No Pain, No Gain - How Impunity Perpetuates Failure
It’s time to treat cybersecurity incidents and data breaches like preventable disasters, not the inevitable cost of doing business.
Topic
personal
A collection of 9 issues
A year in books - 2025
A list of all of the books I read in 2025, with a few notes attached to each of them.
Demand Without Development
The cybersecurity talent shortage is not just a problem of numbers, but of structure. By systematically avoiding the hiring and training of true junior staff, the industry is reinforcing a feedback loop that shrinks its own future workforce.
A short(-ish) guide on information security writing
Whether you’re compiling incident notes at 3 AM, drafting a post-mortem report for the board or helping the marketing department to craft a blog post that will generate near endless riches for your employer - we may like it or not, the ability to produce qualitative ..
A curated list of dead trees.
A post in which I explain why I decided to create a curated list of publications on Russia and how I went about doing it.
A year in books - 2024
It's a bit early, but because I know how lazy I tend to get during the last days of a year, I decided to summarize my reading adventures of 2024 a bit earlier than would technically be warranted.
A year in books - 2023
2023 wasn't the best year when it came to my reading habits. I only started taking notes in ..
I care about security, hence I don't care.
I’d love to see information security actually improve in a meaningful way. Not caring about anything but the bare security facts is a way of achieving that. Probably the only way.
On the perceived foolishness of self-hosting e-mail
There has been some activity within the Fediverse about how running your own mailserver is or isn’t foolish, and how “we” lost the fight against big corporate. This is my take on it.