Skip to content

2024

  • in podcast
  • 3 min read

Welcome back to Continuous Improvement, where we navigate the ever-evolving world of technology and how it impacts our professional and personal lives. I’m your host, Victor Leung, and today we’re diving into a topic crucial for anyone involved in handling payment card data—PCI DSS version 4.0. This latest update to the Payment Card Industry Data Security Standard marks a significant leap in securing payment data globally. Whether you’re a business owner, IT professional, or just a savvy consumer, understanding these changes is key.

Let’s start with some background. The PCI DSS was established to protect account data by setting a baseline of technical and operational requirements. As cyber threats evolve and new technologies emerge, so too does this standard. Version 4.0 reflects current risks and future advancements, ensuring that the framework remains robust against sophisticated cyber threats.

Now, let’s talk about the key changes in version 4.0. Firstly, there's increased flexibility in how requirements can be met. This is great news for organizations as it allows for more customized compliance strategies that fit specific operational environments. This change recognizes the unique challenges and setups that different businesses face.

Another major update is the enhanced authentication and encryption protocols. With cyber threats becoming more advanced, strengthening these areas is crucial. Multi-factor authentication and stronger encryption are now front and center, aiming to bolster defenses and protect consumer data more effectively.

For those operating in cloud or virtual environments, you’ll be pleased to know that version 4.0 expands its guidelines to cover these platforms more comprehensively. This acknowledges the shift towards cloud solutions and ensures that security measures are up to date with technological trends.

Larger organizations will benefit from the ability to take a customized approach to compliance. This means that the complex and unique environments of big enterprises can integrate PCI DSS requirements more seamlessly, which is a game-changer for many.

But what does this all mean for businesses? Well, adapting to these new requirements will certainly require some effort. This might mean investing in new technologies or updating existing systems, which can involve significant costs and resources. However, the shift towards viewing security as a continuous process, rather than a once-a-year checkup, is a critical update that encourages ongoing vigilance.

And let’s not forget the consumers. Higher security standards mean reduced risks of data breaches and fraud, which in turn can increase consumer trust in electronic payment systems—a win for everyone.

If you’re preparing for PCI DSS 4.0, start by assessing your current compliance status and planning necessary changes. Training your staff and raising awareness about the new standards are also crucial steps. Don’t overlook the importance of regular monitoring and updating your security measures to stay compliant.

That’s it for today’s episode on PCI DSS version 4.0. Embracing these changes isn’t just about compliance; it’s about protecting your business and your customers in an increasingly digital world. Thank you for tuning into Continuous Improvement. I’m Victor Leung, and I look forward to exploring more tech insights with you next time. Until then, stay secure and stay informed.

  • in zh
  • 1 min read

導航PCI DSS 4.0版本的新景觀

PCI DSS（支付卡行業數據安全標準）版本4.0，作為對卡支付安全標準的最新更新，標誌著全球支付數據安全的重大進展。此博客文章深入探討了PCI DSS 4.0版本帶來的主要變革和強化，以及它們對企業和消費者意味著什麼。

理解PCI DSS版本4.0

A. 背景與演變

PCI DSS的設立旨在提供一套保護帳戶數據的技術和運營要求基線。隨著威脅的演變和行業反饋，該標準已得到更新。版本4.0是最新的迭代，反映了當前的風險和未來的技術進步。

B. 版本4.0的主要變更
  1. 對不同方法的靈活性：最重要的變化之一是滿足要求的靈活性增加。組織現在有更多選擇來實現合規，允許他們為特定環境精心設計創新方法。

  2. 增強的身份驗證和加密：增強有關多因素身份驗證（MFA）和更強加密協議的要求，以增強對複雜網絡威脅的安全。

  3. 對雲端和虛擬環境的擴大範疇：版本4.0承認了對雲解決方案和虛擬環境的日益依賴，並將其指導方針擴展為更全面地包括這些平台。

  4. 大型組織的定制方法：大型組織現在可以從定制方法中受益，允許他們更流暢地將PCI DSS要求融入他們複雜，獨特的環境中。

C. 對企業和合規性的影響
  • 適應新要求：企業必須理解並適應這些變化，確保他們的合規策略已更新。
  • 成本和資源的影響：更新系統和流程以滿足新標準可能需要大量的資源和成本投資。
  • 連續的安全過程：PCI DSS 4.0強調了連續的安全過程，而不是一年一度的合規練習，鼓勵持續的警覺。
D. 消費者的好處
  • 增強的安全性：消費者將受益於較高的安全標準，進一步降低數據洩漏和詐騙的風險。
  • 提高的信任：隨著企業遵守這些標準，消費者對電子支付系統的信任可能會增加。

