leomohan-2026

My Weekend Token Utilisation Report #Week 1

2026-07-06T13:59:07.903+05:30

A lighthearted confession of how I spent my weekend feeding tokens to my local AI ecosystem instead of doing normal human things.

Takeaway

I spent my weekend tinkering with three open‑source AI tools — OpenWebUI, OpenCode, and OpenDesign — and accidentally built a tiny personal AI studio on my machine.

This is my “Weekend Token Utilisation Report,” because saying “I played with AI toys all weekend” doesn’t sound respectable enough for LinkedIn.

Saturday Morning: OpenWebUI — My AI Café

I started with OpenWebUI, which feels like a cozy café where your local LLM hangs out, waiting for you to ask questions ranging from “Explain quantum physics like Rajinikanth” to “Write me a grocery list.”

What it is

A local-first AI chat interface
Works with Ollama, LM Studio, remote APIs
Supports agents, workflows, RAG, voice, extensions
Lets you build your own mini AI tools

Why it’s fun

Because it doesn’t judge your prompts.
Ask it nonsense, ask it philosophy, ask it code — it just vibes.

Setup

Install Ollama
Install OpenWebUI
Connect your models
Start chatting like it’s Yahoo Messenger in 2004

Saturday Afternoon: OpenCode — My Coding Partner Who Never Sleeps

Then came OpenCode, which is basically VS Code after a spiritual awakening.

What it is

A local AI coding environment
Chat + code completion + debugging
Works with local or cloud models
Clean, distraction-free UI

Why it’s awesome

Because it feels like pair programming with a calm, polite engineer who never says, “Bro, you missed a semicolon.”

Setup

Install the app
Connect your model
Start coding with AI whispering helpful suggestions

Sunday Morning: OpenDesign — The AI Design Studio That Actually Ships Real Output

OpenDesign is NOT an image generator. It’s a local-first design workspace that works with your coding agent to produce real, runnable design artifacts.

What it actually does

OpenDesign helps your AI agent generate:

Landing pages (HTML/CSS you can deploy)
Dashboards (responsive, styled layouts)
Slide decks (HTML or PPTX)
Social cards (HTML → PNG)
Short videos (HTML → MP4)
Design systems (brand styles in Markdown)

Think of it as giving your coding agent a full design department.

Why it’s addictive

Because you ask for a “Stripe-like landing page,” and it gives you real HTML you can host.
Ask for a “dashboard with a dark theme,” and it generates the layout.
Ask for a “slide deck summarizing my weekend token usage,” and it builds the slides.

Setup

Install OpenDesign
Connect it to your coding agent (OpenCode, Claude Code, Cursor, Gemini, etc.)
Start generating real design output

Sunday Afternoon: Making All Three Work Together

This is where the magic happened — the three tools formed a local AI production pipeline.

The Trio

OpenWebUI → Brainstorming, chatting, planning
OpenCode → Coding, debugging, refining
OpenDesign → Turning ideas into real design artifacts

Example workflow

Brainstorm landing page ideas in OpenWebUI
Build the backend logic in OpenCode
Generate the frontend layout in OpenDesign
Publish to Blogger/Substack/Hashnode
Feel proud of your weekend token utilisation

Why this matters

You’re not “using AI tools.”
You’re running a local AI studio — private, fast, flexible, and subscription-free.

Benefits (The Serious Part of the Naughty Title)

Privacy — everything runs locally
Speed — no cloud latency
Creativity — chat + code + design in one loop
Control — choose your models, workflows, extensions
Zero subscription guilt — your wallet is safe
Token utilisation bragging rights — you earned this

The Twist

“My Weekend Token Utilisation Report” sounds like something you’d present to your CFO.

But really, it’s just me saying:

“I spent my weekend feeding tokens to AI models instead of doing laundry.”

And honestly, I regret nothing.

~Mohan Krishnamurthy

www.leomohan.net

From LDL & HDL to LLD & HLD: A Project Manager's Guide to Reading Blood Test Reports

2026-06-24T19:43:33.661+05:30

Yesterday, during a customer meeting, the discussion unexpectedly moved from project documentation to health checkups.

The customer was reviewing his blood test report and confidently said:

"Doctor says my LLD is high, but HLD is also improving."

For a moment, my project management instincts kicked in.

LLD? Low-Level Design?

HLD? High-Level Design?

Then reality returned. He meant LDL and HDL.

But the accidental terminology crossover sparked an interesting thought: what if we interpreted a blood test report the way IT professionals interpret a project report?

Let's explore.

HDL (Good Cholesterol) = HLD (High-Level Design)

Every successful project starts with a strong High-Level Design.

It provides direction, structure, governance, and strategic clarity.

Similarly, HDL (High-Density Lipoprotein) is the "good cholesterol." It helps remove excess cholesterol from the bloodstream and keeps things running smoothly.

Health World	Project World
HDL	HLD
Provides protection	Provides direction
Higher is generally better	Better HLD means fewer surprises
Prevents future problems	Prevents future rework

Conclusion: A project with a solid HLD and a body with healthy HDL are both set up for long-term success.

LDL (Bad Cholesterol) = LLD Gone Wrong

Low-Level Design is essential.

However, excessive documentation, over-engineering, and unnecessary complexity can become project cholesterol.

LDL (Low-Density Lipoprotein) tends to accumulate where it shouldn't.

Similarly, poorly controlled LLDs tend to generate:

Excessive dependencies
Complicated workflows
Technical debt
Endless review meetings

Health World	Project World
High LDL creates blockages	Excessive complexity creates bottlenecks
Restricts flow	Restricts progress
Requires intervention	Requires redesign

Conclusion: Some LDL is necessary. Some LLD is necessary. Too much of either creates operational challenges.

Triglycerides = Pending Action Items

Every project has them.

Open tickets.

Pending approvals.

Unresolved risks.

Deferred decisions.

Individually harmless.

Collectively dangerous.

Just as elevated triglycerides indicate excess stored energy, a project overloaded with pending actions stores unfinished work that eventually slows delivery.

Blood Pressure = Project Pressure

A little pressure keeps things moving.

Too much pressure causes damage.

In medicine, sustained high blood pressure strains critical systems.

In projects, sustained management pressure leads to:

Burnout
Escalations
Quality issues
Resignations

Both doctors and project managers should remember:

Pressure is a metric, not a strategy.

Hemoglobin = Team Productivity

Hemoglobin carries oxygen.

Productive teams carry projects.

When hemoglobin levels are low, fatigue follows.

When team productivity is low, deadlines begin to drift.

In both cases, management's first reaction is usually the same:

"Let's investigate the root cause."

Vitamin D = Stakeholder Support

Everyone ignores it until it becomes a problem.

Projects with inadequate stakeholder support resemble people with Vitamin D deficiency:

Progress slows
Morale drops
Unexpected symptoms appear
Everyone wonders why things feel difficult

The prescription is remarkably similar:

Get more exposure.

HbA1c = Technical Debt Index

HbA1c doesn't tell you what happened yesterday.

It tells you what has been happening for months.

Technical debt behaves exactly the same way.

A project may appear healthy during a sprint review, but accumulated shortcuts eventually show up in architecture assessments just as HbA1c reveals long-term sugar management.

