Tax policies can drive innovation, promote inclusive growth: DPM Tharman
By Faris Mokhtar Posted 24 Jul 2016 20:01 Updated 24 Jul 2016 20:34
SINGAPORE: Tax policies can be designed to help countries drive innovation and at the same time promote inclusive growth, said Deputy Prime Minister Tharman Shanmugaratnam at a conference held on Saturday (Jul 23) on the sidelines of a G20 meeting in Chengdu, China.
Mr Tharman, who is also Coordinating Minister for Economic and Social Policies, said growing the incomes of low-wage workers should be a key priority when countries come up with tax and fiscal policies to promote inclusive economic growth.
"It's not just an economic priority, but a broader, strategic priority: including everyone in the formal labour market and giving them a real chance to improve their skills and incomes, (as well as) to feel they can earn their own success."
To achieve this, Mr Tharman noted that some countries have put in place policies such as negative income taxes for low-wage workers. He added that this not only promotes equity, but does so in a growth-friendly way.
Mr Tharman also said countries can tap on property taxes, which is the least damaging to income growth. This is an approach that Singapore has adopted; for instance, by putting in place taxes on property transactions, such as stamp duties.
This is to distinguish properties purchased for people to own and live in from those that are bought for investment.
Mr Tharman stressed that property taxes are a better way to collect tax than income taxes.
"(There is) less harm to growth and (property taxes) are more likely to promote an economic culture conducive to innovation and entrepreneurship," he said.
Mr Tharman said that part of a country's fiscal policies should include giving fair subsidies for public service and this should be targeted at those who need it the most. He pointed out that in many countries, most of the subsidies do not go to the poor.
This happens when governments subsidise healthcare for everyone, rather than based on needs. As such, taxes will rise to support spending.
Mr Tharman said such an approach is not sustainable. He emphasised that giving fair and targeted subsidies would not just ensure social equity, but also help countries to have sustainable fiscal budgets.
- CNA/hs
- wong chee tat :)
Sunday, July 24, 2016
Hong Kong graduates face declining job prospects, salaries
Hong Kong graduates face declining job prospects, salaries
By Wei Du Posted 24 Jul 2016 17:00 Updated 24 Jul 2016 17:41
HONG KONG: With only a few weeks left on campus, Ms Chloe Hui looked visibly worried.
Clutching a handful of resumes, she went booth to booth at a job fair, talking to any interviewer who would give her a few minutes.
The English major at the Chinese University of Hong Kong has been applying for jobs since December. She has managed to get some interviews, but not a single offer just yet.
“It's much more difficult than I thought,” she told Channel NewsAsia.
Like many graduates in Hong Kong, Ms Hui is the first person in her family to go to university. That used to be a great source of pride for her parents, but now she has been forced to pare back expectations and look for jobs that do not necessarily require a higher degree.
“Like for HR assistants, they don't really need university graduates but I am still applying for it,” she said. “I don't have many choices I think.”
For some others, any permanent job would be good. Mr Benjamin Lam graduated from the prestigious Hong Kong University three years ago with a degree in Risk Management, but has been doing a series of odd jobs ever since.
“Sometimes I feel discouraged,” Mr Lam said. “I think I can support myself, but I can't see any good prospect for a luxury life.”
He is hardly alone. According to one study by the New Forum, graduates’ medium starting salary in Hong Kong declined 20 per cent between 1993 and 2013 when inflation is taken into account. If they want to buy an apartment, the picture is even more dire. When adjusted for the city’s soaring housing prices, graduates’ now make 60 per cent lower than those 20 years ago.
“I feel bad for the young people these days,” said Mr Edward Chen, a Council member at Hong Kong University. “In the old days it's a straight forward path. If you were a university graduate, you were guaranteed a place in the middle class. But today, no.”
DIMMING ECONOMIC PROSPECTS
A series of social unrests have rocked Hong Kong in recent years. The peaceful Umbrella Movement in 2014, led by university students, shut down the city center for months. Earlier in 2016, a riot broke out in Mongkok. Largely young protestors set cars on fire and hurled bricks at police.