為PCI DSS 4.0做準備

1. 評估和規劃

組織應首先評估其當前的合規狀態，並識別出與新要求的差距。

2. 培訓和意識

為員工進行新標準的培訓和提高意識對於平滑過渡至關重要。

3. 技術升級

實施必要的技術升級，特別是在身份驗證和加密方面，將是一個關鍵的步驟。

4. 定期監控和更新

定期監控和更新安全措施至關重要，以保持合規。

結論

PCI DSS版本4.0代表了保護支付卡數據方面的重大進步。雖然在適應和實施方面存在挑戰，但增強的安全和消費者信心的好處卻讓這一切都值得。隨著數字支付的景象持續演變，保持與最新標準的領先不僅是一種合規要求，也是一種策略優勢。

  • 3 min read

My journey to discover the Youtube algorithm

Last year during the Christmas holiday, I was bored at home and did some research about content creation. I am curious of unlocking the secret algorithm on YouTube to driving views, building an audience, and growing revenue streams. The journey was tough, filled with trials and errors, but it was also a path of discovery and learning.

I began by creating videos, pouring my time and effort into each one. You can view it by clicking this link: Top 14 Must-Visit Restaurants in Hong Kong | Foodie's Guide. However, the initial views were close to zero, and the audience growth was stagnant. That's when I realized that, it was crucial to invest less time in unproductive strategies and stop wasting time on video editing. This epiphany led to the first major shift: focusing on what the audience wanted, not just on personal interests.

Taking inspiration from YouTube's own origin story, I understood that success often follows a series of failures and adjustments. YouTube itself had started as a different concept and pivoted based on user feedback and market needs. This meta-example was a beacon of hope and strategy for me.

To truly harness the power of the platform, I became a student of data. This meant changing my entire approach to content creation. Every video was now a data point, providing valuable insights into viewer preferences and behavior. I made data-driven decisions but always optimized for human engagement. After all, humans respond to storytelling, not just facts and figures.

I began crafting videos that resonated with viewers' emotions and interests. The content was no longer for self-expression but for the audience who eagerly awaited each upload. It was a shift from ego-centric to audience-centric content.

One of my video with most view is A.I. generate jazz music with deep learning, using a Long short-term memory (LSTM) Network:

I analyzed viewer behavior, engagement rates, and feedback, adjusting content strategies accordingly. This cycle of trying, failing, analyzing, and adjusting became the backbone of my journey.

Gradually, the efforts paid off. Views soared, and the audience grew. As of today, the view has grown to 3.8K so far:

My channel became a study in discovering of the YouTube's algorithm, understanding and catering to human behavior and preferences.

Through this journey, I learned that success on YouTube isn't just about creativity; it's about understanding and adapting to the ever-evolving landscape of digital media. To unlock the Youtube algorithm, we need to become a master of storytelling (content is king) and a student of data (data is queen). If you like my Youtube channel, hit like, subscribe and share :)

  • in podcast
  • 2 min read

My journey to discover the Youtube algorithm

Welcome back to Continuous Improvement, where we dive deep into personal growth and learning through technology and creativity. I'm your host, Victor Leung, and today, I want to share a very personal story with you—a journey into content creation on YouTube, the trials, the errors, and the eventual insights that led to unexpected success.

Last Christmas, I found myself with some free time and a growing curiosity about YouTube's elusive algorithm—how does one drive views, build an audience, and create meaningful content that also happens to earn revenue? My adventure in this digital landscape was nothing short of a roller coaster.

