Articles
Notes on the technologies I work with, and on where technology meets my community. Because of the nature of my work I can't share everything, but I publish what I can.
Security & identity
OWASP Top 10 on my own 20-year-old website
I audited my own legacy websites against the OWASP Top 10:2025 and found nine of the ten categories. What I found, and how I fixed it.
IdentityPasskeys and the end of passwords
How FIDO2 passkeys work, why they stop phishing, and what organisations need to change to adopt them.
ArchitectureZero trust starts with identity
What "never trust, always verify" really means for users, devices and service accounts.
CryptographyA realistic roadmap to post-quantum cryptography
Crypto inventory, crypto-agility and "harvest now, decrypt later": where to start today.
AIReviewing AI-generated code securely
AI assistants write code fast. How to keep security reviews, testing and accountability in the loop.
Technology & community
Digital accessibility is equality
The European Accessibility Act and WCAG in practice: accessible websites and services, just like ramps and lifts in our town centres.
CommunityCyber security for associations and small businesses
A one-page checklist for sports clubs, associations and local entrepreneurs: backups, MFA, updates and phishing.
CommunityProtecting older relatives from online scams
Practical advice for families: the most common scams in Finland and how to recognise them.
SustainabilityGreen IT: sustainable software is secure software
Why maintainable, long-lived systems are better for the planet and for security.
Personal29 years in Finland: from Mexico City to Nokia
A career in Finnish IT, from ICL and the Nokia–Fujitsu joint venture to cyber security architecture.