The events have often been linked to Hong Kong’s lack of progress towards democracy, but educators like Mr Chen say dimming economic prospects for the city's youths may also be a key reason.
"We have a large group of frustrated young people, university graduates many of them. It's very easy to persuade them that society is not doing justice to them, and to some extent it might be true."
To be sure, Hong Kong youths are not alone in feeling a sense of hopelessness. Economic stagnation has plagued developed economies around the world. But in Hong Kong, their problems were made worse by what some experts call misguided government policy.
After the Dotcom crash in 2001, Hong Kong’s economy was again hit by the SARS outbreak in 2003. The city’s unemployment rate roared past 8 per cent, putting enormous pressure on the government of Tung Chee-Hwa, the city’s first Chief Executive.
To slow the pace of young people entering the workforce, the government boosted university enrolment rate from 20 per cent to 60 per cent. But unlike a previous round of expansion, the additional slots did not come from the established, taxpayer-funded universities. Instead, a crop of new private schools filled the gap.
Without government funding and unable to charge higher tuitions, Mr Chen said these universities have not been able to match the quality of the city’s eight publicly-funded schools.
“First there are just too many university graduates. Secondly, a large number of the students cannot meet employers’ expectations.”
LOOK BEYOND HONG KONG?
At the same time, skilled jobs started moving across the border. Even in Hong Kong, many multinationals began hiring mainland Chinese graduates, because they speak better Mandarin and have more in common with mainland clients.
Facing a new reality, some people say Hong Kong’s youths need to look beyond the city in their job hunts.
Mr Paul Mak, President of Hong Kong Shanghai Youth Association, has been trying to get local graduates to work in Shanghai, but that has not proved easy.
“A lot of Hong Kong young people don't consider that especially when it's their first jobs,” he said.
Salaries are usually the first barrier. The starting pay in mainland China is still lower, although Mr Mak said promotions happen faster there, so the pay would eventually catch up.
That said, the cost of relocation is hefty, and Hong Kong graduates would have to rent a place to stay in Shanghai while they can live with their parents in Hong Kong. That means the option is often only available to graduates from wealthy families.
- CNA/sk
- wong chee tat :)
By Wei Du Posted 24 Jul 2016 17:00 Updated 24 Jul 2016 17:41
HONG KONG: With only a few weeks left on campus, Ms Chloe Hui looked visibly worried.
Clutching a handful of resumes, she went booth to booth at a job fair, talking to any interviewer who would give her a few minutes.
The English major at the Chinese University of Hong Kong has been applying for jobs since December. She has managed to get some interviews, but not a single offer just yet.
“It's much more difficult than I thought,” she told Channel NewsAsia.
Like many graduates in Hong Kong, Ms Hui is the first person in her family to go to university. That used to be a great source of pride for her parents, but now she has been forced to pare back expectations and look for jobs that do not necessarily require a higher degree.
“Like for HR assistants, they don't really need university graduates but I am still applying for it,” she said. “I don't have many choices I think.”
For some others, any permanent job would be good. Mr Benjamin Lam graduated from the prestigious Hong Kong University three years ago with a degree in Risk Management, but has been doing a series of odd jobs ever since.
“Sometimes I feel discouraged,” Mr Lam said. “I think I can support myself, but I can't see any good prospect for a luxury life.”
He is hardly alone. According to one study by the New Forum, graduates’ medium starting salary in Hong Kong declined 20 per cent between 1993 and 2013 when inflation is taken into account. If they want to buy an apartment, the picture is even more dire. When adjusted for the city’s soaring housing prices, graduates’ now make 60 per cent lower than those 20 years ago.
“I feel bad for the young people these days,” said Mr Edward Chen, a Council member at Hong Kong University. “In the old days it's a straight forward path. If you were a university graduate, you were guaranteed a place in the middle class. But today, no.”
DIMMING ECONOMIC PROSPECTS
A series of social unrests have rocked Hong Kong in recent years. The peaceful Umbrella Movement in 2014, led by university students, shut down the city center for months. Earlier in 2016, a riot broke out in Mongkok. Largely young protestors set cars on fire and hurled bricks at police.
The events have often been linked to Hong Kong’s lack of progress towards democracy, but educators like Mr Chen say dimming economic prospects for the city's youths may also be a key reason.
