Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
AI Workers and the Future of Senior Knowledge Work
OpenAI's Presence shifts AI from a tool you build on to a governed worker that handles senior tasks like claims and billing disputes, forcing leaders to rethink where expertise actually lives.
Recent Essays
Permissioned Blockchain: Why Incumbents Win
Permissioned blockchains aren't crypto adoption—they're how incumbents keep control. Swift's 17-bank network proves gatekeepers choose the tech that keeps them in charge.
Bot Auth Is The New SPF: Prepare Your AI Agents
Web crawlers now need verified identity like email senders. Learn why bot authentication matters for your AI agents and enterprise reputation.
AI Won't Beat Your Best Analyst—But It Will Hollow Out Your Org
AI disruption in finance isn't about outperforming top talent—it's about compressing analytical work layers. Learn where the real org chart repricing happens.
AI Voice Phishing: Why Your Defenses Face the Wrong Direction
AI voice-cloning has fundamentally reversed phishing attacks—now criminals call employees impersonating trusted leaders, exploiting help desk processes instead of technical vulnerabilities.
All Content
732 posts
A Refrigerator Has Never Been Hacked
Today's WSJ had an ad from the US Postal Service touting the security of a printed document over e-mail and the internet. Beyond the security of the printed letter, mail is great out-of-band communication with your customer.
Hacking Made Easier
NPR, along with a number of other media outlets, has been talking about new user-friendly hacking tools that let the average user be an elite hacker. I'm not an advocate for creating hacking tools, but I'd like to know what an attacker is going to use.
Keep It Simple
I had the privilege of hearing Harry Kraemer, former CEO of Baxter, present on leadership. One of his key tenets is Keeping Things Simple, and it applies directly to how security professionals sell security to the organization.
Bring Your Own PC
A common topic in companies lately has been Bring Your Own Device, and we usually think mobile. But the New York Times highlights another growing area: Bring Your Own Computer.
The Journal Report on Information Security
The Wall Street Journal today dedicated their Journal Report to Information Security, with excellent coverage of topical and understandable articles around information security, social engineering, and incident response.
NYT on US Government Identities
The New York Times has a good background piece on the NSTIC proposal for online identities. There will never be a government-sponsored identity program that makes everyone happy, but perfect or not, it's a great start.
Tracking Criminals' Cell Phones With a Stingray
There was an interesting article in today's Wall Street Journal about the legal implications of police using a device called a stingray to find people. Stingrays are one of several new technologies used to track locations, often without a warrant.
The Cloud is More Secure Than You
I was reading an interview with FEMA CIO Richard Spires on his aggressive approach to moving US infrastructure to the cloud. I'm often asked whether cloud computing is secure enough for a company.
Give Me My Corporate E-Mail on My Device
I've spent a lot of time talking to clients about allowing employees to receive corporate e-mail on their personal devices. I was pleased to read an article outlining how Ford Motor Company allows employees to bring their own device.
58% of Companies Block Access to Social Media Sites
I recently posted about the benefits of not blocking access to social media websites on the corporate network. Then I picked up an article on the percentage of companies who do.
Web Surfing Helps at Work
The Wall Street Journal published a piece on how using the Internet for non-business purposes increases productivity. As security professionals, we are usually in the business of locking employees down, but those time wasters could make them more productive.
My Day Off Of The Internet
On Father's Day this year, I decided to take a day off from the internet. I got the idea from Phil Cooke's Reconnect to Disconnect campaign, and since it was my first Father's Day, it was a great time to experiment.