ECG = Project Audit

Nobody schedules one because they're excited.

They schedule one because they want assurance that everything is functioning correctly.

The findings are also similar:

Normal
Minor observations
Needs monitoring
Please come back immediately

Final Diagnosis

A healthy professional should monitor:

HDL
LDL
Blood Pressure
HbA1c

A healthy project should monitor:

HLD
LLD
Team Pressure
Technical Debt

And if a customer ever tells you that his LLD is high and HLD is improving, don't correct him immediately.

First ask:

"Are we discussing your health report or your project status report?"

Because in today's world, either answer could be correct.

Presenting Without Borders: How I Delivered a Seamless English–Arabic Hybrid Presentation

2026-03-05T11:58:00.003+05:30

Most presentations are judged by their content, design, or delivery. But occasionally, the true test lies in something deeper: can every person in the room understand you?

When I recently presented to an Arabic-speaking audience, I decided to treat the language barrier not as an obstacle, but as a design challenge. What followed was a surprisingly elegant, fully hybrid workflow that blended Microsoft PowerPoint, Apple’s accessibility features, AI translation, and two smartphones into a single, frictionless experience.

This is the story of how that system came together — and why it worked.

Designing the Foundation: A Presentation Built for Two Languages

The process began in familiar territory: Microsoft PowerPoint. I created the full English deck and then wrote detailed speaker notes for every slide. These notes would become the backbone of the entire multilingual experience.

But instead of relying on human interpreters or last‑minute translation, I took a different route: I fed the speaker notes into an AI translator to generate a clean, modern Arabic script. This gave me a precise, consistent version of my narration — something that human interpreters often struggle to maintain across long presentations.

Turning Text Into Voice: A DIY Arabic Narration Studio

With the Arabic script ready, I moved to my MacBook.

I pasted the Arabic text into TextEdit.
I enabled Spoken Content, Apple’s built‑in text‑to‑speech feature.
I opened QuickTime Player and started a new audio recording.
Then, with a simple Option + Esc, the Mac began reading the Arabic script aloud.

The result? A clear, natural-sounding Arabic narration — recorded in one continuous flow.

Once exported, I inserted the audio file into PowerPoint and set it to Play Across Slides. Suddenly, my English presentation had a synchronized Arabic voiceover, ready to guide the audience through every idea.

Creating a Live Translation Loop: English ↔ Arabic in Real Time

The real magic happened during the Q&A.

On the right side of my MacBook, I placed my iPhone running Apple Translate. On the left, my Android phone running Google Translate.

This created a two-way translation loop:

When the audience asked questions in Arabic, Apple Translate instantly converted them into English for me.
When I responded in English, Google Translate spoke my answer aloud in Arabic.

I simply paused after each English sentence and let the phone “speak” on my behalf. The audience heard their language. I heard mine. And the conversation flowed without a single moment of confusion.

The Outcome: A Room Without Language Barriers

What could have been a fragmented, awkward multilingual session became a smooth, inclusive experience. Every participant — regardless of language — felt heard, understood, and respected.

The setup was simple. The tools were everyday devices. But the impact was profound.

This experience reminded me that technology, when orchestrated thoughtfully, can dissolve barriers that once felt immovable. It can turn a multilingual challenge into a moment of connection. And it can empower a presenter to speak confidently, knowing that every voice in the room can follow along.

~Mohan Krishnamurthy

How Many More Years Will It Take to Tell What’s Real?

2025-12-03T08:55:00.001+05:30

குறள் 423

அறிவுடைமை

எப்பொருள் யார்யார்வாய்க் கேட்பினும் அப்பொருள்
மெய்ப்பொருள் காண்ப தறிவு

It took me 20 years to realize that the “First Day First Show” movie celebrations I grew up admiring weren’t spontaneous fan frenzies at all—they were sponsored spectacles, carefully choreographed by producers, directors, or the hero’s team.

It took me 25 years to understand that search results aren’t arranged by relevance or merit alone. The ones at the top often get there simply because someone paid for the privilege.

It took me 30 years to realize that star ratings, reviews, and feedback on e-commerce platforms—things I once trusted blindly—can be bought in bulk, manufactured overnight, and manipulated at scale.

It took me 35 years to grasp that millions of views, likes, and followers on social media don’t necessarily indicate quality or influence. Many are purchased, automated, or inflated by bots.

It took me 40 years to understand that nearly 98% of the content on the internet is shaped, influenced, or driven by some form of propaganda—pro or anti—aligned with a particular ideology, product, belief, or agenda.

And yet, after all these years of lessons, I still don’t know how many more years it will take for me to fully distinguish reality from fabrication—to quickly identify what’s genuine and what’s engineered… not just in digital spaces, but in real life too.

Because today, truth isn’t just harder to find.
It is harder to recognize.

We live in a world where:

authenticity can be manufactured,
trust can be purchased,
popularity can be simulated,
opinions can be influenced invisibly, and
narratives can be seeded at scale.

The lines between organic and orchestrated, real and rehearsed, truth and targeting are blurring faster than we can adapt.

But maybe the answer doesn’t lie in becoming cynical or paranoid.
Maybe it lies in developing a new form of literacy—a reality literacy—where we constantly question, examine, cross-check, and slow down long enough to think before we trust.

I still don’t know how many years it will take me to master that skill.
But acknowledging the problem is perhaps the first honest step toward clarity in an increasingly artificial world.

~ Mohan Krishnamurthy

#Article Collaborator OpenAI ChatGPT

Goodreads

2025-11-26T11:05:00.003+05:30

Find my books on:

Goodreads

Latest Release:

Google Opal for Beginners: Learn, Apply, and Benefit: https://books2read.com/u/mZJVJB

Upcoming Release:

Drowning in Digital Defenders: How Too Many Cybersecurity Tools Can Actually Make You Less Safe

2025-11-10T14:35:00.000+05:30

Image Courtesy: Google Opal

I. Introduction: The Paradox of Protection

Imagine buying 50 different locks for your front door, but each lock comes with its own tiny, unique key that you have to manage separately. Sounds like a nightmare, right? A Sisyphean exercise in security theater, where the act of protecting becomes more burdensome than the potential threat itself.

That's essentially what many enterprises are facing in cybersecurity. They're drowning in a sea of security products, leading to "tool sprawl" or "vendor sprawl." The cybersecurity landscape, once a carefully tended garden, has become an overgrown jungle.

Having too many security tools that don't talk to each other creates more problems than it solves, paradoxically weakening defenses instead of strengthening them. It's a cruel irony: the very instruments designed to safeguard become instruments of our potential downfall.

In this post, we'll dive into why this is happening, what it's costing businesses, and how we can untangle this complex web for a truly secure future. We'll explore the historical trajectory that led us here, the current state of affairs, and, most importantly, a potential roadmap towards a more streamlined and effective security posture.

II. A Walk Down Memory Lane: How We Got Here

To understand the current predicament, we must trace the evolution of cyber threats and the corresponding defensive responses.

