Notes on data, AI, IT
and security
No marketing fog. The way I think about real problems with founders and managers.
TensorFlow goes open source: what changes for non-researchers
Google opened TensorFlow in November 2015. I look at what this means for companies that are not in the business of academic research.
Energy grids and ICS security: the control system is no longer separate from cyber risk
Why attacks on industrial control systems have become a reality for the energy sector, and how managers need to rethink security for OT infrastructure.
Lift-and-shift cloud migration: what is hidden in the bill
Why moving applications to the cloud without rearchitecting often costs more than expected, and what to examine before starting a migration.
Industrial robots: ROI depends on the process, not the robot
Why most mistakes in manufacturing automation happen before the robot is purchased - and how a manager can evaluate real returns.
Streaming data: when operational decisions cannot wait for a batch
When a business needs streaming instead of batch processing, and what needs to be decided before adopting Kafka or similar tools.
TensorFlow and the shift of machine learning from research to engineering
What Google's open release of TensorFlow changes for companies: pipeline, reproducibility, and deployment become the central question, not algorithms.
NLP text classification as a practical enterprise baseline
Before the deep learning wave reshaped NLP, classical text classification already solved real problems. What it does well, where it stops, and how to start.
DevOps is not a toolset, it is a culture change
Why companies that implement DevOps as a technology end up with expensive tools instead of faster releases - and where the real lever is.
Patching CVEs is a business decision, not just an IT task
Why vulnerability patching keeps getting delayed, what the real cost of that delay is, and how to frame it so it gets prioritised.
Data lake: why the lake turns into a swamp
Why the data lake concept fails without data governance, and how a manager can tell real value from architectural hype.
Privileged access: the insider threat matters more than the outer perimeter
Why controlling privileged accounts is the most underrated security lever for a manager, and how to set up sensible protection.
API gateway: a single entry point as operational discipline
Why an API gateway matters not just to developers but to anyone managing integrations, security, and operational costs.