Hacked CEO to Cybersecurity Author: Scott Schober on Transparency, Branding, and the End of Passwords

Transparency after the breach#

Scott’s company was hit by a targeted attack that cost 65,000 dollars. The instinct in that situation is containment: say as little as possible and hope the story dies. He did the opposite and published the detail of his own mistakes in a book.

The commercial result is the interesting part. Total transparency about a failure built more customer trust than an unblemished record would have, because a vendor willing to describe how it was beaten is a vendor a buyer can calibrate.

Education instead of advertising#

Scott traces the shift from traditional advertising spend to building a personal brand as an educator. For a multi-generational family business in a technical category, teaching turned out to be a more efficient route to attention than buying it.

This is the generosity-before-the-sale pattern in practice. Give away the useful thing, and the credibility follows.

The password rotation argument#

Scott gives a reality check on digital identity, and is direct about the 90 day password rotation rule. Forced frequent rotation produces predictable, weaker passwords and pushes people toward reuse and written records. The policy creates more vulnerabilities than it closes, and multifactor authentication is the actual minimum for every login.

What quantum does to current encryption#

The episode closes on the longer horizon: the ability of quantum computing to compromise encryption standards that are currently treated as durable, including AES 256, in timeframes that make today’s assumptions look optimistic.