The Early Days (1960s-1980s): Simple Threats, Simple Solutions:
The digital world, in its nascent stages, was a relatively innocent place. The "Creeper" virus and its "Reaper" antidote represent the primordial soup of cybersecurity. The rise of personal computers and early viruses like "Brain" necessitated the creation of antivirus software. Then came the Morris Worm, a wake-up call highlighting the inherent dangers of interconnected systems. These were simpler times, where the problems, though novel, were manageable with relatively straightforward solutions.
The Internet Boom (1990s-Early 2000s): New Threats, More Tools:
The advent of the internet unleashed a Pandora's Box of new threats. Email viruses like Melissa, phishing scams, and Distributed Denial-of-Service (DDoS) attacks became commonplace. Firewalls, once a niche technology, became a necessity. More ominously, organized cybercrime and nation-state attacks emerged, leading to an explosion of specialized tools: antivirus software, intrusion detection systems, firewalls, and a growing alphabet soup of security acronyms.
The Modern Era (Past Decade): The Attack Surface Explodes & So Does the Toolset:
In the last decade, the attack surface has expanded exponentially. Advanced Persistent Threats (APTs), ransomware, cloud computing, the Internet of Things (IoT), and mobile devices have created a threat landscape so complex and varied that it's almost unfathomable. Vendors have reacted by creating specialized "point solutions" for every new problem, resulting in organizations juggling anywhere from 45 to hundreds of different security tools. It's a digital arms race with no clear end in sight.

III. The Current Mess: Why More Isn't Always Merrier

What is "Tool Sprawl"?
It's when an excessive number of security tools become a detriment, creating complexity, inefficiency, and diminished security. It's the point where the forest of defenses obscures the actual threats lurking within.
The Alarm Bells Are Ringing:
Cybersecurity leaders are sounding the alarm. A significant percentage of CISOs are calling for consolidation, recognizing that the fragmented approach is simply not sustainable. Many enterprises use an astonishing number of tools, ranging from 45 to 83, and some even exceeding 100, with retail and financial services organizations being particularly burdened.
This proliferation also gives rise to what we might term the "CTI Paradox": the more cyber threat intelligence (CTI) data we collect, the less actionable it becomes.
The Headache-Inducing Causes:
The causes of this tool sprawl are multifaceted:
- Chasing the Dragon:The allure of the "latest and greatest" security tool, often purchased without considering its integration with existing systems.
- Siloed Spending:Departments independently procuring tools, leading to incompatible systems and redundant capabilities.
- Data Deluge:The sheer volume of data generated by these tools overwhelms security teams, leading to "alert fatigue" and missed threats.
- IT Complexity:The rise of cloud computing, remote work, and mixed IT/OT environments demands broader coverage, but without proper orchestration, it results in chaos.
- Human Limits:Security teams are experiencing burnout, stress, and cognitive overload, leading to poor decision-making.
- No Master Plan:The absence of a clear, risk-based framework for selecting and deploying security tools.
- Vendor Lock-in:Organizations finding themselves trapped with expensive and cumbersome solutions due to the difficulty of switching.
- Cybersecurity Skills Shortage:A global shortage of skilled professionals to manage the growing mountain of tools.
- Regulatory Burden:Compliance demands diverting resources and further complicating the security landscape.
The Painful Impacts on Your Business:
- Less Secure, More Vulnerable:Critical threats are lost in the noise, creating exploitable gaps and blind spots. The paradox is complete: more tools, less security.
- Wallet Drain:Increased operational costs, direct financial losses, higher insurance premiums, and wasted money on redundant tools.
- Team Burnout:Overwhelmed security analysts chasing false positives, leading to low productivity and high turnover.
- Slow & Messy Responses:Longer time to detect and resolve incidents (MTTR) due to fragmented systems and lack of coordination.
- Bad Decisions:Information overload leads to poor judgment and increased errors, such as falling victim to phishing attacks.
- Shadow IT Nightmare:Unauthorized tools expanding the attack surface.

IV. Controversies & Debates: Is More Really Better?

The central question remains: is more really better when it comes to cybersecurity tools? Or have we reached a point of diminishing returns, where the sheer volume of defenses becomes a liability?

Research suggests that there's a "Security Tool Tipping Point," beyond which adding more tools actually increases risk. Businesses are spending more on cybersecurity, but a concerningly low percentage are confident in their ability to stop sophisticated attacks.

Perhaps we're prioritizing technology over the people and processes that make it work. Are we falling prey to the "Silver Bullet" Myth, believing that simply buying more tools will magically solve all our problems? Or is the industry primarily driven by vendors pushing products, rather than focusing on achieving tangible security outcomes?

V. The Light at the End of the Tunnel: Future Developments & Solutions

The Push for Consolidation (Platformization!):
To reduce complexity, cut costs, improve efficiency, and gain a unified view of the security landscape, organizations are increasingly moving towards consolidation. The goal is to transition from a multitude of disparate tools to comprehensive, all-in-one platforms. Major security firms are now offering integrated platforms, providing unified visibility, better integration, cost savings, and faster response times.
Emerging Tech & Smart Strategies:
- AI as Your Ally (and Foe!):Artificial intelligence (AI) is emerging as a powerful tool for both offense and defense. AI can enhance real-time threat detection, anomaly analysis, and automated responses, augmenting the capabilities of human security teams.
- Zero Trust Architecture (ZTA):A fundamental shift in security philosophy, where "never trust, always verify" becomes the guiding principle. Strict access controls and continuous verification are becoming the norm.
- XDR Technologies:Advanced, AI-powered platforms designed to detect and respond to threats across cloud environments, endpoints, and networks.
- Beyond the Basics:Multi-factor authentication (MFA), secure communication platforms, and supply chain risk management (SBOMs) are becoming essential components of a robust security posture.
- Cyber Resilience:Shifting the focus from solely preventing attacks to also ensuring rapid recovery.
- Skills Gap Solutions:Automation, simpler tools, and continuous training are key to addressing the cybersecurity skills shortage.
- Quantum Computing:A looming threat that requires proactive crypto-agile solutions.
The Path Forward: A Proactive Approach
- Define clear objectives for your security tools.
- Implement smart filtering and prioritization for alerts.
- Centralize data management (Security Data Lakes!).
- Conduct regular security audits and continuous threat exposure management (CTEM).
- Foster a culture of cybersecurity awareness.
- Remember: Cybersecurity is a business issue, not just an IT one.

VI. Conclusion: Smarter Security, Not Just More Security

We've seen how the quest for security has inadvertently led to overload, creating new vulnerabilities and overwhelming security teams. The future isn't about amassing more security products; it's about smarter, integrated, and consolidated security.

It's time to declutter your digital defenses, consolidate wisely, and empower your teams to truly protect your enterprise.

Let's stop drowning in tools and start swimming towards a truly secure future. Let us strive for clarity and focus, rather than being blinded by the sheer volume of our defenses. Only then can we hope to navigate the complex and ever-evolving landscape of cybersecurity.

~ Mohan Krishnamurthy

AI-Powered Browsers: The Hidden Security Crisis We Can’t Ignore

2025-10-31T07:53:00.003+05:30

The Wake-Up Call

Image Courtesy: Microsoft Copilot

Brave Browser recently uncovered a vulnerability so deep it shakes the very foundations of web security. This isn’t just another patch cycle—it’s a paradigm shift. AI-powered browsers, designed to summarize, automate, and assist, are now being exploited through prompt injection attacks that can hijack banking credentials, work accounts, and even health data.

