Articles

  • Quis custodiet ipsos nubem?

    Microsoft is not having a very good time right now. Their not-so-recent breach (2024-01-19 report) turned out to be a mega-breach (2024-03-08 report), and now seems to have been even more serious (2024-03-11), without clear assurance that the intruders really have been evicted completely, uncertainty over what might have been exfiltrated, and uncertainty over what

    Read more

  • Time, Gentlemen

    It’s time to fix Police Vetting “It is obvious that Wayne Couzens should never have been a police officer. Whilst holding a position of trust, in reality he was a serial sex offender. Warning signs were overlooked throughout his career and opportunities to confront him were missed. We believe that Sarah died because he was

    Read more

  • Keep Your Friends Close, But Keep Your Enemies Closer

    Anyone who follows my musings will have seen me write about trust and trusting people; about Insider Risk and the impact of Vetting/Clearance processes upon this. One of the problems with trying to understand or characterise Bad Actors – even statistically – is that of getting hard data. Those with the hard data are often

    Read more

  • Insider/Nearsider Subversion of MFA

    MFA is becoming ubiquitous for many of us. I’d like to: You what?! So before we get down to subverting some extremely useful and important technology that provides MFA, we should probably define some terms. But MFA is secure, right? Security is a fascinating area. It’s full of edgecases and devil-in-the-detail situations. Sometimes one needs

    Read more

  • We Need To Talk About Insider Risk

    Note: Some parts of this article are necessarily vague. Nothing here is intended to reveal any sensitive “Capabilities & Methods”. The world of security is a peculiar one. Risk cannot be eliminated completely, and even if one were to try to do this it would almost certainly result in an unusable system. It’s all about

    Read more

  • Linear Thinking in a Non-Linear World

    The human mind instinctively understands linear systems. These are where the output or effect is in direct proportion (or simple inverse proportion) to the input. Put twice as much water in the kettle, it takes twice as long to boil. Run half as fast, it takes twice as long to get somewhere. Cook twice as

    Read more