Idoneous Security

I've always had a problem with compliance, for a very simple reason: compliance is generally a binary state, whereas the real world is n...

Another day, another bug ... although this one is pretty juicy. One of the most accessible primers on the Bash Bug is on Troy Hunt's blo...

"Don't blog while angry," they say. Well, it's too late now. One thing that has bothered me for years is the tendency fo...

There are a few movements afoot to help improve security, and the intentions are good. However, to my mind some are just more organized vers...

I didn't think so, but I had to share this anyway. I was listening today to a presentation by the CTO of Dell SecureWorks, Jon Ramsey ...

[Yeah, I know, it's been a long time since I updated this blog. When you write for a living, you tend to write the things you get paid f...

[Warning: rant ahead. Slow to impulse power, Mr. Sulu.] Ever since I've been responsible for user-facing applications -- which is prob...