Dr. StrangeClaw or: how I learned to stop worrying and love the AI
Dr. StrangeClaw or: how I learned to stop worrying and love the AI

We have decades of experience with how we give an EA access to an executive’s life. And the entertainment industry is rife with stories of managers taking advantage of celebs by gaining access to their bank accounts and other aspects of their lives. All of this has made me realize that:

GenAI Threat management is just Insider Threat management, but faster and at scale.

European Sovereign Cloud
European Sovereign Cloud
Early next year, AWS will launch one of the largest changes to its cloud product in decades. For the first time, they will launch a new partition, the European Sovereign Cloud (ESC), open to anyone. This article covers why you might want to use it, what are some of the threats to consider, mitgations, and alternatives to consider.
re:Invent 2025 recap
re:Invent 2025 recap
My breakdown of the key announcements security folks should know about from AWS re:Invent 2025.
Threat Modeling GenAI applications
Threat Modelling Cloud Service Providers in 2025
Threat Modelling Cloud Service Providers in 2025
With the US Government acting in an erratic and hostile manner towards its traditional allies, it makes sense for companies not typically subject to US Jurisdiction to reconsider their threat models when using the big three cloud providers. All of them are US-based companies, and all three conduct a substantial amount of business with the US Government.
Implementing Security Invariants in an AWS Management Account
Farris's Three Laws of Auto Remediation
How AWS needs to change
How AWS needs to change
In previous posts, I took AWS to task for not making the customer’s security Job Zero. This offended some sensibilities, so let me lay out my 95 13 Thesis against the current AWS Culture and how it is neither Customer-Obsessed, nor makes security job zero.
AWS pre:Invent 2024
AWS pre:Invent 2024
It’s once again pre:Invent, that magical season where AWS announces new features related to their legacy products (cloud) before they jump all-in on Generative AI magician gimmicks at re:Invent in Las Vegas. This is my 5th year doing a pre:Invent round up. I almost decided not to do one. pre:Invent wasn’t the GenAI wank-show I expected it to be. In fact, some several exciting features and services were announced.
Effective Techniques for AWS Ransomware
Effective Techniques for AWS Ransomware

In order to profit effectively from a ransomware attack, a threat actor needs to have something to offer in return for payment. This blog post outlines a process to encrypt AWS resources and then revoke access to the secret material until the ransom is paid.

Apparently, this post caused some consternation at AWS, and perhaps this technique is too effective to publish here. So, the original post has been revised to remove the actual scripts, include some mitigations, and provide commentary on how both Public Cloud (AWS Included) and Generative AI are dangerous tools in the hands of the general public and need more regulation.

Your AWS Account is a floating cloud of garbage. Mine is too.
The Cloud is Darker and More Full of Terrors - Sec-T 2024

Apple’s Mistake

If your company seems evil, the best programmers won’t work for you. That hurt Microsoft a lot starting in the 90s. Programmers started to feel sheepish about working there. It seemed like selling out. When people from Microsoft were talking to other programmers and they mentioned where they worked, there were a lot of self-deprecating jokes about having gone over to the dark side. But the real problem for Microsoft wasn’t the embarrassment of the people they hired.

chris IT Industry , Technology
Read More

Dave Barry’s year in review

“Businessman Bernard Madoff pleads guilty to bilking investors out of $65 billion in a Ponzi scheme, forcing the Obama administration to withdraw his nomination for secretary of commerce.”

chris Technology
Read More

The case of the 500-mile email

I was working in a job running the campus email system some years ago when I got a call from the chairman of the statistics department. “We’re having a problem sending email out of the department.” “What’s the problem?” I asked. “We can’t send mail more than 500 miles,” the chairman explained. I choked on my latte. “Come again?” “We can’t send mail farther than 500 miles from here,” he repeated.

chris Technology
Read More

The unspoken truth about managing geeks

Opinion: The unspoken truth about managing geeks. Good IT pros are not anti-bureaucracy, as many observers think. They are anti-stupidity. The difference is both subjective and subtle. Good IT pros, whether they are expected to or not, have to operate and make decisions with little supervision. So when the rules are loose and logical and supervision is results-oriented, supportive and helpful to the process, IT pros are loyal, open, engaged and downright sociable.

chris IT Industry
Read More

One terabyte SSD

Just in time for Christmas. Santa, if you’re reading this…… One terabyte ssd hits the shops – The Inquirer.

chris Technology
Read More

The Problem with the Cloud

Is that you need to have ubiquitous Internet to make it work. Google OS: the end of the hard drive? – CNN.com. This looks like a neat device. But if none of my data is stored on the device, it is useless for reading email or working on documents. Wifi coverage is sporadic and expensive. Cellular coverage is even more expensive. WiMax (aka Clear) is only available in a few markets.

chris Clouds , Technology
Read More

Yay ViaTalk

I can’t wait for some time to play with this After over six months of development and testing, ViaTalk is proud to announce the release of ViaTalk Mobile, a free application for the Apple iPhone that allows you complete control of your home phone service in the palm of your hand. With this application, you can set up call forwarding, access your voicemail, set special routing options, control security and privacy settings, view call logs, and return calls right from your cell phone.

chris VOIP
Read More