It all started with me creating videos, pouring my heart and soul into each frame, each line of dialogue. But despite the effort, the response was... well, disheartening. Views were scarce, and audience growth was virtually nonexistent. It was a classic creator's dilemma, but it sparked a crucial realization: I needed to pivot.

Taking a leaf out of YouTube’s own book—yes, the platform itself had pivoted from its original concept based on user feedback—I began to reshape my strategy. Instead of crafting videos solely based on my interests, I started focusing on what the audience seemed to want, using every video as a data point to gather insights into viewer preferences and behaviors.

This data-driven approach was eye-opening. It wasn't just about analytics; it was about understanding human engagement. People are drawn to stories, to emotions, to connections. I began to craft content that resonated, that spoke to the viewer on the other side of the screen. My channel shifted from being ego-centric to audience-centric.

One of the pivotal moments came with a video titled "AI-generated Jazz Music with Deep Learning." Utilizing a Long Short-Term Memory (LSTM) Network, this video not only showcased fascinating technology but also struck a chord with the audience’s love for innovative, accessible content. The feedback was phenomenal, and it taught me the power of aligning tech with human interest.

From then on, it was all about refining the process—analyzing, adjusting, and continually evolving. This cycle became the backbone of my growth on YouTube. And today, I'm proud to say that the channel has not just survived but thrived, with viewership continuing to grow.

So, what’s the takeaway from all this? If you're diving into YouTube or any platform, really, remember: content is king, but understanding your audience is queen. Become a master of storytelling, sure, but also a diligent student of data. Your efforts to blend creativity with analytics are what will set you apart in the crowded digital arena.

Thank you for joining me on this personal journey today on Continuous Improvement. If you’ve enjoyed the episode, don’t forget to like, subscribe, and share. Your support means the world. I’m Victor Leung, and I’ll be back soon with more stories, tips, and tactics to help you navigate your path to success. Until next time, keep learning, keep creating, and keep engaging!

  • in zh
  • 1 min read

我的旅程去發現Youtube的演算法

去年聖誕節假期期間，我在家中無聊，於是做了一些有關創作內容的研究。我對於揭開 YouTube 上如何驅動觀看數、建立觀眾群和增加收益流的秘密演算法很好奇。這個旅程充滿了試驗和錯誤，非常辛苦，但也是發現和學習的道路。

我開始通過創作影片，並將時間和努力投入到每一部影片中。你可以點擊這個鏈接看到它：必去香港前14家餐廳 | 美食家指南。然而，起初的觀看數量接近零，觀眾的增長也停滯不前。那時我意識到，減少在無產出的策略上投入時間，並停止浪費時間在影片編輯上是關鍵。這個頓悟導致了第一次重大改變：我開始關注觀眾想要的，而不只是關注個人的興趣。

我從 YouTube 自身的創始故事中得到靈感，我理解到成功通常伴隨著一系列的失敗和調整。YouTube 本身由於用戶反饋和市場需求，原來的概念經過改變。這個範例對我來說是一個希望和策略的指南。

為了真正掌握平台的力量，我變成了一個數據的學生。這意味著我對內容創作的整個方法進行改變。每一部影片現在都是一個數據點，提供了有關觀眾偏好和行為的寶貴見解。我進行基於數據的決策，但總是優化人類的參與。畢竟，人們回應的是故事，而不僅僅是事實和數字。

我開始創作與觀眾的情感和興趣相呼應的影片。內容不再僅僅是為了自我表達，而是為了那些熱切等待每次上傳的觀眾。這是從以自我為中心到以觀眾為中心的內容的轉變。

我的一部觀看次數最多的影片是用深度學習，具有長短期記憶（LSTM）網絡來創作爵士樂：

我分析了觀眾的行為、參與率和反饋，並相應地調整內容策略。這個嘗試、失敗、分析、調整的循環成為我旅程的支柱。

慢慢地，我們的努力得到了回報。觀看數飛漲，觀眾人數也增加。到目前為止，觀看次數已成長到3800次：

我的頻道成了研究YouTube演算法的一個實驗場所，理解並滿足人的行為和偏好。

通過這個旅程，我了解到在YouTube上的成功不僅僅關於創造力，更是要理解並適應不斷變化的數位媒體景觀。是否能夠解鎖Youtube演算法，我們需要成為故事講的大師（內容為王）和數據的學生（數據為后）。如果你喜歡我的Youtube頻道，請點擊喜歡，訂閱並分享 :)