Let that sink in: the very tools meant to simplify our digital lives may be opening doors to invisible intruders.

What’s a Prompt Injection—and Why It’s Dangerous?

Prompt injection is a stealthy technique where malicious instructions are embedded into content that AI agents read or summarize. These hidden commands can trick the browser into executing actions without user consent.

There are two types:

Direct Injection: Attackers manipulate input fields to override user intent.
Indirect Injection: Malicious prompts are buried in webpages, PDFs, or social media posts. When the AI interacts with this content, it unknowingly follows the attacker’s instructions.

In AI browsers, this can lead to:

Credential theft via clipboard or autofill manipulation
Unauthorized bank transfers or access to financial dashboards
Session hijacking through exposed cookies or tokens
Email and work account compromise via automated summaries or replies

Why AI Browsers Are Uniquely Vulnerable

Unlike traditional browsers, AI-powered ones:

Interpret and act on content autonomously
Execute tasks based on inferred intent
Often lack robust sandboxing or permission boundaries

This makes them fertile ground for attackers who understand how to manipulate language, context, and automation.

What Can Users and Teams Do to Stay Safe?

Here’s a strategic checklist for individuals, teams, and enterprises:

Personal Measures

Disable AI summarization on sensitive sites (banking, health, work portals)
Avoid interacting with unknown or untrusted content via AI agents
Use privacy-first browsers like Brave that actively monitor and patch vulnerabilities
Clear clipboard and session data after using AI tools

Organizational Measures

Audit AI browser permissions across teams and endpoints
Educate employees on prompt injection risks and safe usage
Segment access—don’t allow AI agents to interact with critical systems without oversight
Demand transparency from vendors on how AI agents are sandboxed and monitored

The Leadership Imperative

This isn’t just a technical issue—it’s a leadership moment. As AI becomes embedded in our workflows, we must ritualize resilience, clarity, and emotional intelligence in how we adopt and govern these tools.

Security isn’t just about defense—it’s about dignity. It’s about protecting the trust our customers, partners, and readers place in us.

Final Reflection

AI browsers are powerful. But power without boundaries is vulnerability. Let’s not wait for a breach to start asking the right questions.

If you're building, deploying, or simply exploring AI-powered tools, now is the time to pause, reflect, and manage your security posture.

Let’s lead with clarity. Let’s protect what matters.

Notes:

Should We Encourage Standard Browsers Without AI Plug-ins?

Yes—for sensitive tasks, absolutely. For banking, healthcare, enterprise dashboards, and any activity involving confidential credentials, users should default to standard browsers like Microsoft Edge, Google Chrome, or Safari without AI plug-ins or extensions. These browsers are battle-tested, regularly audited, and generally more predictable in how they handle session data, cookies, and form inputs.

Why AI Plug-ins Pose a Risk

AI plug-ins often:

Interpret page content dynamically, which can expose them to prompt injection attacks.
Access clipboard, autofill, and session tokens, sometimes without clear boundaries.
Summarize or act on content, which can be manipulated by attackers embedding hidden instructions.

Even well-intentioned AI features can become attack vectors if they’re not sandboxed properly.

Strategic Recommendation

Rather than banning AI browsers outright, we should customize their use:

Use standard browsers for sensitive tasks—banking, work portals, health records.
Reserve AI-powered browsers for research, summarization, and low-risk browsing.
Educate users and teams on when and how to safely engage AI tools.
Demand transparency from vendors about how AI agents are sandboxed and monitored.

This isn’t about fear—it’s about clarity. AI browsers are powerful, but they must be treated as autonomous agents with boundaries.

~ Mohan Krishnamurthy

#Article in collaboration with Microsoft Copilot

Bridging the Generational Gap: Managing New Generation Team Members

2025-10-25T10:50:00.003+05:30

Managing a team with significant generational differences requires empathy, adaptability, and intentional communication. Here’s a structured approach to address the challenges while fostering a productive and cohesive environment:

Image Courtesy: OpenAI ChatGPT

1. Understand the Generational Context

First, recognize that differing work attitudes often stem from generational values rather than disinterest. For example:

Generation Z (25s): May prioritize work-life balance, flexibility, and purpose-driven tasks. They often expect clear feedback and value autonomy.
Millennials/Gen X (34s): May appreciate stability but also seek meaningful growth and recognition. They might prefer digital tools and collaborative workflows.

Avoid stereotypes—instead, engage in individual conversations to understand their motivations (e.g., “What aspects of your role feel most fulfilling?” or “What challenges do you face in managing tasks?”). This builds trust and reveals underlying issues (e.g., unclear goals, lack of growth opportunities).

2. Clarify Expectations Transparently

Many generational gaps arise from misaligned assumptions about work norms.

Define “core hours”: If punctuality is critical for meetings, specify non-negotiable times (e.g., 9 AM–12 PM) while allowing flexibility for start/end times if productivity isn’t impacted.
Set boundaries for availability: Explain why after-hours calls are necessary (e.g., client time zones, urgent deadlines) and clarify exceptions (e.g., “Non-urgent calls can wait until morning”).
Standardize task management: Introduce tools like Microsoft ToDo, Trello, or Notion to track todos, deadlines, and progress. Frame this as a collaborative system, not just a “checklist,” to reduce resistance.

Ground rules in shared goals (e.g., “Punctuality ensures we deliver projects on time, which keeps clients happy and supports team morale”).

3. Adopt a Flexible, Supportive Leadership Style

Younger teams often respond better to leaders who balance structure with empathy:

Foster autonomy: Assign clear outcomes rather than micromanaging daily tasks. For example, “I need this report by Friday—how do you plan to approach it?” instead of dictating steps.
Offer flexibility where possible: If frequent breaks (e.g., smoke, soft drinks) don’t disrupt workflow, allow them. Research shows short breaks can boost productivity.
Provide growth opportunities: Address “no hunger to grow” by linking daily tasks to their career goals. For instance, “This project will help you develop skills in X, which aligns with your interest in Y.”

4. Reinforce Purpose and Recognition

Motivate through meaning, not just compliance:

Connect tasks to impact: Explain how their work contributes to the team/company’s mission (e.g., “Your client follow-ups directly improve retention rates”).
Celebrate progress: Acknowledge small wins (e.g., “Great job finishing that task early—it helped us avoid delays”). Public recognition (e.g., team shoutouts) can be highly motivating.
Invest in development: Offer training (e.g., time-management workshops, industry certifications) or mentorship. This signals you care about their growth, increasing commitment.

5. Model the Behavior You Want to See

Lead by example to set a positive tone:

Arrive on time for meetings and respect agreed-upon boundaries (e.g., avoid unnecessary after-hours messages unless urgent).
Use the task-management tools yourself and share your own todo lists to normalize their use.
Demonstrate adaptability (e.g., learn to use their preferred communication apps like Microsoft Teams) to bridge gaps in tech familiarity.

