iiinova — where your digital self keeps evolving

Reposted by Lauren Zabierek

Quality by Design: Security is a quality outcome — and should be built that way. In 1986, J.M. Juran presented the Quality Trilogy, a model for building better products:

Poker-sized card titled "Juran's Quality by Design" with text from the contents of the post.

143

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 12/10/2026

CVE: A CVE (Common Vulnerabilities and Exposures) is a public record of a known security defect, and a shared language for discussing defects. A record can include a description, severity score, and links to fixes.

poker sized card titled "CVE" containing the text from the post.

152

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 11/10/2026

Secure by Design: Secure-by-design software has protections baked in, not bolted on. Modern cars have integrated airbags, crumple zones, and anti-lock brakes. Those features cannot be added after the product ships — they're built from the ground up.

Poker sized card titled "Secure by Design Software" containing text found in the post.

2113

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 10/10/2026

Near misses: Near misses are safety incidents that almost happened, but didn't. In aviation and medicine, near misses are treated as early warnings and investigated thoroughly. In software, they are rarely tracked. When a defect is found internally, it is usually fixed quietly and forgotten.

Poker sized card titled "Near Misses" with text contained in the post.

1122

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 08/10/2026

Manufacturers vs. Operators: We never confuse an automaker with the driver. Drivers have real duties: maintenance, speed limits, seat belts. Designing out a defect is not one of them, and when a defect injures the driver, the automaker answers for it.

Poker sized card titled "Manufacturers vs. Operators" containing the text in the post.

183

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 09/10/2026

Embrace Radical Transparency: Radical transparency means publishing information that may feel uncomfortable today — but enables continuous improvement tomorrow. It shifts manufacturers from secrecy to shared learning / accountability and it exposes recurring flaws that would otherwise stay private.

Poker-sized card titled "Embrace Radical Transparency" containing the text from the post.

173

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 07/10/2026

Passing the Buck: With 99% of US businesses classified as small or mid-sized, expecting them to absorb the full cost of insecure software is not a plan.

Poker sized card titled "Passing the Buck" containing the text in the post.

132

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 06/10/2026

AI is Software: AI systems are software products, subject to the same incentive structures, market pressures, and liability gaps that produced today's unsafe software ecosystem — and they should follow the same Secure by Design Principles. The newness of AI does not reset the clock on those forces.

Poker sized card titled "AI is Software" containing the text in the post.

2115

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 05/10/2026

Unsafe at Any Speed: In 1965, Ralph Nader published Unsafe at Any Speed, arguing that car accidents were caused not just by human error — but by the design of the car itself.

Poker sized card titled Unsafe at Any Speed

1102

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 04/10/2026

Language Matters: The words we use influence how people think. Shifting language shifts mindsets. "Vulnerability" sounds like weather: unpredictable, nobody's fault. "Product defect" names something a manufacturer built and could have prevented. Keep it only where it's a term of art, like CVE.

Poker-sized card with text about how we use certain terms.

2126

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 03/10/2026

Myth: "Orgs just need to patch faster" Reality: Deploying a software security update is a response to someone else's defect. It's not a strategy, it's a tax.

2142

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 02/10/2026

In 2007, MITRE published "Unforgivable Vulnerabilities," listing 13 recurring classes of coding error (known as the "Lucky 13") for which effective mitigations had been available.

193

Reposted by Lauren Zabierek

Bob Lord @boblord.bsky.social · 01/10/2026

Human error is inevitable. Secure-by-design systems are built to account for that. When a security failure is blamed on "human error" the real question is: why did the system make the unsafe choice easy and the safe choice hard?

2122

Lauren Zabierek @lzxdc.bsky.social · 01/10/2026

A class of defect is a category of product defect that recurs across products, codebases, and time - such as buffer overflows, SQL injection, or use-after-free errors. Many are predictable and preventable defects that should be eliminated at the root.

