#security · 3

2026

3 posts

1 Nov

Decide the Tier, Not the Exception

Hardening stalls when it's one setting for everyone. Tier it by user group, start from a benchmark, and decide the trade-offs once per group instead of once per request.

7 min

31 Oct

Who Holds the Keys to Your Patching?

Third-party patching tools are tier-0 assets. A look at the permissions they ask for, and the ones I wouldn't grant.

11 min

27 Oct

Patch Less

AI finds and exploits vulnerabilities faster than most patch processes can follow. Why consolidation and tiering help more than faster packaging.

14 min