6. Address Underperformance Proactively

For persistent issues (e.g., repeated lateness, missed deadlines):

Have private, constructive conversations: Focus on impact, not blame. Example: “I noticed the last two client calls were delayed—how can we adjust your schedule to ensure timely responses?”
Link consequences to shared goals: If flexibility is revoked, explain it’s to protect team efficiency (e.g., “If meetings start late, we risk missing project milestones”).
Set clear incentives: Reward consistent performance (e.g., extra PTO, project ownership) and align consequences with company policies (e.g., formal warnings for repeated lateness).

7. Build a Collaborative Culture

Encourage mutual learning to bridge gaps:

Leverage their strengths: Younger team members may excel at digital tools or social media—ask for their input on process improvements (e.g., “How could we streamline client communication?”).
Share your experience: Frame your expertise as a resource, not a mandate (e.g., “In my past roles, I found X strategy effective—what do you think?”).
Team-building activities: Organize informal sessions (e.g., lunch-and-learns, problem-solving workshops) to foster connection and reduce “us vs. them” dynamics.

Key Takeaway:

Generational differences are an opportunity to blend experience with fresh perspectives. By prioritizing understanding, clear communication, and support, you can transform attitudes into engagement. Focus on outcomes over rigid adherence to traditional norms, and align expectations with their values (flexibility, purpose, growth).

Remember, effective leadership adapts to the team, not the other way around. Small, consistent efforts to connect and collaborate will yield long-term results.

#Article in Collaboration with K2 Think AI.

The AI Browser War Has Begun: Dia, Atlas, Comet vs. Chrome, Edge, Safari

2025-10-22T20:31:00.004+05:30

The browser is no longer just a window to the web—it's becoming your co-pilot, your strategist, your memory. In 2025, three AI-native contenders—Dia, OpenAI Atlas, and Perplexity Comet—are rewriting the rules of internet navigation. This isn't just a tech upgrade. It's a paradigm shift.

The New Challengers: Vision, Disruption, and Emotional Intelligence

Dia: The Research Companion

Developed by The Browser Company, Dia is designed for multi-tab thinkers, writers, and researchers.
Features include AI summarization, customizable chatbots, and “Skills” that automate code snippets, writing, and content curation.
Dia remembers your browsing journey like a trusted friend, offering context-aware assistance and emotional continuity.
Target audience: creators, analysts, and anyone who treats the browser as a workspace.

OpenAI Atlas: The Agentic Super-Assistant

Built around ChatGPT, Atlas replaces the traditional search bar with a conversational interface.
Agent Mode can autonomously complete tasks—booking travel, comparing products, retrieving files.
Deep memory integration allows seamless recall of past sessions and tab groups.
Atlas is OpenAI’s bid to own the entire browsing experience, not just live inside it.

Perplexity Comet: The Predictive Navigator

Comet blends intelligent search, contextual awareness, and automation into a Chrome-based shell.
It anticipates user needs, executes small tasks, and offers voice commands and shopping assistance.
Comet is free, fast, and designed to feel like a browser that “thinks with you.”

What They're Trying to Change

From passive browsing to active assistance: These browsers don’t just display content—they interpret, summarize, and act.
From search engines to task engines: AI browsers aim to replace traditional search with goal-oriented workflows.
From tabs to memory: They remember your context, preferences, and previous actions—turning the browser into a continuity engine.

The Traditional Titans Respond

Microsoft Edge: Copilot Mode

Edge now features Copilot Mode, integrating AI into every tab.
Unified input box for chat, search, and navigation; future updates promise task automation and memory-based journeys.
Microsoft is betting on deep integration across Windows, Office, and enterprise workflows.

Google Chrome: Gemini Integration and Defensive Strategy

Chrome remains dominant but faces erosion from AI-native challengers.
Google is integrating Gemini AI into Chrome and Android, while defending its search monopoly in court.
Chrome’s future may hinge on how well it blends AI without disrupting its massive ad ecosystem.

Apple Safari: Quiet but Strategic

Apple is exploring AI search integrations with ChatGPT, Perplexity, and Claude.
Safari’s search volume declines and Apple’s intent to rethink default search partnerships.
Safari may become the stealth disruptor—embedding AI into Siri, Spotlight, and device-native experiences.

What This Means for Users—and the Web

Browsing becomes personalized, predictive, and proactive.
Search engines may lose relevance as AI agents bypass traditional links.
Privacy, transparency, and trust will become central battlegrounds.
Publishers and advertisers must adapt to AI-mediated discovery.

Final Thought: The Browser as Creative Command Center

For creators, strategists, and legacy builders, this war isn’t just about features—it’s about agency. The browser is evolving into a space where memory, intention, and action align. Whether you're drafting a novel, onboarding a partner, or orchestrating a business transformation, your browser may soon become your most emotionally intelligent collaborator—one that understands your goals, adapts to your workflow, and reflects your creative journey.

~ Mohan Krishnamurthy

#Article in collaboration with Microsoft Copilot

Blackbox vs. Whitebox vs. Graybox Testing

2025-06-19T19:31:00.002+05:30

This blog post provides a concise overview of the three main types of software testing: Blackbox, Whitebox, and Graybox testing. It outlines the key differences between these approaches, focusing on the level of internal system knowledge required and the testing methodologies employed. Understanding these distinctions is crucial for developing a comprehensive and effective testing strategy.

Courtesy: Napkin.ai

Blackbox Testing

Blackbox testing, also known as behavioral testing, is a software testing technique where the internal structure, design, and implementation of the item being tested are not known to the tester. The tester treats the software as a "black box," focusing solely on the inputs and outputs.

Key Characteristics:

No Knowledge of Internal Structure: Testers do not need to know the code, internal architecture, or implementation details.
Focus on Functionality: Testing is based on requirements and specifications.
Input-Output Driven: Tests are designed to provide specific inputs and verify the corresponding outputs.
User Perspective: Simulates how an end-user would interact with the software.

Examples:

Testing a website by entering different search queries and verifying the results.
Testing a calculator by inputting various mathematical expressions and checking the calculated values.
Testing a login form by entering valid and invalid credentials and verifying the system's response.

Advantages:

Simple to implement as no knowledge of the internal code is required.
Unbiased perspective, as testers are not influenced by the internal workings.
Effective for identifying usability issues and functional defects.
Can be performed by non-programmers.

Disadvantages:

May not uncover hidden errors or logic flaws within the code.
Can be less efficient in finding bugs compared to whitebox testing.
Difficult to design test cases for complex systems without some understanding of the underlying logic.

Whitebox Testing

Whitebox testing, also known as structural testing or glass box testing, is a software testing technique where the internal structure, design, and implementation of the item being tested are known to the tester. The tester has access to the code and uses this knowledge to design test cases.

Key Characteristics:

Knowledge of Internal Structure: Testers need to understand the code, internal architecture, and implementation details.
Focus on Code Coverage: Testing aims to cover all code paths, branches, and statements.
Code-Driven: Tests are designed based on the code's structure and logic.
Developer Perspective: Simulates how a developer would test the software.

Examples:

Testing individual functions or methods within a class.
Testing specific code branches or loops.
Testing error handling routines.
Performing code coverage analysis to ensure all code is executed during testing.

