Writing

2023

AI and security

AI and Social Engineering

How generative AI strengthens phishing and impersonation attacks, and why cryptographic identity verification offers a more reliable defense than human judgment.

Data security

Elevating Data Security

Practical ways to protect sensitive data beyond encryption at rest and in transit, including data minimization, offline keys, and field-level encryption.

2022

Authentication

Two Factor Authentication (2FA)

A comparison of SMS, email, push notifications, TOTP, Yubico OTP, and FIDO2, with guidance on choosing stronger authentication and securing recovery.

Password security

I Have a Password System

Why patterned and reused passwords fail against credential stuffing, and how password managers, stronger passwords, and two-factor authentication help.

Browser security

Can Clicking a Link Get You Hacked?

An examination of malicious links, Safari's automatic file opening, and browser sandbox escapes, with practical ways to reduce the risk of compromise.

2018

Visual programming

Why Visual Programming Doesn't Suck

How diagrammatic reasoning, Petri nets, and mathematical foundations make visual programming useful, with examples from quantum processes and a Bitcoin ATM.

External publications