UNMITIGATED RISK

I started working in technology around 1993.

For as long as my children can remember, I have told them that they are students at Hurst University.

I have been writing about the limitations of audits and compliance systems for several years.

The WebPKI has two structures that are not the same shape.

In security we like to say that the problems live in the gaps between systems.

You need to use FIPS 140 because of compliance, but have you ever asked what that requirement is actually for?

Disclosure: I am an advisor to Binarly.

There is an old Steve Jobs clip from a 1992 MIT Sloan talk that feels newly relevant in the age of AI.

Spend enough years in security and you notice that the people whose judgment you actually trust are rarely the ones with the cleanest credentials.

The prior piece made a narrow claim.