PQC: three insights
1. HNDL starts today: Encrypted information stolen today may remain sensitive when future decryption becomes possible.
2. PQC runs on ordinary computers: Post-quantum algorithms do not require quantum hardware.
3. QKD is not PQC: QKD uses quantum physics for key distribution; PQC uses quantum-resistant cryptographic algorithms.
AI security: three insights
1. Prompt injection: Untrusted text can carry instructions intended to redirect an AI system.
2. Data poisoning: Compromised training or retrieval data can undermine AI behaviour.
3. MCP security: Connected tools are powerful, but permissions and trust boundaries must be controlled.
Cybersecurity judgement
1. Define the term: Understanding comes before confident decisions.
2. Separate evidence from forecasts: A prediction is not an established result.
3. Explain it plainly: Can you describe the security implication to a board member?