Don't "Trust the Process"
A critique of traditional design processes, advocating for rapid prototyping and AI-assisted tools to reduce risk and explore ideas faster.
A critique of traditional design processes, advocating for rapid prototyping and AI-assisted tools to reduce risk and explore ideas faster.
The article critiques the trend of moving IT infrastructure to the cloud, arguing it's a financially poor decision akin to renting vs. owning.
Explores the role of IT security and other risk professionals in advising businesses, arguing for a normative approach to extreme risks.
Reflects on the CrowdStrike outage to argue that software testing's core purpose is to uncover and report risk, not just find bugs.
A developer shares insights from building an AI audit prototype, discussing the importance of defensibility and lessons from banking model audits.
Explores the role of courage in Agile software development for managing inherent project risks, using a hiking analogy to illustrate risk strategies.
Explores how embracing uncertainty in software product development can lead to greater profitability, using betting analogies to explain economic principles.
Examines the risks and complexities of modern software dependencies, arguing that easy reuse has outpaced our understanding of best practices.
Challenges the common security truism that defenders must be perfect, arguing for a more realistic, economics-based approach to defense.
Explores the key benefits and potential risks of adopting cloud computing for businesses, including cost, scalability, and security concerns.
A reflection on how uneventful days in system development and support can foster a false sense of security and complacency.