Advantages:

Effective for identifying hidden errors, logic flaws, and security vulnerabilities.
Allows for thorough testing of all code paths and branches.
Can optimize code for performance and efficiency.

Disadvantages:

Requires in-depth knowledge of the code and programming languages.
Can be time-consuming and complex, especially for large systems.
May not uncover usability issues or functional defects from a user perspective.
Can be expensive due to the expertise required.

Graybox Testing

Graybox testing is a software testing technique that combines elements of both blackbox and whitebox testing. The tester has partial knowledge of the internal structure, design, and implementation of the item being tested.

Key Characteristics:

Partial Knowledge of Internal Structure: Testers have some understanding of the code, architecture, or algorithms.
Focus on Integration and Data Flow: Testing aims to verify the interaction between different components and the flow of data through the system.
Hybrid Approach: Combines blackbox techniques (input-output testing) with whitebox techniques (code analysis).
Developer/Tester Collaboration: Often involves collaboration between developers and testers.

Examples:

Testing web services by understanding the API contracts and data formats.
Testing databases by understanding the schema and data relationships.
Testing security features by understanding the authentication and authorization mechanisms.

Advantages:

Provides a balance between blackbox and whitebox testing.
Can identify both functional and structural defects.
Allows for more targeted and efficient testing.
Facilitates better communication and collaboration between developers and testers.

Disadvantages:

Requires a certain level of technical expertise.
Can be more complex to implement than blackbox testing.
May not be as thorough as whitebox testing in covering all code paths.

New Stock Market Fraud Alert!

2024-10-21T10:38:00.003+05:30

Let me share the latest stock market fraud going around the country. The terms you will be hearing are:

Institutional Trading
Block Deals
AI Algorithms, and
Confirmed IPO allocations

Modus Operandi

You will be searching for some Stock Market resources on the Social Media Websites
Advertisement lures you with 10x to 30x returns
Invitation comes to join a WhatsApp or Telegram Group
You will find several people posting their trade screenshots
Each one of these screenshots shows 30%-50% gains
An 'expert' will help you with formalities to open an account
You have to invest anything from 1 - 10 lakhs (1 million)
You will deposit the money into various bank accounts (why?) as advised by the expert
You will get an advice to 'buy' a stock when they say
You will get an advice to 'sell' a stock when they say
You can't sell a stock whenever you want. The sell button is disabled.
First few days, you will be getting 20-30% returns
You are then pushed by the agents to invest more
Assured by the returns you will be funding your account more
'No Demat' account is required (How?)
Everything happens in 'their' app (So they can show whatever gains they want)
They'll allow you to withdraw profits first few times
Later on, you will not be able to withdraw your profits or your investments
Similar approach to IPO. They will ask you to invest in an upcoming IPO. To your surprise, you will get 100% allocation. They will ask you to introduce more funds.

It looks like a mafia, run under the banner of some big stock trading companies. Often linked to foreign companies. Once you are inside, you can never come out. More luring with schemes follows. Introduce your friends get 10% discount on your brokerage. One-month 300x returns, etc. Aim of this mafia is to loot small amounts from large number of people. Assume 100,000 people investing 100,000 bucks to 1 million bucks every day. Imagine the amount of money the backend network makes per day.

Government has banned hundreds of loan apps that wiped-out the wealth of the middle class in India. Several people have committed suicide. This is one such platform.

Middle-class have been scammed several times in the past. Emu farm, multi-level marketing, binary gold purchase schemes, and Teak trees, etc.

Alert!

Never buy stocks on the tips from WhatsApp, Telegram, and other Social Media websites
Stay away from Trading platforms that says no need to have a 'Demat' account
Limit yourselves with authorised trading platforms such as ICICI Direct, Kotak Securities, and HDFC Securities.
Stay away from all new trading platforms, and apps.
If you don't understand Stock market, stay away from it.
If you have surplus, then invest little, invest regularly. Stay away from dramatic returns.
Multi-bagger is a theory. Not for regular investors.
Never introduce your friends to any of your Stock networks; even the intention is to help them earn money.
Limit your exposure to manageable limits (of loss).
Don't indulge in intra-day unless you can handle a loss.
If you don't have time to learn stock market, invest in Mutual funds, in small amounts.
Don't go for margin trading. You can't have more liabilities than your assets.
Don't go for Futures & Options. This is not for part-time investors.
If you are 'scammed' by any such platforms, openly share this to your friends and relatives so that they can be cautioned.

There is no easy way to make money. Only hard work pays. Anybody or any company claims there is an easy way to make money, your inner voice should say 'stay away', and 'it's too good to be true'.

Leave your comments if you have heard about, or experienced similar scams.

Source: Personal experience of one my contacts who has lost a lot of money.

Article by: Mohan K Madwachar

KYX

2024-10-21T10:37:00.002+05:30

KYX is the Key to Your Organisation’s Cybersecurity.

TIP 1. KNOW YOUR CUSTOMERS (KYC)

Understanding your customers’ business is key to building your organisation’s cybersecurity. Key considerations include: how they transact with you, whether online or offline, how you store their data and financial transactions, and if they share their PII (Personally Identifiable Information).

TIP 2. KNOW YOUR BUSINESS (KYB)

If you are a legacy organisation transitioning to digital processes, it is important to understand how you conducted business before computerisation and how you operate now. Have you fully embraced digital technologies, or are you just starting your journey? Do you have a website that serves as the primary point of interaction with your customers?

If so, do they share their data with you online, and if they do, how do you handle it? Is the communication channel between you and your customers fully secured? Finally, are you required to meet regulatory compliance? These are all questions you should consider to stay compliant and keep your customers’ data safe.

TIP 3. KNOW YOUR INFRASTRUCTURE (KYI)

Your infrastructure has five important elements: Network, Users, Data, Applications, and Cloud. You need to consider how you operate, whether at your premises, remote, or mobile. You should also think about how your users connect to your corporate applications. Can you identify from where they are accessing your network? Are they using corporate- owned equipment? Are the endpoints secured to handle corporate communications? If you have developed the applications, have you followed the standard secure coding practices?

TIP 4. KNOW YOUR USERS (KYU)

Effective cybersecurity measures depend on user behaviour. Those who neglect cybersecurity hygiene become the weakest link in an organisation. Educate, enable, empower, and repeat.

TIP 5. KNOW YOUR ROLE (KYR)

The designations of CISO, CIO, CTO, and CDO come with great responsibility. Even a single data breach can lead to severe consequences and put the blame on you. Therefore, it’s crucial to know your role, authority, powers, and responsibilities in the organisation. You should document what you can and cannot do, as well as what you are responsible for and not responsible for. It’s also essential to document any observations you make and communicate them to all stakeholders. This way, you can address any issues before they escalate and avoid negative repercussions.

TIP 6. KNOW YOUR VENDORS (KYV)

Original Equipment Manufacturers (OEMs) are responsible for developing modern cybersecurity technologies. Are they present in your country? Do they have a Technical Assistance Centre (TAC) and provide Return Merchandise Authorization (RMA)? Do they offer 24x7 support? Is the product stable and safe to install in your system? Are they committed to the locations where your operations are based? Is the product reaching its End-of-Life (EOL) or End-of- Sale (EOS)? Do they make commitments on the data sheet that they are unable to deliver? Do they have a long-term roadmap for this product line? Do they offer an integrated solution or just individual components?

