Incremental "Gains" Are Just Slower Losses

Anton Chuvakin and I were having a fun debate a couple weeks ago about whether incremental improvements are worthwhile in infosec, or if it's really necessary to "jump to the next curve" (phrase origin: Guy Kawasaki's "Art of Innovation," watch...

The post Incremental "Gains" Are Just Slower Losses appeared first on Security Boulevard.

from Incremental "Gains" Are Just Slower Losses

Confessions of an InfoSec Burnout

Soul-crushing failure. If asked, that is how I would describe the last 10 years of my career, since leaving AOL. I made one mistake, one bad decision, and it's completely and thoroughly derailed my entire career. Worse, it's unclear if...

from Confessions of an InfoSec Burnout

Reflection on Working From Home

In a moment of introspection last night, it occurred to me that working from home tends to amplify any perceived slight or sources of negativity. Most of my "human" interactions are online only, which - for this extrovert - means...

from Reflection on Working From Home

Introspection on a Recent Downward Spiral

Alrighty... now that my RSA summary post is out of the way, let's get into a deeply personal post about how absolutely horrible of a week I had at RSA. Actually, that's not fair. The first half of the week...

from Introspection on a Recent Downward Spiral

NCS Blog: DevOps and Separation of Duties

From my NCS blog post: Despite the rapid growth of DevOps practices throughout various industries, there still seems to be a fair amount of trepidation, particularly among security practitioners and auditors. One of the first concerns that pops up is...

from NCS Blog: DevOps and Separation of Duties

NCS Blog: "Minimum Viable" MUST Include Security

"If you're a startup trying to get a product off the ground, you've probably been told to build an "MVP" - a minimum viable product - as promoted by the Lean Startup methodology. This translates into products being rapidly developed...

from NCS Blog: "Minimum Viable" MUST Include Security

Rapid Iteration Doesn’t Mean "Stop Thinking"

In the world of DevOps we often like to talk about rapid iteration in relationship to shortened feedback cycles, and yet oftentimes something gets lost in translation. Specifically, just because failure is ok, because failure leads to learning, it does...

from Rapid Iteration Doesn’t Mean "Stop Thinking"