November 2024
- Another CA Fails the Turing Test?
In a concerning development, yet another Certificate Authority (CA) has issued what is likely a man-in-the-middle (MITM) certificate—something strictly prohibited by all root programs. This particular case is unique…
- Proactive Security: Engineering Resilience from the Ground Up
Picture discovering your house has been robbed. Like many homeowners in this situation, your first instinct might be to invest in the latest security system with cameras and motion sensors. But what if the thief simply…
- From Years to Seconds: Rethinking Public Key Infrastructure
Public Key Infrastructure was designed for a world where identities persisted for years—employees joining a company, servers running in data centers, devices connecting to networks. In this world, the deliberate pace of…
- Bundling and Unbundling in the NHI Market: Opportunities in Identity, Governance, and Cryptography
Jim Barksdale famously said "All money is made through bundling and unbundling,” and this dynamic is evident in the Non-Human Identity (NHI) market. Cryptography management, privileged access management, and certificate…
- Rethinking Authentication: “Something You Have,” “Something You Know,” and “Something You Are” for Workloads and Machines
Passwords have existed for millennia, and their weaknesses have persisted just as long. Their simplicity led to widespread adoption, but as their use expanded, so did the frequency of their abuse. To address this, we…
- The Myth of Non-Technical Product Management
A common theme in conversations about product managers is the notion that they don’t need to be technical; they just need to bridge the gap between technical and non-technical teams. In my experience, particularly with…
- The Subtle Art of Getting Your Product Deployed
Getting a security product deployed isn't just about a signed contract—it’s about execution. The difference between shelfware and success often comes down to removing roadblocks before they become deal-breakers. What are…
- From Fairways to the Cloud: Estimating Golf Balls in Flight to Tackling Cloud Workload Scale
Early in my career, I worked in quality assurance at Microsoft, analytical skills were a core trait we tried to hire for, at the time “brain teasers” were often used in interviews to assess these skills. One memorable…