"We have a large group of frustrated young people, university graduates many of them. It's very easy to persuade them that society is not doing justice to them, and to some extent it might be true."
To be sure, Hong Kong youths are not alone in feeling a sense of hopelessness. Economic stagnation has plagued developed economies around the world. But in Hong Kong, their problems were made worse by what some experts call misguided government policy.
After the Dotcom crash in 2001, Hong Kong’s economy was again hit by the SARS outbreak in 2003. The city’s unemployment rate roared past 8 per cent, putting enormous pressure on the government of Tung Chee-Hwa, the city’s first Chief Executive.
To slow the pace of young people entering the workforce, the government boosted university enrolment rate from 20 per cent to 60 per cent. But unlike a previous round of expansion, the additional slots did not come from the established, taxpayer-funded universities. Instead, a crop of new private schools filled the gap.
Without government funding and unable to charge higher tuitions, Mr Chen said these universities have not been able to match the quality of the city’s eight publicly-funded schools.
“First there are just too many university graduates. Secondly, a large number of the students cannot meet employers’ expectations.”
LOOK BEYOND HONG KONG?
At the same time, skilled jobs started moving across the border. Even in Hong Kong, many multinationals began hiring mainland Chinese graduates, because they speak better Mandarin and have more in common with mainland clients.
Facing a new reality, some people say Hong Kong’s youths need to look beyond the city in their job hunts.
Mr Paul Mak, President of Hong Kong Shanghai Youth Association, has been trying to get local graduates to work in Shanghai, but that has not proved easy.
“A lot of Hong Kong young people don't consider that especially when it's their first jobs,” he said.
Salaries are usually the first barrier. The starting pay in mainland China is still lower, although Mr Mak said promotions happen faster there, so the pay would eventually catch up.
That said, the cost of relocation is hefty, and Hong Kong graduates would have to rent a place to stay in Shanghai while they can live with their parents in Hong Kong. That means the option is often only available to graduates from wealthy families.
- CNA/sk
- wong chee tat :)
My McAfee FRMP4.3 Notes
My McAfee FRMP4.3 Notes
- encrypts files on folders on local drives, network shares, removable media drives(eg: portable hard drive) via policies set in EPO
- depends on Windows credentials
- FRMP client installed on client machine, frmp sync (policies and encryption keys) with EPO server.
========================================================================
Steps to upgrade EEFF:
a) uninstall existing version.
b) install supported mcafe agent. (mcafee agent 4.8 / 5)
c) check mcafee agent communicates to epo server
c) use msiexec.exe /q /i eeff32.msi (for 32bit os) or msiexec.exe /q /i eeff64.msi (for 64bit os)
d) restart client machine
e) don't forget to check and test it works properly
========================================================================
How to move or migrate machines with installed FRMP from existing EPO server to another EPO server?
a) backup encryption keys and policy info
b) export encryption keys and policy info
Note: user domain and username do not change
In FRMP, it is like a persistent encryption engine. Eg: Even if move out of encrypted directory, file remains encrypted.
========================================================================
What are the Protection Level options available for Removable Media?
The available options are:
Removable Media Policy is organized into two tabs:
- USB Media
- Floppy Disk Media
Options available for USB Media:
- Allow Unprotected Access
- Allow Encryption (with offsite access)
- Enforce Encryption (with offsite access)
- Enforce Encryption (onsite access only)
- BlockWrite Operations
NOTE: This option will restrict the USB devices to a read-only mode. (New FRP feature)
Options available for Floppy Disk Media:
- Allow Unprotected Access
- Block Write Operations
(From: KB81450)
========================================================================
FRMP Protection Options for usb devices:
- Use enforce encryption (onsite access only).
Example: Restrict access to encrypted usb devices within company's environment only.
-- No automatic decryption of existing files.
Example: If removable media device (eg: usb hard drive) has Enforce Encryption (onsite access only), data in usb device remains encrypted even disable it using policy to Allow Unprotected Access.
Remember FRMP is a persistent encryption engine.