  • 2 min read

How to Make the Most of Your Time for Personal and Professional Development

In today's fast-paced world, time is a precious commodity. It's important to use it wisely, not just for professional advancement but for personal growth as well. Here are some productive ways to utilize your time for both personal and professional development:

1. Skill Enhancement

Use this period to learn new skills or enhance existing ones. This could involve enrolling in online courses, attending workshops, or obtaining certifications relevant to your field. The digital era offers abundant resources, so take advantage of them.

2. Networking

Engage in networking activities by attending industry events, meetups, or conferences. Building connections with other professionals can open new opportunities and keep you abreast of industry trends.

3. Personal Projects

Invest time in personal projects or hobbies that might complement your professional skills. This not only allows you to explore new interests but also helps in building a versatile portfolio.

4. Research and Reading

Stay updated with the latest trends and advancements in your field. Regularly read books, industry journals, or online articles. This habit can bring fresh perspectives and innovative ideas to your work.

5. Mentoring and Collaboration

Consider mentoring junior colleagues or collaborating on internal projects. This not only builds leadership skills but also keeps you connected with your team.

6. Physical and Mental Health

Focus on maintaining a healthy work-life balance. Regular exercise, meditation, and pursuing hobbies are crucial for mental and physical well-being.

7. Internal Contributions

Contribute to internal company initiatives, such as training programs, recruitment efforts, or organizing company events. This shows initiative and commitment to your organization.

8. Preparing for Upcoming Projects

If you're aware of your next project, start preparing early. Research the client, industry, or technologies involved to stay ahead.

9. Organizational Involvement

Get involved in various aspects of your organization. Participating in diversity and inclusion initiatives or contributing to the company newsletter can be enriching experiences.

10. Setting Goals

Take time to reflect on your career path and set realistic goals. Consider where you want to be in the next few years and plan actionable steps to achieve these objectives.

Conclusion

In essence, the key to making the most of your time lies in balancing professional development with personal growth. By enhancing skills, networking, engaging in personal projects, and focusing on health and organizational involvement, you create a well-rounded routine that not only advances your career but also enriches your personal life. Remember, every moment counts, so use it to grow and evolve both personally and professionally.

  • in podcast
  • 2 min read

How to Make the Most of Your Time for Personal and Professional Development

Welcome back to Continuous Improvement, where we delve into strategies that empower our professional journeys and enrich our personal lives. I’m your host, Victor Leung, and today we're discussing how to maximize our most valuable asset—time. In our fast-paced world, using time wisely is essential for both professional advancement and personal growth. Let’s dive into ten productive ways to utilize your time effectively.

1. Skill Enhancement. This is about pushing your boundaries. Enroll in online courses, attend workshops, or obtain certifications that are relevant to your field. The digital era has made learning more accessible than ever, so let’s make the most of these opportunities.

2. Networking. Whether it’s industry events, meetups, or conferences, building connections is crucial. Networking can open new doors and keep you updated on industry trends, so don’t underestimate the power of a good professional network.

3. Personal Projects. Invest time in personal projects or hobbies that might also complement your professional skills. This can lead to a more versatile portfolio and gives you a creative outlet outside your regular work.

4. Research and Reading. Stay sharp by keeping up with the latest trends and advancements in your field. Regular reading can bring fresh perspectives and innovative ideas that you can bring into your daily work.

5. Mentoring and Collaboration. Consider mentoring junior colleagues or collaborating on projects within your team. This not only enhances your leadership skills but also strengthens team dynamics.

6. Physical and Mental Health. Maintaining a healthy work-life balance is non-negotiable. Incorporate regular exercise, meditation, and hobbies into your routine to ensure you stay physically and mentally fit.

