Latest Intelligence
Seize a National Registry and the Web Will Certify You as Google
Attackers did not break HTTPS or trick a certificate authority. They seized three small country-code registries, passed the automated checks, and walked away with valid, publicly trusted certificates for google.com and youtube.com. The certificate authorities were not fooled. They were obeyed.
Google Closed Its Bug Bounty Because AI Drowned It
On October 1, Google paused its open-source bug bounty, drowned in AI-generated reports that were not real vulnerabilities. The attack is not on the code. It is a denial-of-service on the human attention that secures it. AI does not need to find the zero-day, only bury it.
Why I Finally Left the iPhone for Android
For almost eighteen years, my primary phone was never really a decision. It was an iPhone. Now it is a Samsung, and not because Android is better. In plenty of ways it is not. It became the phone my hand keeps reaching for, and working out why turned into something worth writing about.