--- To decrypt data in usb device, Key Field option = Decrypt
Changing policy to Allow Unprotected Access affects new devices (usb devices that not affected by Enforce Encryption (onsite access only) )
-- New files keep getting encrypted.
Problem Example: Disabling the enforce encryption (onsite access only) has no effect. New files still encrypted because encryption policy applied to usb device.
Workaround: To remove applied encrytion policy on removeable media, Key Field = Decrypt
-- Ignore existing content on media
Ignore existing content on media = Disabled,
Result - all existing files becomes encrypted (not ignored). This needs machines with
FRMP installed.
Ignore existing content on media = Enabled,
Result - Only new files are encrypted
- Use Allow encryption (with offsite access) or enforce enryption (with offsite access). Example: enable users to access encrypted usb devices on system without install mcafee encryption software
- Use enforce encryption (with offsite access).
Example: Copy a file to usb device only when encrypted, else, device is read only. If user managed option selected, files can copied only to encrypted portion of device.
- Block Write Operation option. Example: make usb sticks as read only.
========================================================================
Sharing with cd/dvd/iso
Enforce Encryption (onsite access only)
- burning applications
burning software should be supported else cd/dvd can be plaintext. See KB81450
- cd/dvd format limitation
cd/dvd media should be supported. See KB76478
========================================================================
FRMP Encryption
- policy driven
Example: Enforce encryption of a folder (or serveral folders) by specifting location and encryption key (or corresponding encryption keys) for that folder.
- user driven
Example: users can selectively encrypt or decrypt folders. Explicit Encrypt and Explicit Decrypt made enabled.
========================================================================
Removing a folder encryption policy - it does not decrypt content of that folder.
Problem Example: Removing a folder encryption policy - it does not decrypt content of that folder.
Workaround: Specifiy policy pointing to folder location. Encryption key field = Decrypt
========================================================================
Encrypted parent folder - decrypted subfolder
Default setting - all subfolder in a folder that is "encrypt" also encrypted. Follows inheritance.
Problem Example:
Parent Folder (Properties - encrypted)
- Sub Folder (Properties - decrypted)
Solution: Use decrypt option
========================================================================
Encryption Keys
Regular and user personal keys
- Recommend deactivate keys instead of deleting keys. Deleted key cannot be restored.
User personal keys
- Administrator can create unique keys for users
- can referenced in Grant Key policy generically (as single key) and create unique keys for users
Use personal keys and multiple EPO db
- Not recommended.
- Recommended for user register with one 1 EPO and gets policies and key from that EPO
========================================================================
User local keys
- local key limited to user and client machine where it was created
user local keys vs user personal keys
- user manually created (user) local keys on their local machines and share via export and import processes.
- user local keys NOT uploaded to EPO db and not transfer to user to other machines via default frmp
- Administrator create unique keys for users for user personal keys in EPO
References:
- KB81450
- FRMP4.3 Best Practice Guide
- wong chee tat :)
- encrypts files on folders on local drives, network shares, removable media drives(eg: portable hard drive) via policies set in EPO
- depends on Windows credentials
- FRMP client installed on client machine, frmp sync (policies and encryption keys) with EPO server.
========================================================================
Steps to upgrade EEFF:
a) uninstall existing version.
b) install supported mcafe agent. (mcafee agent 4.8 / 5)
c) check mcafee agent communicates to epo server
c) use msiexec.exe /q /i eeff32.msi (for 32bit os) or msiexec.exe /q /i eeff64.msi (for 64bit os)
d) restart client machine
e) don't forget to check and test it works properly
========================================================================
How to move or migrate machines with installed FRMP from existing EPO server to another EPO server?
a) backup encryption keys and policy info
b) export encryption keys and policy info
Note: user domain and username do not change
In FRMP, it is like a persistent encryption engine. Eg: Even if move out of encrypted directory, file remains encrypted.
========================================================================
What are the Protection Level options available for Removable Media?
The available options are:
Removable Media Policy is organized into two tabs:
- USB Media
- Floppy Disk Media
Options available for USB Media:
- Allow Unprotected Access
- Allow Encryption (with offsite access)
- Enforce Encryption (with offsite access)
- Enforce Encryption (onsite access only)
- BlockWrite Operations
NOTE: This option will restrict the USB devices to a read-only mode. (New FRP feature)
Options available for Floppy Disk Media:
- Allow Unprotected Access
- Block Write Operations
(From: KB81450)
========================================================================
FRMP Protection Options for usb devices:
- Use enforce encryption (onsite access only).
