As you can see, things around here have changed a little. This site will celebrate its 20th anniversary next month. Between site migrations and Rich’s advancing age, we’re not quite sure the date of the first post. It was either August 7th or August 20th, 2006. That was several database migrations ago. Attribution is hard and the timeline doesn’t entirely line up with BourbonKitten.
Over that time Rich’s partners have come and gone. Last year Mike decided cyber security wasn’t stressful enough, and 2025 was the right time to go full time with a trans-atlantic candy import/export business.
Meanwhile, Chris Farris — who Rich has not known for 20 years (only about 10 at this point) — has joined Securosis as a somewhat full-time consultant. Chris and Rich previously collaborated on presentations at RSAC and re:Invent, and wrote the Universal Cloud Threat Model, somehow by accident.
Chris has been working in IT since Linux was distributed on 3.5” floppy disks. His first foray into AWS was in 2010, with an AWS account that’s been sealed up since like Tutankhamun’s tomb. He subsequently rediscovered cloud as a media architect for CNN (before the dark times, before AT&T, Discovery, and soon the Ellisons). In 2017 he pivoted from figuring out how to store 40 years of archival video, into security, and since then has been blogging, ranting, giving talks, and helping clients operate securely in the cloud. He is one of the founders & organizers of fwd:cloudsec. In 2023 he was named one of AWS’s inaugural Security Heroes. He is mostly famously known for opposing cloud encryption. Because he read a few history books, he now lives in Porto, Portugal.
As for the more visible changes…
We have moved off WordPress to a statically hosted Hugo site. All the content we could find has been migrated over. What hasn’t migrated is the ability to leave comments. The blogosphere of 2026 is very different from when we all started. In 2010 we saw an occasional post promoting viagra. In 2026 the spam, scams, and disinformation are prolific. Blogging isn’t anyone’s main purpose anymore, and comments have effectively been shut off for years. Without the need for comments, and with Mythos and AI coming for all platforms, we decided to flee WordPress. A static Markdown/HTML site fit for the next phase of Securosis.
We’re still committed to Totally Transparent Research, but it will work a bit differently. As we create research content we’ll publish it on this blog, and leave links to Google Docs where the community can comment. Final drafts with community feedback will then find their way into the Research Archive.
