Top all-time · #6365
Kelly Shortridge
Personal blog · kellyshortridge.com/blog/postssecuritywriting
Kelly Shortridge's personal blog at kellyshortridge.com covers security and writing. Since 2022, 13 different Hacker News readers have linked it 18 times, most often “When we say "security", what do we mean? (2023)”. No feed was found, so read it on the site itself.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Kelly Shortridge's posts on security concepts, such as what the word 'security' means and the Verizon DBIR breach report. One commenter calls her DBIR post great.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The official website for Kelly Shortridge: author, leader, speaker, advisor.
Most-linked posts?
- When we say "security", what do we mean? (2023)2 people · 2 mentions · first linked 2024-01-29
- 69 Ways to Mess Up Your Deploy2 people · 2 mentions · first linked 2023-05-19
- Attackers have better things to do than corrupt your builds2 people · 2 mentions · first linked 2023-03-30
What Hacker News says?
"Security" is not the same thing itself, it cleaves meaning: 1) Hypervigilance; which is unsustainable. 2) Carefree ease; which is what the champion Red Bull athlete achieves from constant practice and repetition. I thank Kelly Shortridge ( https://kellyshortridge.com/blog/posts/ ) for pointing out the cleavage.
Comment linking /blog/posts/
on “Cyber Security: A pre-war reality check”Submitted 69 Ways to Mess Up Your Deploy as a story · 3 points
HN discussionKelly Shortridge's post about the DBIR is great https://kellyshortridge.com/blog/posts/shortridge-makes-sens...
Comment linking /blog/posts/shortridge-makes-sense-of-verizon-dbir-2024/
on “2024 Verizon Data Breach Investigation Report [pdf]”Submitted Shall We Play a Coordination Game? as a story · 3 points
HN discussionOk. Personally I'm tired of voicing unpopular opinions to people who don't want to hear them. (Guess my age.) Not everything is in teh cloudz or likely to be in the cloud. The "cloud" is not everywhere (look at some datacenter maps; according to The Register 70% of W EU cloud spend goes to US companies https://www.theregister.com/2022/09/29/aws_microsoft_google_... ). There is a real (careful with that word; as in "…
Comment linking /blog/posts/what-do-we-mean-when-we-say-security-part-1/
on “Ask HN: Are we in the midst of a systems collapse?”Submitted Shortridge Makes Sense of Verizon's 2025 Data Breach Investigations Report as a story · 2 points
HN discussionFeels like this is relevant here: https://kellyshortridge.com/blog/posts/what-does-the-word-se... - this is not Matthias’ fault, this is our systems failing us all in creating a ‘secure’ environment.
Comment linking /blog/posts/what-does-the-word-security-mean/
on “Matthias Wandel's YouTube channel got hacked [video]”Submitted Shortridge Makes Sense of the 2024 Verizon DBIR as a story · 2 points
HN discussionUnfortunately, differentiating good behavior from malicious behavior is a central pillar of security, and the existence of this feature undermines that pillar. * The fact that it's in a popular signed binary means it bypasses app allow-lists. * The fact that it flows through Microsoft's servers bypasses firewall allow-lists. * The fact that no stage2 is required bypasses antivirus scanning. I say "unfortunately" bec…
Comment linking /blog/posts/control-vs-resilience-cybersecurity-strategy/
on “Blocking Visual Studio Code embedded reverse shell before it's too late”Submitted Cybersecurity Isn't Special as a story · 2 points
HN discussionSubmitted 69 Ways to F*** Up Your Deploy as a story · 2 points
HN discussionSubmitted Sun Tzu wouldn’t like the cybersecurity industry as a story · 2 points
HN discussionSubmitted Attackers have better things to do than corrupt your builds as a story · 2 points
HN discussionSubmitted When we say "security", what do we mean? (2023) as a story · 1 points
HN discussionSubmitted Rick and Morty's Thanksploitation Spectacular Decision Tree as a story · 1 points
HN discussionSubmitted “Quantum” Doesn't Solve Anything for Cybersecurity as a story · 1 points
HN discussionSubmitted On YOLOsec and FOMOsec (2020) as a story · 1 points
HN discussionSubmitted Attackers have better things to do than corrupt your builds as a story · 1 points
HN discussion
