Ditch the vendor if you like, but don’t ditch the concept — Let me start by saying that LastPass’s response and disclosure process have been very disappointing so far. This article published by Wired, titled “Yes, It’s Time to Ditch LastPass” really sums up my thoughts on the matter. The vaults are out there somewhere, and the data dumps will most likely…

Is there a shortage of Cybersecurity workers or are we doing this wrong? — “You run the, um, net-trace command?” he finally responded after a long pause. He had checked the network cable, refreshed the browser, and rebooted the router twice! How could the user still have no Internet? At this point, we both knew that the interview was over. Granted, this one was…

Two approaches for evaluating real risk beyond CVSS score, and thoughts on automation, asset management, and defense-in-depth. — It’s 9pm on [insert your favorite holiday here] eve, and you’re having dinner with friends and family. Great food, great company… a bit of a sensory overload actually now that I’m thinking about this, but oh well. You’re feeling a nice buzz from the wine, and you have somehow managed…