7. Internal Contributions. Show your commitment to your organization by contributing to internal initiatives, like training programs or company events. This demonstrates initiative and can greatly enhance your visibility within the company.

8. Preparing for Upcoming Projects. If you know what’s next on your project docket, start preparing early. Understanding the client, the industry, or the technologies involved can give you a significant advantage.

9. Organizational Involvement. Get involved in different aspects of your organization. Participate in diversity and inclusion initiatives or contribute to the company newsletter. These activities can be incredibly enriching.

10. Setting Goals. Reflect on your career path and set realistic goals. Where do you want to be in the next few years? Define actionable steps to reach these objectives.

In essence, the key to making the most of your time lies in balancing professional development with personal growth. Each moment offers an opportunity to grow, to learn, and to improve. Remember, how you use your time can define the trajectory of your career and the quality of your life.

Thank you for joining me on Continuous Improvement. I'm Victor Leung, and I look forward to our next exploration into ways we can all evolve and excel. Until then, keep learning, keep growing, and remember—every moment counts.

  • in zh
  • 1 min read

如何充分利用您的時間進行個人和專業發展

在當今快節奏的世界中，時間是寶貴的商品。使用時間的方式不僅影響專業進步，也對個人成長至關重要。以下是一些有效利用您的時間進行個人和專業發展的方式：

1. 技能增強

利用這段時間學習新技能或加強現有技能。可能涉及到參加在線課程，參加研討會，或獲得與您領域相關的認證。 在數字時代裡擁有豐富的资源，應充分利用。

2. 建立人脈

透過參加行業活動，社群聚會，或會議進行人脈活動。與其他專業人士建立關係可能帶來新的機會，讓你掌握行業趨勢。

3. 個人項目

投資時間於個人項目或嗜好，這可能補充您的專業技能。這不僅可以讓您探索新的興趣，也有助於建立多面向的個人作品組合。

4. 研究與閱讀

保持了解您所在領域最新的趨勢和進步。定期閱讀書籍，行業期刊，或在線文章。這種習慣可以為您的工作帶來新的觀點和創新的想法。

5. 指導和協作

考慮指導初級同事或進行內部專案的協作。這不僅可以建立領導技巧，還可以讓您與團隊保持聯繫。

6. 身體和精神健康

專注於維護健康的工作與生活平衡。定期運動，冥想，和追求嗜好對精神和身體健康至關重要。

7. 內部貢獻

參與內部公司活動，如培訓計劃，招聘工作，或組織公司活動。這顯示出您對組織的主動性和承諾。

8. 為即將到來的項目做好準備

如果您知道接下來的專案，早點開始準備。研究客戶，行業或相關技術，以保持領先。

9. 組織參與

參與組織的各種方面。參與多元化和包容性的活動，或對公司通訊做出貢獻，這都可以是充實的體驗。

10. 設置目標

花時間反思您的職業生涯，設定實際的目標。思考未來幾年您想要達到的地方，並規劃可行的步驟以實現這些目標。

結論

實質上，充分利用時間的關鍵在於平衡專業發展與個人成長。通過增強技能，擴大人脈，投入個人專案，並專注於健康和組織參與，您可以創建一個全面的日常程序，這不僅可以推進您的職業生涯，也可以豐富您的個人生活。請記住，每一刻都很重要，所以將其用於個人和專業地成長和進化。

  • 2 min read

Developing a Career Path in Architecture - Navigating the Complexities and Embracing Continuous Learning

Embarking on a career as an architect in the technological realm is a journey that demands continuous effort and learning. The landscape of technology shifts rapidly. A former Clipper expert would found his extensive knowledge in the field becoming obsolete.

The Necessity of Continuous Learning and Resourcefulness

An architect’s journey doesn’t end with acquiring a title; it’s a path marked by constant learning. Keeping abreast of both technological and business advancements is crucial. However, resources fluctuate, making it essential to actively seek the latest tools, newsfeeds, and groups. This proactive approach to resource gathering is vital in staying current and relevant in the field.