TIP 7. KNOW YOUR PARTNER (KYP)

Whether you call them a partner, reseller, or system integrator, they are the link between you and the original equipment manufacturers (OEMs)! How do you assess their level of expertise? Do they have the necessary skills and experience to handle your project? How long have they been in the industry, and how stable is their organisation? Are they authorised to sell the products they offer, and do they have certified and trained staff? Will they be there for you when things go wrong? It’s also important to understand their organisational structure and have a clear escalation matrix in place.

TIP 8. KNOW YOUR JOURNEY (KYJ)

If you have an unlimited budget, you might be tempted to bring in the best-of-breed solutions and pay heavily for them. However, if these components do not talk to each other, there will be no integrated management in place. This means you won’t be able to understand what is happening in your organisation. Building a cybersecurity system is like constructing a house; each component needs to be synchronised, like the workings of an orchestra. If you ignore security, the digital journey becomes challenging.

TIP 9. KNOW YOUR FINANCES (KYF)

Budget and constraints are closely related. Out-of-turn investment requests after a breach may put a strain on your finances. It’s important to anticipate these requirements and plan for them in advance. CFOs are always looking for ways to optimise costs and often target the Information Technology (IT ) department. However, it can be challenging to explain the need for security tools like SIEM or SOAR to CFOs who may not be familiar with cybersecurity terminology. It’s important to avoid using scare tactics like FUD (Fear-Uncertainty-Doubt) when presenting to top management, as this can lead to either unnecessary fear or dismissal of the issue. Instead, focus on presenting the information in a clear and understandable manner.

TIP 10. KNOW YOUR ACRONYMS (KYA)

PCMCIA - People Can’t Memorize Computer Industry Acronyms! Just kidding! Often, vendors use acronyms while communicating. You should stop them if you don’t understand them. IP and IP may represent two different things. One stands for ‘Intellectual Property,’ and the other stands for ‘Internet Protocol.’ If you are unsure about an acronym, don’t hesitate to ask for an explanation. It’s your right to ask and their duty to explain! Making assumptions can lead to wrong decisions. Sometimes, a conversation can be filled with acronyms for 30 minutes, and you may not understand any of them. You don’t need to know all the acronyms or technologies, but it’s your role as a guardian to ensure you understand what’s happening in your company. That’s important!

Bonus Tip#: Know Your Opponent (KYO)

Knowing your adversaries is the name of the game. Is it your competition who wants to hurt your business? Or somebody from across the border! Are you an innocent bystander getting caught between the cross-fire of two other contenders? Were you the actual target? Are they trying to hack your website? Or they want to extract information about your customers? Or users acting from inside, or are they after your IP (Intellectual Property)?

~ Mohan Madwachar

Read it on: https://belmontbec.com/wp-content/uploads/2024/06/1001-cyber-security-Tips-Mohan-Madwachar.pdf

Security and password protection

2020-02-11T14:20:00.001+05:30

"They got someone's password, and sent an email to our CFO, who sent the $40,000 wire transfer."

ISODA announces new management committee for 2018-2019

2018-09-04T08:30:00.003+05:30

The tenth AGM of ISODA (Infotech Software Dealers Association) announced N K Mehta as its Chairman and Gunasegharan Krishnan as the association’s President for this year.

The Infotech Software Dealers Association (ISODA) concluded its Annual General meeting last week in Mahabalipuram.

It was 10th year of the formation of ISODA incepted in 2008 by a handful of channel companies and its owners primarily to fight the taxation structure for software industry at that time.

ISODA has now grown into a full-fledged and active IT association encompassing over 180 members including channel companies, tech OEMs and others.

Prashant Jain of JNR Management Resources and ISODA member presided over the election of new management committee (MC) at 10th AGM

My immediate priority as the chairperson of one of India’s Premium IT Associations ISODA is to create a five year leadership plan, for a better focus on long term vision and thus make a visible difference for ISODA and its members.

N K Mehta

N K Mehta, Managing Director, Secure Network Solutions became the Chairman, after being the Vice Chairman last year. Gunasegharan Krishnan, Director, eCaps Computers became the President after being the Vice President last year.

…. Read more at

http://www.channelworld.in/media-releases/isoda-announces-new-management-committee-2018-2019

Are you FAST enough for SAST & DAST?

2018-04-18T23:34:00.005+05:30

Banking and Financial Sector companies have come a long way from the conventional banking system to modern means of providing various services to the customers at their finger trips. Long days of wait for cheque clearances, long queues at tellers and the rate of which each transaction used to occur is long gone. Now you have Internet Banking System, Mobile Banking System, and Interactive Video Customer Services. Opening of bank accounts through tablets right from the customer’s home, online transactions through NEFT (National Electronic Fund Transfer), RTGS (Real Time Gross Settlement), IMPS (Immediate Payment Service), payment wallets and several such new features have modernized and simplified banking activities. Technology brings fantastic benefits.

However, the IT teams of these financial sector organizations who are into modernization face tremendous challenges. On the customer front, they need to ensure intuitive, colourful and easy to use customer interfaces that ensure their customers do not have to be computer savvy to use their applications. But on the back-end, it all ends-up with millions of lines of coding, software development and integration to multi-channel interfaces.

Not all off-the-shelf applications can be utilized in all banking environment. Bespoke development is required to meet the specific needs of the local regulations, target customer base and modes of interaction.

Secure coding practices are now incorporated as a first lesson in programming. Any ‘bug’ unintentional or intentional brings risk and exposure that may result in downtime, data loss and financial implications. Constantly evolving threats mean the development team can never conclude ‘Our product is ready to be launched’!

Scanning of source code, identifying vulnerabilities of the code and remediating the gaps are important factors of source code analysis. Prevention of application layer vulnerabilities and Web security breaches mean half-the-battle won.

Banks have realized the need to ensure highest security to the customer data and transactions while adopting the modern technologies. Security begins right from the first step of development of the software application. Therefore, Static Code analysis becomes the first step in Application Security. Similarly, once the application goes online, the behaviour of the application in various scenarios (the running state) need to be tested for any vulnerabilities as well. Together, Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools are key in the Bank’s IT Security armoury. And both these tools should be tightly integrated throughout the Software Development Life Cycle (SDLC).

Here is a simple checklist: Are you launching custom developed web and mobile applications for your customers? Are you handling critical data? Are you fast enough to adopt SAST and DAST?

~ M.K. Mohan

Also read it on: http://csoonline.in/articles/are-you-fast-enough-sast-dast

Knocking-off NAC, just not yet!

2018-04-18T23:34:00.002+05:30

Happiest days of Networking? Desktop wired to a face plate, wired back to the switches and you must be physically present to access the local or corporate network resources. Then came the flexibility of laptops. You can carry it wherever you want. Presentation at a customer place, no issues. Design your presentation, off-you go, attach to the projector at the conference room and deliver a presentation. But back to the office network, you need that magic RJ-45 Ethernet cable to get hooked to the corporate network. One file server, and one print server, and somewhat advanced networks you used to have mail servers.

