Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#security
142 posts
Security Longreads — Issue #16
Dive into Security Longreads Issue #16, featuring in-depth analyses of recent security breaches, social engineering threats, and innovative exploits. Stay informed and ahead with these essential reads.
On 10 Weeks of Security Longreads
Discover the journey of creating the "Security Longreads" newsletter, exploring the challenges of curating in-depth security articles for both technical and mainstream audiences over the past 10 weeks.
Security Longreads — Issue
Dive into "Security Longreads," your weekly guide to must-read articles on information security and intriguing topics for security professionals. Explore digital vulnerabilities and offbeat insights today!
Updated for 2014: Online Classes for the Information Security Professional
Explore the latest online courses for information security professionals, featuring 11 top picks across computer security, in-depth topics, and InfoSec-related areas to enhance your cybersecurity skills.
Are Airline Kiosks The Next Fraud Vector?
Explore how airline kiosks might become the next target for credit card fraud, drawing parallels to the infamous Target breach. Learn about potential vulnerabilities and the implications for travelers.
4 Coursera Classes for the InfoSec Professional
Discover key Coursera classes for info security pros, including cryptography and risk management, along with unique offerings like equine nutrition, to broaden your skills and perspectives.
Why I Use Toto
If you scroll to the bottom of the page, the footer says "powered by toto." Toto is a minimalist blogging engine that runs on Ruby and is fully compatible with the Heroku platform.
Interviewing Security Professionals
I was reading a recent 37signals post about why they don't hire programmers based on puzzles or parlor tricks, and it got me wondering what strange tricks I played on the security professionals interviewing with me.
Write Down Your Passwords
The usual protocol when it comes to passwords is to create one that is hard to guess but easy to remember, because you shouldn't write it down. Yet I was still surprised to see a product specifically designed to write your passwords in.
Non Profit Wanted
Looking for a non-profit focused on helping other non-profits and charities with their information security issues, if you know of one.
A Refrigerator Has Never Been Hacked
Today's WSJ had an ad from the US Postal Service touting the security of a printed document over e-mail and the internet. Beyond the security of the printed letter, mail is great out-of-band communication with your customer.
Hacking Made Easier
NPR, along with a number of other media outlets, has been talking about new user-friendly hacking tools that let the average user be an elite hacker. I'm not an advocate for creating hacking tools, but I'd like to know what an attacker is going to use.