As you can see, things around here have changed a little. This site will celebrate its 20th anniversary next month. Due to site migrations and Rich’s advancing age, we’re not quite sure the date of the first post. It was either August 7th or August 20th 2006. That was several database migrations ago. Attribution is hard and the timeline doesn’t entirely line up with BourbonKitten.
In that time, Rich’s partners have come and gone. Last year, Mike decided that Cyber Security wasn’t stressful enough, and 2025 was the right time to go full time with a trans-atlantic candy import/export business.
Meanwhile, Chris Farris - who Rich has not known for 20 years (only about 10 at this point) - has joined Securosis as a somewhat full-time consultant. Chris and Rich previously collaborated on presentations at RSAC and re:Invent, and wrote the Universal Cloud Threat Model somehow by accident.
Chris has been working in IT since Linux was distributed on 3.5” floppy disks. His first foray into AWS was in 2010, with an AWS account that’s been sealed up since like Tutankhamun’s tomb. He subsequently rediscovered cloud as a media architect for CNN (before the dark times, before AT&T, Discovery, and soon the Ellisons). In 2017, he pivoted from figuring out how to store 40 years of archival video, into security, and since then has been blogging, ranting, giving talks, and helping clients securely operate in the cloud. He is one of the founders & organizers of fwd:cloudsec. In 2023 he was named one of AWS’s inaugural Security Heroes. He is mostly famously known for opposing cloud encryption. Because he read a few history books, he now lives in Porto, Portugal.
As for the more visible changes…
We have moved off of WordPress to a statically hosted Hugo site. All of the content we could find has migrated over. What hasn’t migrated is the ability to leave comments. The blogosphere of 2026 is very different from when we all started. In 2010, we’d see an occasional post promoting viagra. In 2026, the spam, scams, and disinformation are prolific. Blogging isn’t anyone’s main purpose anymore, and comments have effectively been shut off for years. Without the need for comments, and with Mythos and AI coming for all platforms, we decided to flee Wordpress. A static Markdown to HTML site fit for the next phase of Securosis.
We’re still committed to Totally Transparent Research, but it will work a bit differently. As we create research content, we’ll publish it on the blog, and leave links to Google Docs where the community can comment. Final drafts with community feedback will then find their way to the Research Archive.