Example: Restrict access to encrypted usb devices within company's environment only.
-- No automatic decryption of existing files.
Example: If removable media device (eg: usb hard drive) has Enforce Encryption (onsite access only), data in usb device remains encrypted even disable it using policy to Allow Unprotected Access.
Remember FRMP is a persistent encryption engine.
--- To decrypt data in usb device, Key Field option = Decrypt
Changing policy to Allow Unprotected Access affects new devices (usb devices that not affected by Enforce Encryption (onsite access only) )
-- New files keep getting encrypted.
Problem Example: Disabling the enforce encryption (onsite access only) has no effect. New files still encrypted because encryption policy applied to usb device.
Workaround: To remove applied encrytion policy on removeable media, Key Field = Decrypt
-- Ignore existing content on media
Ignore existing content on media = Disabled,
Result - all existing files becomes encrypted (not ignored). This needs machines with
FRMP installed.
Ignore existing content on media = Enabled,
Result - Only new files are encrypted
- Use Allow encryption (with offsite access) or enforce enryption (with offsite access). Example: enable users to access encrypted usb devices on system without install mcafee encryption software
- Use enforce encryption (with offsite access).
Example: Copy a file to usb device only when encrypted, else, device is read only. If user managed option selected, files can copied only to encrypted portion of device.
- Block Write Operation option. Example: make usb sticks as read only.
========================================================================
Sharing with cd/dvd/iso
Enforce Encryption (onsite access only)
- burning applications
burning software should be supported else cd/dvd can be plaintext. See KB81450
- cd/dvd format limitation
cd/dvd media should be supported. See KB76478
========================================================================
FRMP Encryption
- policy driven
Example: Enforce encryption of a folder (or serveral folders) by specifting location and encryption key (or corresponding encryption keys) for that folder.
- user driven
Example: users can selectively encrypt or decrypt folders. Explicit Encrypt and Explicit Decrypt made enabled.
========================================================================
Removing a folder encryption policy - it does not decrypt content of that folder.
Problem Example: Removing a folder encryption policy - it does not decrypt content of that folder.
Workaround: Specifiy policy pointing to folder location. Encryption key field = Decrypt
========================================================================
Encrypted parent folder - decrypted subfolder
Default setting - all subfolder in a folder that is "encrypt" also encrypted. Follows inheritance.
Problem Example:
Parent Folder (Properties - encrypted)
- Sub Folder (Properties - decrypted)
Solution: Use decrypt option
========================================================================
Encryption Keys
Regular and user personal keys
- Recommend deactivate keys instead of deleting keys. Deleted key cannot be restored.
User personal keys
- Administrator can create unique keys for users
- can referenced in Grant Key policy generically (as single key) and create unique keys for users
Use personal keys and multiple EPO db
- Not recommended.
- Recommended for user register with one 1 EPO and gets policies and key from that EPO
========================================================================
User local keys
- local key limited to user and client machine where it was created
user local keys vs user personal keys
- user manually created (user) local keys on their local machines and share via export and import processes.
- user local keys NOT uploaded to EPO db and not transfer to user to other machines via default frmp
- Administrator create unique keys for users for user personal keys in EPO
References:
- KB81450
- FRMP4.3 Best Practice Guide
- wong chee tat :)
McAfee DAT version = 8235 (jul 23rd 2016)
McAfee DAT version = 8235 (jul 23rd 2016)
Link: here ( Select Yes. And it keeps getting updated daily. Region=US)
- wong chee tat :)
Link: here ( Select Yes. And it keeps getting updated daily. Region=US)
- wong chee tat :)
Blog Updates:
Blog Updates:
Minor updates:
- Update labels on some old posts
Will continue to make minor improvements for this blog!
- wong chee tat :)
Minor updates:
- Update labels on some old posts
Will continue to make minor improvements for this blog!
