Articles, write-ups, and musings concerning the world of cybersecurity and technology.
A CTO wants to bury a breach. A senior VP wants an intern to say "probably." Two hypothetical memos on what to do when someone with more power wants a convenient story, and why honesty wins.
Two security dilemmas: a researcher whose vendor won't patch, and an engineer told to delete subpoenaed emails. Four questions (Policy, Legal, Universal, Self) show where the right call comes from.
When ransomware locks up a hospital, the hardest question isn't technical. It's whether to pay the people who did it.
AI is getting very good at defending our systems. It's also getting very good at making decisions nobody can explain.
