hacker/hustler. chairman/founder/cto @bugcrowd and cofounder @disclose_io. husband, dad, musician, believer. pioneer of crowdsourced security as-a-service.
business-strategy
This concept is pushed pretty hard in Tim Ferriss’ book the 4-Hour Work Week as well… In a nutshell – you don’t want EVERYONE to be your client. You only want the GOOD clients. There’s no point having a great margin, smooth processes, and efficiency and profitability baked into
mindset
QOTD: You have to build the bricks before you can build the Pyramids.
mindset
I live a pretty frenetic and busy life both activity-wise and mentally. Some of this is environmental, most of this is my own making, and almost all of it I love… But it’s important to be reminded to appreciate the simple and sometimes boring things too.
bugcrowd
6 years ago today I got off a plane armed with a bunch of notes. I’d spent a week meeting with pen-testing customers in Melbourne, and I’d been talking to them about bug bounty programs. These conversations and a set of ideas I’d been noodling on for
cybersecurity
“We had a problem with a few needles, and as an industry decided that the best thing to do was to drop a haystack on them.” This is definitely QOTD from an old cybersecurity industry friend over lunch today. It sums up the current information overload problem for those on
cybersecurity
If you do a Google Image Search against the word hacker, you’ll get images of scary-looking balaclava-clad cybercriminals hunched over a quintessentially green computer terminal. They’re up to no good… Stealing your data, crashing critical systems, or causing general Internet badness. In reality, the word “hacker” applies to
leadership
Recognizing a problem qualifies you to be a part of the solution. Refusing to be a part of the solution disqualifies you from complaining about the problem.
leadership
Happy New Year! Pretty much everyone I’ve spoken agrees on the same thing: 2017 was a turbulent, change-filled year packed with as many high-highs as it had low-lows… but it’s over now, we’ve turned the clock back to zero, and the 2018 has nothing but potential, impact,
vulnerability-disclosure
Wikileaks’ release of thousands of confidential CIA documents today is yet another demonstration of our just how vulnerable the cybersecurity domain is. Unless we do a better job identifying our vulnerabilities, attackers – be they criminals, hacktivists, hobbyist, or nation state agencies – can and will take advantage of them. What’s
cybersecurity
If 2016 did anything for cybersecurity, it was to prove that truth can end up wayyyyyyy stranger than fiction (where fiction, of course, are end of year prediction pieces). I have plenty of opinions of where I think it’ll get weird next year, but instead I think Mike Mimoso’
business-strategy
When building a product or company that’s designed to disrupt a sleepy incumbent there are four phases of typical interaction you’ll have with your future competition.
cybersecurity
99% of good infosec is equivalent to remembering to wash your hands after you use the bathroom. As an industry, we should be working to make that easier.