series.
Multi-part writing, grouped. When one essay isn't enough for the argument, it gets a series. Each one starts with an intro post and runs in numbered order.
Regulating the Teen Internet.
The government's midnight social media curfew for 16 and 17-year-olds is a default, not a control — and after 29 years of telling boards the difference, I can't un-see it. Part 1 of a series on what happens when good intentions meet the technical reality of the teenage internet.
UK Threat Landscape.
The first of a monthly series. In August, 8.7 million airport customers, more than a thousand charities and a national police database lost data through exposed keys and open portals rather than exploits; a small power generator went dark; and the patch window shrank to days.
Protecting Our Children.
Part 1 of a new series. Europol has just referred 4,340 URLs tied to The Com, a network that grooms and coerces children on the platforms they already use. Why the dark-web mental model fails parents, what the numbers say, and what follows.
The Small Business Cyber Strategy.
Part one of a four-part cyber strategy for UK SMBs to run in the second half of 2026: three frameworks — Cyber Essentials, Cyber Essentials Plus and ISO 27001 — nested into one spine, plus the two decisions everything hangs on: scope and ownership.
HbbTV: notes from the lab.
Part 1 of 4. A primer on HbbTV from a security researcher's bench. Why I think the smart TV mounted on the meeting-room wall is the most under-considered attack surface in any UK office in 2021.