The 20-Minute Rule: Balancing Career and Personal Life

One effective method to manage this balance is the "20-Minute Rule." This technique involves dedicating a minimum of 20 minutes each day to your career development, whether it's exploring new concepts or delving deeper into familiar ones. This practice, although seemingly brief, can significantly enhance an architect's technical breadth and overall career growth.

However, implementing this rule can be challenging amidst the demands of work, family, and personal interests. It's often proposed to utilize these 20 minutes during lunch breaks or post-work hours, but these time slots frequently become occupied with other priorities. Therefore, it's recommended to apply this rule first thing in the morning, post-coffee and pre-email check, to ensure it becomes a consistent part of your daily routine.

Developing a Personal Technology Radar

The perils of ignoring technological advancements and the dangers of living in a technology bubble. This realization underscores the importance of having a personal technology radar, a concept derived from ThoughtWorks.

The ThoughtWorks Technology Radar: A Guide for Personal Adaptation

The ThoughtWorks Technology Radar, developed by the Technology Advisory Board, offers a structured approach for evaluating technologies. This biannual radar consists of four quadrants covering tools, languages and frameworks, techniques, and platforms, and it categorizes technologies into four rings: Hold, Assess, Trial, and Adopt.

For personal use, adapting these quadrants and rings can provide guidance on what to focus on, research further, actively experiment with, or fully embrace. This approach helps in balancing the allure of new, exciting technologies with practical career considerations.

Utilizing Open Source Visualization Tools and Social Media

In 2016, ThoughtWorks released a tool to assist in creating personal radar visualizations. Additionally, social media platforms like Twitter can be invaluable in staying informed about emerging technologies and industry trends.

Conclusion: Practice Makes Perfect

The path to becoming a great architect lies in constant practice. Architecture, much like any skill, improves with regular exercise and application. Remember, there are no definitive answers in architecture—only trade-offs. The key is continuous learning and practice. So, take the plunge and start building your architecture skills today!

  • in podcast
  • 2 min read

Developing a Career Path in Architecture - Navigating the Complexities and Embracing Continuous Learning

Hello, everyone! Welcome back to Continuous Improvement, the podcast where we explore how to refine our skills and enhance our careers in technology. I’m your host, Victor Leung, and today we’re talking about the life of a software architect—not just the role itself but how to continually grow and adapt in this rapidly evolving field.

Being an architect in technology is more than just reaching a title. It’s about engaging in an ongoing journey of learning and adaptation. The landscape of technology shifts constantly; what was relevant yesterday might become obsolete tomorrow. Remember the Clipper programming language? Exactly my point.

Let's dive into something I call The 20-Minute Rule. This is a method where you dedicate at least 20 minutes each day to advancing your knowledge—whether that’s exploring a new technology or deepening your understanding of a current project. This might sound brief, but these focused minutes can profoundly influence your career growth over time.

However, it's not without challenges. Our lives are packed with responsibilities, so it’s essential to carve out this time intentionally. I recommend setting this period first thing in the morning—after your coffee and before you dive into emails. It’s about making a small window of time a non-negotiable part of your day.

Another powerful tool in your arsenal should be a Personal Technology Radar. This idea, inspired by ThoughtWorks, helps you keep track of the latest in tools, languages, frameworks, and platforms. Their Technology Radar is a fantastic resource that categorizes tech into what you should Hold, Assess, Trial, and Adopt. Adapting this to your personal learning can guide you in what to focus on and experiment with next.

And don’t underestimate the power of social media and open source tools for keeping up with tech trends. In 2016, ThoughtWorks released a tool for creating your own radar visualizations, and platforms like Twitter are invaluable for real-time updates from tech leaders and communities.

To wrap up, becoming a great architect is like any other skill—it improves with practice. There’s no perfect blueprint in architecture; it’s all about making informed trade-offs and learning from each project. Continuous learning is your best tool in navigating this complex, ever-changing environment.

Thank you for tuning in to Continuous Improvement. I hope today’s episode inspires you to integrate daily learning into your routine and actively shape your technology radar. I’m Victor Leung, and I look forward to joining you next time as we continue to build our skills and improve together. Until then, keep learning, keep growing, and keep pushing the boundaries of what you can achieve.