Welcome to the TCA: The Total Cloud Abstraction

Computers should be more secure and easier to use. While the public cloud has many benefits, it also adds complexity. What if we used a cloud account differently... what if we entered the TOTAL CLOUD ABSTRACTION zone!

Is Software Regulation Coming?

We know that software is full of security holes. That's the way it works: it costs more to write secure software. But we also know that some key industries, like finance, are heavily regulated, and it is effective. Regulation seems to make finance healthier. Could software be next?

Is AI a Generational Movement for Developers?

Over the last few weeks I've been lucky enough to attend AI related events in Toronto. From those events I've developed some views on what is going on with AI and new developers.

Can Large Language Models Hack? Part 1

There is a wide range of ideas about what GenAI might be capable of. There are many questions we have about what it can do. One that has come up recently is whether GenAI is capable of malicious attacks on software. In short, can it "hack?"

Infrastructure as Code. Infrastructure is Code. Infrastructure from Code. Infrastructure will Code.

What we call IaC is not a single thing. There are a variety of different models and strategies. In this post I explore some ways to categorise these models and try to understand how IaC is evolving, including how recent advances in artificial intelligence can be a catalyst for change.

Realists, Pioneers, Skeptics and Futurists: The AI Hot Take Matrix

I had four pieces of AI content decaying in browser tabs, and they were each starkly different in terms of their feel for where AI is headed. I realised that in order to understand what these articles meant for the future of AI, I needed to map these positions out.

More on the Attack Hypersurface. Cloud Estates Can Only Be Understood With Modelling. And Just Look at All the SKUs.

In a previous article I started to discuss the idea of how infrastructure technology has evolved into having an "attack hypersurface," not just a normal sized, regular old attack surface, but something more than that...something almost unknowable.

Surivorship Bias & the Nation State Long Con. The Number of Software Backdoors Is Not Zero. We Are a Techno-Society That Depends on Open Source Software.

The open source software movement is one of the most interesting things to happen in recent human history. We are a techno-society that depends on open source software, so what happens when nation states go after the basic human frailty of OSS maintainers?

We May Never Be Rid of Log4J. It Was, and Still Is, an Endemic Vulnerability. It’s the Long Tail That Is Concerning.

Log4J has a long tail. About 38% of Java applications are still vulnerable. Traces of exploit attempts are increasing across the Internet. CISA said that the Log4J vulnerability would be a long living and persistent one, and it is.

The Cybersecurity Attack Surface Is Getting Bigger and Bigger. We’ve Been Going Through a Mega-Evolution. It’s a Hypersurface Now.

We've invented and evolved thousands of computational thingamawhatsits to deploy applications with, and combined them in billions of permutations...then we need to build the cybersecurity around them. It's worth it to take a moment, step back, and ponder that.