tag
#thinking
First principles and philosophy: mental models, worldview, frameworks for understanding
2026 security predictions
2026 cybersecurity forecast: China's PLA centenary looms, AI turns anyone into a malware developer, and economic pressure pushes more people toward cybercrime. Shift-left finally start working—but only for modern code. The rest of the internet? A triage trash fire.
2025 security predictions retrospective
This time of year, everywhere you see, security guys like me are sharing our hot takes for the year ahead. However, reflecting on the past year is equally important. I like to see how my previous predictions held up and how things actually played out.
First Principles: Bad guys are humans, they're creative and driven, and they don't quit.
Here's the bigger question: If we do finally achieve 100% success in automating cyber defense, will the "bad guys" pack their stuff up and go home?
Founders Helping Founders: When Known Vulnerabilities are Life or Death
On today’s episode, Jon Sakoda speaks with Casey on the early economics of paying people to hack companies, criminal creativity, and why founders need to fix their known vulnerabilities.
Peace-time Cyber vs War-time Cyber
A long read on how cybersecurity doctrine built during 15 years of geopolitical peacetime is failing as nation-state actors abandon restraint and discretion.
AI security: Tool, Target, Threat
The Tool/Target/Threat taxonomy for AI security — a shared vocabulary for the three orientations every conversation collapses without, built during EO 14110.
KEYNOTE: Release the Hounds, Part 2
Casey delivers "Release the Hounds, Part 2 - 11 Years Is A Long-Ass Time" as the keynote for BSides Knoxville on May 12th, 2023. This talk covers the history of vulnerability disclosure and crowdsourced security testing platforms, and dives into cybersecurity entrepreneurship.
Data is the new oil: Breach edition
Data is the new oil... It spills everywhere, trashes the environment, and is impossible to clean up. Think before you store.
What's your 20/20?
“You can achieve less than you think in a year and more than you think in a decade.”
Firing your clients
This concept is pushed pretty hard in Tim Ferriss’ book the 4-Hour Work Week as well… In a nutshell – you don’t want
Bricks and Pyramids
QOTD: You have to build the bricks before you can build the Pyramids.
Mastering the mundane
I live a pretty frenetic and busy life both activity-wise and mentally. Some of this is environmental, most of this is my own making, and almost all of it I love… But it’s important to be reminded to appreciate the simple and sometimes boring things too.