011

Reposted by Lauren Zabierek

JoshCorman @joshcorman.bsky.social · 10/03/2026

DON’T miss: Provoking & Most Taylor Swift at #RSAC debate w/ me & @lzxdc.bsky.social TUE 3/24 1:15 #UnDisruptable27 #SecureBy #VoltTyphoon

121

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

I want to be part of the conversation that articulates a way forward and my contribution is in redefining national security for all of us. If this resonates with you, I’d love to connect here and hear from you too.

000

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

Our generations (X/millennials) have been running toward the fight since 2001, trying to clean up the messes we’ve been handed and we know that things need to change if we are to survive and thrive.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

A little more about me–I’ve served in the military, in the intelligence community, in academia, in the federal government, nonprofit, and private sectors. I’m a mother of two young kids. My little brother was killed in the war on terror. I have been to war. I’m an X-ennial. I’m an eldest daughter.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

I believe that childcare, education, infrastructure, diversity, healthcare, climate security, cybersecurity (thru software security), economic security, and more are national security issues. I look forward to sharing my thoughts here.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

My goal with this is not to get more women into national security roles (there are other great organizations taking on that task); but rather, to expand our lens of national security, create language around that, & develop/advocate (w/you) for policies that make all of us safer & more secure.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

In fact, I argue for a matriarchal reframing of national security, toward systems of care.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

He also wrote that security means “untroubled by danger and fear. It’s a conditional state of mind that makes one feel secure.” So to me, national security is about people & how we survive and thrive. There’s a lot more to that than just control, exclusion, defense, and force.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

Prabhakaran Paleri wrote, “humans not only want to survive, but also want to live their lives to the utmost. It is within this struggle for existence, somewhere between despair & hope that the concept of ‘national security’ hides in a world divided by nations; the terminology does not matter.”

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

I’ve spent over two decades in traditional national security systems and ever since I resigned from my senior federal cybersecurity role this spring, I’ve been writing about why we need to redefine our understanding of and approach to national security in my Redefining National Security Substack.

100

Lauren Zabierek @lzxdc.bsky.social · 23/02/2026

You know how national security is largely framed as protection from external threats & our policies (and $) focus on defense, military equipment, surveillance, border control, & adv tech–essentially to keep things out? Despite that, many don’t feel safe or secure from a lot of other threats?

100

Reposted by Lauren Zabierek

Girls Who Code @girlswhocode.bsky.social · 13/02/2025

Today, we’re announcing our next bold step: Five by Five, a five-year strategic plan to reach 5 million women and nonbinary individuals by 2030. Five by Five is more than a number — it’s a mission to shape the leaders who will use tech for good. www.girlswhocode.com/strategic-plan

0177

Lauren Zabierek @lzxdc.bsky.social · 28/01/2025

It’s called the #CrisisCode (Decoding the chaos for a safer tomorrow) and if this sounds like something you need right now, I encourage you to like and subscribe. youtu.be/n6ZKG9YhveY?...

youtu.be

Welcome to The Crisis Code with Juliette Kayyem

YouTube video by Juliette Kayyem

010

Lauren Zabierek @lzxdc.bsky.social · 28/01/2025

In these challenging times, she’s just launched a new show on YouTube to help us to decode crises and find our agency which I for one am grateful and excited for.

100

Lauren Zabierek @lzxdc.bsky.social · 28/01/2025

If you read Juliette Kayyem’s book The Devil Never Sleeps: Learning to Live in An Age of Disasters, or if you watch her on CNN, you know that she has this unique ability to cut through the noise to help us understand the “what”, the “so what,” and the “what now” in a pragmatic and practical way.

120

Reposted by Lauren Zabierek

Paul Barrett ❌👑 @paulthedogman.bsky.social · 27/01/2025

I've written a piece for Tech Policy Press called, "Some Facts About Fact-Checking: Defending the Imperfect Search for Truth in an Era of Institutionalized Lying." It sounds wonky, but it's from the heart, people. Please give it a read (and a boost). Thanks. www.techpolicy.press/some-facts-a...

techpolicy.press

Some Facts About Fact-Checking: Defending the Imperfect Search for Truth in an Era of Institutionalized Lying | TechPolicy.Press

Fact-checking ensures a distinction between facts and falsehoods and that everything is not up for grabs because powerful people say so, writes Paul Barrett.

34425