July 2026
- The Status Quo Outlived Its Status
In security we like to say that the problems live in the gaps between systems. Each system, on its own, is usually coherent. It has a threat model, invariants, and someone who owns it. The seam between two systems is…
- Why FIPS 140 Means Running Old Code
You need to use FIPS 140 because of compliance, but have you ever asked what that requirement is actually for? What security properties are the authors of these policies trying to achieve?
- The Certification Ends Where the Code Begins
Disclosure: I am an advisor to Binarly.
- Steve Jobs, AI, and the Problem of Analysis Without Ownership
There is an old Steve Jobs clip from a 1992 MIT Sloan talk that feels newly relevant in the age of AI. In the talk, available here as Steve Jobs MIT 1992 Lecture, Jobs is asked about consultants. His answer is not that…