Est. 2000s Security, technology and opinion

Two decades in networking & security. Now with opinions.

syn1cal has been a networking and security handle for over twenty years. What started as a technical outlet is becoming something more personal: still security, still pragmatic, but with more of my own opinion in it.

How I think about security

  1. Risk first, not fear or fashion

    Spend where the exposure is real. The loudest vendor pitch and the latest headline are rarely a risk assessment.

  2. Proportionate beats maximal

    A control that costs more, in money or friction, than the risk it removes is a bad trade, however impressive it looks.

  3. Unused controls don’t count

    A policy nobody follows and a tool nobody tuned protect nothing. Adoption is part of the design, not an afterthought.

  4. Say the quiet part out loud

    Most security writing is careful to the point of saying nothing. I’d rather be wrong in public than vague in private.

  5. Simplicity is a security property

    Complexity is where things hide — misconfigurations, forgotten access, the exception nobody remembers granting.

Latest writing

All posts

This is a personal space

No employer, no client, no house style. What's here is mine, and I'll get things wrong in public sometimes rather than say nothing.

More about that