Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The $285M Handshake: Why Trust is Your Biggest Security Risk
North Korea's Drift Protocol hack exploited trusted relationships, not code vulnerabilities. Learn how social engineering bypassed blockchain security and what it means for your defenses.
Recent Essays
AI Agents and Wellbeing: Design for Focus, Not Chaos
AI agents will either protect your focus or destroy it. The difference isn't technology—it's design. Learn why context-aware agents matter for knowledge worker wellbeing.
Why AI Getting Boring Is Actually Good News
As AI companies go public, the hype fades but real business value emerges. Here's what crypto taught us about infrastructure over narratives.
Why Superior Tech Loses: Betamax vs AI Agents
Technical excellence doesn't guarantee market success. Learn why distribution and demand beat superior engineering—a critical lesson for AI and blockchain leaders.
Beyond the Hype: What Really Matters in Crypto Launches
Strip away blockchain announcements to find what's defensible: distribution, regulatory track record, and market infrastructure—not just copyable technology.
All Content
681 posts
Bring Your Own PC
A common topic in companies lately has been Bring Your Own Device, and we usually think mobile. But the New York Times highlights another growing area: Bring Your Own Computer.
The Journal Report on Information Security
The Wall Street Journal today dedicated their Journal Report to Information Security, with excellent coverage of topical and understandable articles around information security, social engineering, and incident response.
NYT on US Government Identities
The New York Times has a good background piece on the NSTIC proposal for online identities. There will never be a government-sponsored identity program that makes everyone happy, but perfect or not, it's a great start.
Tracking Criminals' Cell Phones With a Stingray
There was an interesting article in today's Wall Street Journal about the legal implications of police using a device called a stingray to find people. Stingrays are one of several new technologies used to track locations, often without a warrant.
The Cloud is More Secure Than You
I was reading an interview with FEMA CIO Richard Spires on his aggressive approach to moving US infrastructure to the cloud. I'm often asked whether cloud computing is secure enough for a company.
Give Me My Corporate E-Mail on My Device
I've spent a lot of time talking to clients about allowing employees to receive corporate e-mail on their personal devices. I was pleased to read an article outlining how Ford Motor Company allows employees to bring their own device.
58% of Companies Block Access to Social Media Sites
I recently posted about the benefits of not blocking access to social media websites on the corporate network. Then I picked up an article on the percentage of companies who do.
Web Surfing Helps at Work
The Wall Street Journal published a piece on how using the Internet for non-business purposes increases productivity. As security professionals, we are usually in the business of locking employees down, but those time wasters could make them more productive.
My Day Off Of The Internet
On Father's Day this year, I decided to take a day off from the internet. I got the idea from Phil Cooke's Reconnect to Disconnect campaign, and since it was my first Father's Day, it was a great time to experiment.