee engagement and retention, as individuals feel valued and included, leading to higher levels of productivity and satisfaction.

International Women in Engineering Day holds a special significance in highlighting the importance of gender diversity in the engineering field. It serves as a powerful reminder that women bring immense talent and potential to the profession, and their contributions are invaluable in shaping the future of engineering. This day celebrates the achievements of women engineers, while also raising awareness about the need for equal opportunities and representation in the industry. By promoting gender diversity in engineering and supporting women’s advancement, we not only empower women to pursue fulfilling careers but also enrich the field with diverse perspectives, ideas, and innovations. International Women in Engineering Day serves as a call to action, inspiring individuals and organizations to continue working towards a more inclusive and equitable engineering workforce.”

Stacy Bender, Professional Services Application Engineer, Context Labs

“In celebration of International Women in Engineering Day, I reflect on my own journey and the impact of my father, a construction worker, who sparked my interest in engineering. Working alongside him, I discovered a passion for designing and bringing visions to life. Despite the underrepresentation of women in my industry and engineering classes, I saw it as an opportunity to break stereotypes and forge my own path. 

Choosing a career in engineering is one of my proudest achievements. I encourage everyone to follow their passions, even in fields dominated by the opposite sex. Embracing our unique perspectives can lead to innovation and fresh ideas that others may not have considered.”

Annemie Vanoosterhout, Release and Project Manager, Datadobi:

“International Women in Engineering Day (INWED) is an important occasion to recognize and celebrate the achievements of women in the engineering field. It is a day to honor the trailblazing women engineers who have made significant contributions to various sectors and have shattered gender stereotypes along the way. INWED highlights the valuable perspectives, skills, and expertise that women bring to the engineering profession, emphasizing the importance of diversity and inclusivity in driving innovation and progress.

This day serves as a powerful reminder of the need to continue advocating for gender equality in engineering. By showcasing the accomplishments of women engineers, INWED inspires young girls and women to pursue careers in engineering, encouraging them to overcome barriers and pursue their passions. It is an opportunity to empower aspiring engineers to dream big, challenge societal norms, and make a positive impact on the world. Together, we can create an inclusive environment where all individuals, regardless of gender, have equal opportunities to thrive and shape the future of engineering.”

Irina Shiyanovskaya, PH.D., Chief Operations Officer & Chief Technology Officer, Folio Photonics:

“With over 50 publications and 11 patents under my belt, covering areas such as optics, organic electronics, flexible displays, and photophysics, I have dedicated my career to the fields of engineering and technology. Consequently, I believe International Women in Engineering Day (INWED) holds significant importance.

INWED serves as a valuable platform to recognize the achievements of women in engineering and challenge prevailing stereotypes. It is a day that encourages inclusivity and diversity within the engineering community and inspires more women to pursue careers in this dynamic field. As a Chief Technology Officer and an Adjunct Professor of Physics, I am committed to fostering equal opportunities and promoting the talent and potential that women bring to engineering. INWED reminds us of the remarkable contributions made by women engineers and reinforces the importance of creating a supportive and empowering environment for future generations.”

Jennifer Palecki, Chief People Officer, Imply

“As a woman who has grown her career in tech it’s important to me to create space for other women to do the same, especially for women in engineering. We need to recognize and celebrate the women who have worked tirelessly to create a path for other women in tech and engineering and also continue to advocate for others who join the space. International Women in Engineering Day brings attention to women in engineering and serves as a call to action to the work that still needs to be done to focus on equity and inclusion in the tech field. It’s equally as important that allies exist as part of this journey – companies have to play a part in making the changes needed for women to thrive in engineering.

Imply is actively working to be a part of these changes.  We are building a diverse and inclusive company and part of that work is ensuring we create space for those who identify as female to not only be welcomed to engineering opportunities but have the support and resources they need to flourish in these roles. Through mentorship, a supportive network and ERGs we hope to empower women to succeed and grow in their engineering careers. Imply will continue to strive to ensure that women in tech and engineering have an environment where their perspectives are recognized, valued and a part of what pushes our company forward.”

Caroline Seymour, VP of Product Marketing, Zerto, a Hewlett Packard Enterprise company: 

“In 2023, according to MIT Professional Education the gender gap in STEM remains significant, with women making up only 28% of the STEM workforce. As a long-time professional working in the technology field, I’m well aware of the underrepresentation of women in the industry. While people are much more aware of the gender gap than they have been in the past, a divide still remains which needs to be overcome. The roots of the issue start before women enter the workforce. As they’re growing up, girls can be subjected to biases (both conscious and unconscious) early on in their schooling and are often actively discouraged from pursuing science, technology, engineering, and math. Quite often teachers and parents underestimate girls math’s skills starting as early as preschool. We need to do far more at an earlier stage. Mentoring girls and encouraging them to pursue STEM coursework into higher education is a start. Opportunities such as classes and scholarships that cater to girls interested in the field are also important. It’s vital to support young women early in their life so they have the background, support, and confidence to overcome gender biases in STEM.

Further down the road, companies can also take action to achieve gender equality. They can start by using job descriptions which are gender neutral, gathering diverse candidates for interviews, and making sure there are women present on the interviewing team. Additionally, there should be regular pay equity reviews, mentorship and advancement opportunities for different groups, and regular evaluation of the hiring and promotion process to spot any potential biases.”

Saadia Khan, VP, Engineering at Hammerspace

“This day offers a platform for women engineers to share their experiences, working in a technical industry and the unique challenges many women face building careers and advancing into leadership in the high-tech space. It is an exciting time for the technology sector and engineering disciplines, with opportunities abounding in all types of engineering roles. I have had the opportunity to grow my career by contributing to patents and advancements in open-source software communities. I encourage other like-minded women to examine how they can further their contributions to the technical community by getting involved with both open source and standards work.

International Women in Engineering Day reminds us of the increasing number of women entering engineering disciplines and their significant contributions. We are proud to recognize and uplift the women who have chosen careers in STEM. By profiling women in engineering and sharing our stories, we will inspire the next generation and focus on the exciting career opportunities available to young women interested in entering this industry. With the increasingly rapid development of exciting new technologies, such as AI, our future requires more engineers and will be enriched by the talent and perspectives that women bring to engineering-driven solutions.”