Immutable Security

Welcome to Immutable Security. It is my pleasure to begin this journey with you. As we move on, we’ll cover topics of interest to information security practitioners and those who value privacy and liberty in the information age.

Why another blog? I have a few reasons for wanting to contribute to the dialogue:

1. Too may security blogs focus on the vulnerability or exploit of the day, while ignoring the bigger picture. We’re stuck in this cycle of reaction to the latest threat, when the sad reality is that most organizations fail at the security fundamentals. We need to take a step back to explore where the world of information protection is heading, and whether we’re working on the right problems.

2. The digital age has made handing over you fundamental rights to liberty and privacy all to easy. Whereas the first-sale doctrine was once well understood, licensing terms on digital goods constrain what we can do with goods we legitimately purchased. Fair use is attacked en-masse with DMCA take-down notices, while digital locks prevent us from something as simple as taking a small excerpt for classroom discussion. And just when we thought we were doing the right things, the terms change. The balance has shifted unnaturally from the consumer to the rights holder. This deserves attention and discussion.

3. In my career in information security I have learned so much from others. I feel I have something to give back. I would not be where I am today had it not been for others posting their tips-n-tricks on the web. While many of the postings will be conversational, expect deeply technical postings, as well. I’ll share what I have learned so that you may better protect yourself.

I hope you stick around for the ride. It’s sure to be an interesting one.