Archive - J.M. Porup

The CISO’s Three-Body Problem

Text and slides of my 2026 Govware talk in Singapore

Oct 14 • J.M. Porup

May 2026

Boring Operational Discipline Wins the Game

on the un-excitement of defensive security done well

May 28 • J.M. Porup

April 2026

The Security Event Horizon

There is no checklist substitute for adversarial thinking.

Apr 28 • J.M. Porup

Should the CISO be GRC or SecEng?

Well, which mitigates the greater financial risk to your business?

Apr 25 • J.M. Porup

DPRK is not a Cartoon Villain

To defeat your enemy, you must put yourself in their shoes

Apr 23 • J.M. Porup

My talk at Google Singapore's APAC Security Summit

Web3 security requires strong Web2 security

Apr 12 • J.M. Porup

North Korea doesn't care about compliance

Pyongyang eats alphabet soup for breakfast

Apr 6 • J.M. Porup

March 2026

Occam's AI Razor

On the physiological addictiveness of AI use

Mar 29 • J.M. Porup

The Cyborg CISO

Resistance is Futile

Mar 25 • J.M. Porup

The Resonance Instrument

The Most Important Article I Didn't Write

Mar 24 • J.M. Porup

Mandatory Training

here, phishy phishy phishy

Mar 24 • J.M. Porup

AI Obsoletes UI

What does this mean for security?

Mar 1 • J.M. Porup

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts