David Shaw

CTO at Redspin. Security Researcher, Conference Speaker, Application Security guy. I fight for the users. Twitter @dshaw_


Startup Culture Scalability

Can small-company culture grow with an organization?


Think about working at a startup.

If you’re like me, you imagine a modern, interesting office space—probably in a hip San Francisco neighborhood—complete with nerf wars and a healthy supply of craft beer. Sure, the base salary may be lower than this fictitious…


In Defense of (Unpaid) Internships

A look at the unpopular opinion.


Okay, everyone, put down your pitchforks. I regularly (and exclusively) hire paid interns—and I’ve had a great experience managing them. Interns are worth the cost to companies for a plethora of reasons, but my gripe is different: I think that it’s often worth it for students to look at unpaid…


Distill Your Ideas!

Like fine wine, ideas improve with age.


When was the last time you had a great idea? It could have been a software project, a startup venture, or…


The Slow Code Movement

Think fast, code slow.


Don’t get me wrong: I’m a fan The Lean Startup.

Creating a minimum viable product and shipping it to early adopters is a bona fide Good Idea. I have only one suggestion to add to Eric Ries’ proven methodology:

Once you’ve proven that there’s demand for your product, start over. 

Publications edited by David Shaw

Thoughts and techniques to make the workday better.

Posts concerning software security, the security industry, emerging threats, and more!


Startup Culture Scalability

Can small-company culture grow with an organization?


Think about working at a startup.

If you’re like me, you imagine a modern, interesting office space—probably in a hip San Francisco neighborhood—complete with nerf wars and a healthy supply of craft beer. Sure, the base salary may be lower than this fictitious…


Socratic Management

That’s an interesting solution. Why did you choose it?


I have the pleasure of leading a team of very, very smart individuals. While there’s no…


Challenge vs. Accessibility

Towards Sound Performance-to-Effort Ratios


Paul Graham famously wrote that good design is timeless. His context was programming languages, and his design choices for Arc (a recent dialect of lisp). While I wholeheartedly agree with his message in terms of timeless design, are performance-based decisions always the best ones?