- wong chee tat :)
VirtualBox 5.1.2 (released 2016-07-21)
VirtualBox 5.1.2 (released 2016-07-21)
This is a maintenance release. The following items were fixed and/or added:
This is a maintenance release. The following items were fixed and/or added:
- VMM: several fixes
- GUI: fixed screenshot if the VM is started in separate mode
- GUI: fixed issue with double-click/opening registered file types (.vbox and .vbox-extpack) on Mac OS X (bug #15648)
- GUI: fixed a bug which made it impossible close some error/warning messages using the close button
- GUI: weakened the control over the VM window behavior allowing to resize it across multiple screens and to use in Snap Assist techniques
- GUI: jump to the second tab of the session information window (5.1.0 regression)
- GUI: fix for Alt-Tab
- Storage: fixed creating fixed size VHD images (bug #15601)
- Storage: fixed a hang during power off if the VM was suspended before and a NVMe controller is configured
- USB: fixed a crash under certain conditions
- Audio: make AC'97 volume control work again (5.1.0 regression; bug #15598)
- Audio: fixed rare VM hangs when using AC'97 emulation
- Audio: SB16 fixes
- EFI: fixed access to devices attached to SATA port 2 and higher (bug #15607)
- OVA: fix for checking certain signatures
- OVA: fixed MAC address generation for appliances created by VirtualBox (5.1.0 regression; bug #15623)
- API: fixed audio settings handling for older config files (bug #15626)
- API: fixed truncation of USB product/vendor IDs on Linux hosts (5.1.0 regression; bug #15644)
- API: fixed VRDP with authentication (bug #15653)
- API: don't crash if there is no graphics controller configured (bug #15628)
- Linux hosts: fixed EL5 builds (bug #15634)
- non-Windows hosts: fixed a crash during shutdown under rare circumstances (bug #15568)
- Linux Additions: fixed SELinux issue which prevented certain Linux guests to work in 3D mode (bug #15574)
- User Manual: updates
VirtualBox 5.1 (released 2016-07-12)
This is a major update. The following major new features were added:
This is a major update. The following major new features were added:
- VMM: new APIC and I/O APIC implementations that result in significantly improved performance in certain situations (for example with networking, bug #15295)
- VMM: added support for Hyper-V paravirtualized debugging of Windows guests
- VMM: emulate even more MMIO and shadow pagetable exits without going back to user mode
- GUI: overall migration to Qt5 (bug #11775)
- GUI: passive API event listener improving the VM GUI performance and response time
- Audio: added HDA (High Definition Audio) support for newer Linux guests
- Audio: added on-demand timers which should improve the overall performance and reduce the CPU consumption
- Audio: more fine-grained volume control for the AC'97 emulation, which now also takes the master volume control into account
- better support for Python 3
In addition, the following items were fixed and/or added:
- VMM: activate the x2APIC by default for Linux guests
- VMM: many more fixes
- GUI: the Detach UI action is now a part of the VM Machine menu
- GUI: reworked session information window
- GUI: the new VM wizard now allows to choose the VM location for the VM which is being created
- GUI: fixed location of touch events in unscaled HiDPI mode (bugs #14366, #14367)
- GUI: various bugfixes and internal cleanup
- Storage: use fallocate() or similar if present to speed up creating fixed-sized disk images (bug #5967)
- Storage: implemented NVMHCI-compatible storage controller
- Audio: various bugfixes and infrastructure improvements
- E1000: implemented interrupt throttling for performance improvements
- EFI: many improvements, for example allow to boot from USB
- OVF: improved handling of signed manifests
- API: Windows XP guests and Windows 2003 server guests now default to the E1000 T Server network card
- VBoxSVC: fixed several memory leaks when handling .dmg images
- Installers: ship VBoxBugReport
- Windows hosts: reworked COM proxy (e.g. bug #8298)
- Linux installers: no longer rely on DKMS for module rebuilding
- Linux Additions: fix a problem when updating the initramfs after the guest modules are compiled (bug #15579)
- Linux Additions: try to fix a problem where the OpenGL libraries where loaded by the X server when we only support X clients (bug #15574)
- wong chee tat :)
Subscribe to:
Posts (Atom)