While social media, digital payments, and NFTs are all post-internet creations, there are some fundamental aspects of technology that date back to the very beginning of the internet. When the government first started using an early version of the internet in the 60’s to share files, there was one component that quickly followed: online identity.
Around the same time as the birth of the internet, a computer scientist at MIT in the 60s created a framework for the earliest form of identity management; usernames and passwords. Since then, identity has woven its way deeper and deeper into the foundations of our digital lives.
Social accounts and profiles, anonymous vs. identity verifications, digital fraud prevention, and on and on. There are very few aspects of our digital lives that don’t rely on some system understanding that we are who we say we are.
Identity has, historically, acted as an adjacency to cybersecurity. Identity stood at the beginning to make sure no bad actors got in. Security was in place to look out for that bad behavior if something at the entryway failed. But increasingly, that just isn’t the case. Identity has stepped into the very center of the security paradigm.
This past week, Okta alerted customers that it had suffered a breach. Always scary when something like that happens; you hope you weren’t one of the customers affected. Unfortunately, in this instance? 100% of customers were impacted. Back in October, Okta had estimated the impact was only felt by ~1% of customers. Missed it by a mile.
But Okta isn’t alone. A staggering 80% of breaches occur as a result of identity issues, such as compromised credentials. Firms like MGM, Caeser’s, Atlassian, and New Relic join Okta among the identity-impacted breaches just over the last few months. Losses from these breaches can add up to the tune of hundreds of millions of dollars.
Okta is the pinnacle of identity management. But even they fell victim to the threat of identity vulnerabilities. Increasingly, it seems identity management will be the main battlefield for security practitioners going forward. The only question is what approach will finally fill the gaps in securing an organization’s network of identities?
Important Disclosures
This material has been distributed solely for informational and educational purposes only and is not a solicitation or an offer to buy any security or to participate in any trading strategy. All material presented is compiled from sources believed to be reliable, but accuracy, adequacy, or completeness cannot be guaranteed, and Contrary LLC (Contrary LLC, together with its affiliates, “Contrary”) makes no representation as to its accuracy, adequacy, or completeness.
The information herein is based on Contrary beliefs, as well as certain assumptions regarding future events based on information available to Contrary on a formal and informal basis as of the date of this publication. The material may include projections or other forward-looking statements regarding future events, targets or expectations. Past performance of a company is no guarantee of future results. There is no guarantee that any opinions, forecasts, projections, risk assumptions, or commentary discussed herein will be realized. Actual experience may not reflect all of these opinions, forecasts, projections, risk assumptions, or commentary.
Contrary shall have no responsibility for: (i) determining that any opinions, forecasts, projections, risk assumptions, or commentary discussed herein is suitable for any particular reader; (ii) monitoring whether any opinions, forecasts, projections, risk assumptions, or commentary discussed herein continues to be suitable for any reader; or (iii) tailoring any opinions, forecasts, projections, risk assumptions, or commentary discussed herein to any particular reader’s objectives, guidelines, or restrictions. Receipt of this material does not, by itself, imply that Contrary has an advisory agreement, oral or otherwise, with any reader.
Contrary is registered with the Securities and Exchange Commission as an investment adviser under the Investment Advisers Act of 1940. The registration of Contrary in no way implies a certain level of skill or expertise or that the SEC has endorsed Contrary. Investment decisions for Contrary clients are made by Contrary. Please note that, although Contrary manages assets on behalf of Contrary clients, Contrary clients may take any position (whether positive or negative) with respect to the company described in this material. The information provided in this material does not represent any investment strategy that Contrary manages on behalf of, or recommends to, its clients.
Different types of investments involve varying degrees of risk, and there can be no assurance that the future performance of any specific investment, investment strategy, company or product made reference to directly or indirectly in this material, will be profitable, equal any corresponding indicated performance level(s), or be suitable for your portfolio. Due to rapidly changing market conditions and the complexity of investment decisions, supplemental information and other sources may be required to make informed investment decisions based on your individual investment objectives and suitability specifications. All expressions of opinions are subject to change without notice. Investors should seek financial advice regarding the appropriateness of investing in any security of the company discussed in this presentation.
Please see www.contrary.com/legal for additional important information.
