The Browser Is Your Best Security Sandbox
Modern browsers run untrusted code from millions of sources daily and contain threats successfully....
Watching a Friend Get Hacked in 1987
A 1987 BBS breach taught me about trust models, intrusion detection, and why security-through-obscurity always fails eventually....
Most Security Breaches Don't Matter
The security industry profits from fear. Most breaches have minimal impact while companies overspend on exotic threats....
My Web Crawler Crashed a Server at Los Alamos
How a homemade web crawler in 1993 crashed a Los Alamos server, the birth of robots.txt, and why AI companies are breaking the web etiquette that held for 30 years....
I Solved Spam in the 90s (Nobody Cared)
In the 1990s, I built RUM (Real User Mail) - a challenge-response system to fight spam. It worked. I never released it. Years later, the industry reinvented it....
The ASR Privacy Paradox
ASR systems need training data. Training data contains sensitive audio. How federated learning solves the conflict between ML requirements and privacy laws....