This is the official blog for Empiric Security, my consulting company dedicated to objective information security improvement through honest examination.