Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
Stop Auditing Code, Start Securing Keys
40% of crypto losses stem from stolen private keys, not smart contracts. Most security budgets target the wrong attack surface entirely.
Recent Essays
AI Privacy: The Question Enterprise Leaders Must Ask
Enterprise AI buying is shifting from capability to privacy. Learn why 'what does it remember?' is now the critical vendor evaluation question.
Your Loop, Not Theirs: AI Agents as Team Members
Reframe 'human in the loop' as your process with AI agents as team members, not checkpoints. Unreviewable outputs signal lost authority.
Why AI Safety Needs Humans (Even When They Fail)
Anthropic's phishing test revealed humans fail 86% of approval checks—but replacing them with AI classifiers that miss 11% of threats isn't the answer. The real safety control is intentional human oversight when it matters.
The AI Pricing Time Bomb: Your Strategy
You're paying 2% of true AI costs. Learn what happens when OpenAI and Anthropic reprice subscriptions and how to future-proof your workflows.
All Content
714 posts
Tracking Criminals' Cell Phones With a Stingray
There was an interesting article in today's Wall Street Journal about the legal implications of police using a device called a stingray to find people. Stingrays are one of several new technologies used to track locations, often without a warrant.
The Cloud is More Secure Than You
I was reading an interview with FEMA CIO Richard Spires on his aggressive approach to moving US infrastructure to the cloud. I'm often asked whether cloud computing is secure enough for a company.
Give Me My Corporate E-Mail on My Device
I've spent a lot of time talking to clients about allowing employees to receive corporate e-mail on their personal devices. I was pleased to read an article outlining how Ford Motor Company allows employees to bring their own device.
58% of Companies Block Access to Social Media Sites
I recently posted about the benefits of not blocking access to social media websites on the corporate network. Then I picked up an article on the percentage of companies who do.
Web Surfing Helps at Work
The Wall Street Journal published a piece on how using the Internet for non-business purposes increases productivity. As security professionals, we are usually in the business of locking employees down, but those time wasters could make them more productive.
My Day Off Of The Internet
On Father's Day this year, I decided to take a day off from the internet. I got the idea from Phil Cooke's Reconnect to Disconnect campaign, and since it was my first Father's Day, it was a great time to experiment.