Then came the wireless networks. Laptops needed a PCMCIA card to make your connection wirelessly. Yet, some control with the network administrators. Introduction of built-in wireless devices, introduction of smart phones, tablets and umpteen other devices resulted in complete loss of control and administrators now with sophisticated designations as ‘Security Administrators’ started feeling the heat.

Network Admission or Access Control (NAC) is all about right people accessing right resources in compliance to the corporate security policies. No more and no less.

You want your employees to be connected 24×7? Mail clients on mobile, fancy mails tags such as ‘Sent from Outlook for Android or Sent from iPhone’? Now you are talking about what to control. How would you restrict an employee downloading a corporate email attachment to the phone and then sending it back to his or her personal email address?

Access to Corporate resources through mobile apps, Web based applications, Time and attendance, Sales and CRM from anywhere, anytime from any device, you are talking about a wide spectrum to monitor and control.

NAC is not the newest of technologies in the block. It has been there for at least two decades. Now why this renewed focus? Wireless infrastructure allowed employees, contractors and guests to access Corporate network. However, you want to restrict Guests to only access Internet and not the Intranet. You may want to allow contractors to Extranet, but not to access your internal file servers. Employees need to access certain resources, but only when they are in certain locations. Access to corporate applications from an Internet Café means a complete clean-up of session after your complete your work or risk of losing corporate data to outsiders. Organization’s decision to BYOD (Bring Your Own Device) may spell doom to CSOs and may mockingly become Bring Your Own Death (BYOD).

Protecting sensitive data, improved productivity, flexibility in BYOD, ease of deployment and ease of management are the factors a CSO to consider before deciding on a NAC solution.

Simple questions to ask yourselves before picking-up a NAC solution:

Can it provide complete visibility? Do I get detailed reporting for compliance? Can it offer context-aware policies based on user role, time, location and the kind of device he or she is accessing the corporate resource from? How much overhead it brings to the administration and management. Can the process of onboarding a user, enrolment and logging be completely automated to bring seamless experience to the users? How can I integrate with existing MDM (Mobile Device Management) solutions?

Now, we can call its NAC 2.0. A rejuvenated NAC. Or NAC reborn! Whatever you may choose to call, don’t knock-off NAC from your IT security budget. Not just yet!

~M.K. Mohan

Also read it on: http://www.csoonline.in/articles/knocking-nac-just-not-yet

Make way for SDP

2018-04-18T23:33:00.002+05:30

My grandfather often used to recollect his father’s advice: Never buy lands beyond what your eyes can see! Obviously, beyond your direct vision of your lands, nobody knows who is utilizing them, and how. Drawing the analogy to the modern-day Network Managers, you can’t manage the network you can’t see.

Modern day networks are large and complex with disparate systems, security and monitoring tools. Often, these tools are purchased and deployed to address one immediate requirement with no deep-down thinking or long term thought process. Network managers are left with so many stove-pipe solutions and many places to look at when it comes to troubleshooting. Compliance to various security agencies and government requirements mean more and more security tools.

Put together can these tools are able to still leave them with a good night’s sleep is still a question. Network Visibility is becoming a key discussion point in all IT discussions. How much you know about your network and how well is the question!

From a legacy (is it too early to call it a legacy?) data center where rows of racks are stacked with switches, routers, VPN concentrators, firewalls, Intrusion Prevention Systems and log analysis appliances, to the newer data centers that have hundreds of virtualized components due to the advent of Software Defined Networking (SDN) and Network Functions Virtualization (NFV), getting the complete picture of what’s going where is still a puzzle.

Newer threats such as encrypted attacks, malware, ransomware and even the hardware related bugs that can be exploited by hackers only add to this complex picture of lack of visibility in your networks.

Of course, we have SIEMs, Log analysis and network monitoring tools. But they pose a challenge of media limitations (1G tools in a 10G network), domain or scope of these tools and constant need to upgrade and update them calling for a downtime, and therefore, time gaps in networks being protected.

When networks scale very fast, these security tools don’t. While data at rest is handled through encrypted storage solutions, data in motion remains vulnerable always.

Therefore, the resulting network in present shape, leaves several blind spots, inconsistent view of traffic, veiled encrypted traffic and constant contention for access to traffic.

The solution for these challenges is the Security Delivery Platform (SDP). Instead of looking at point solutions, it aims to provide visibility across the entire infrastructure. You have inline security tools (eg. Firewall) and non-inline tool (eg. SIEM) that needs access to the traffic through TAPS (Traffic Access Points). Limitation of limited TAPS need to be overcome to have better visibility.

Total visibility means not only seeing everything, but also not to miss something that’s very important too. With network traffic growing exponentially, challenges of sophisticated threat patterns and malware that comes in encrypted forms, directing right and meaningful traffic to the right security tools is the only way to have a greater control of your network.

Government agencies, financial sector companies, Healthcare, Media, ecommerce and even technology companies are turning to Secure Delivery Platform (SDP) to address the above challenges. Need to maintain total network visibility on-premises in your data centers and in Cloud means time has come to make way for SDP!

~M.K. Mohan

Also read it on: http://csoonline.in/articles/make-way-sdp

Infographic: Physical Security in 2016

2015-10-27T10:33:00.001+05:30

Please include attribution to http://www.ingrammicroadvisor.com/ with this graphic.

Courtesy: Ingram Micro

Information highway or information lane?

2015-01-23T23:04:00.001+05:30

http://www.gulf-daily-news.com/NewsDetails.aspx?storyid=394473

Another article published by Gulf Daily News in Your Views Section today - "Facing Challenges"

2014-12-23T09:39:00.000+05:30

http://www.gulf-daily-news.com/NewsDetails.aspx?storyid=392486

Facing challenges

Posted on » Tuesday, December 23, 2014

New country, new people, new work environment, opportunity to learn a new culture and a tax-free salary package; a dream for any expatriate to choose to work in the Gulf countries. However, the initial excitement fades away if homework is not done properly. Later, it turns into a challenge as well.

Income of an expatriate has to be divided into three '“ one portion to spend for living here, one portion to be sent home to take care of their parents or family left behind, and the third goes into future planning '“ as most of them have pension-less jobs offering no security post retirement.

So the direct conversion of dinars into home currency might have created an excitement, but when the same gets divided into three portions, it makes you blink at the stark reality. One has to lead a below average life here to save for the other two portions.

The income tax-free package too turns out to be an illusion as huge expenses are involved in annual travel back home and buying gifts for near and dear ones.

Insurance, investments in mutual funds, equities or properties, home loan, personal loan and equated monthly instalments eat away any of your desires of leading a comfortable life. And most importantly, when one works long enough in the Gulf and returns home he or she realises that all their lives were squandered thinking about tackling the future, with no focus on the present.

People from developing economies get excited about the improved conversion rates on their currencies. They have apps installed on smartphones or laptops to constantly check the current rate.

But stop for a moment and think whether the increase of one point (or one unit) gives people back home any increased buying power. Does the cost of living offset the additional income?

Websites that offer free financial consulting, retirement planning and investment tips scare you when they calculate and present that you need few tens of thousands of dinars today to lead a better post-retirement life. And how in the world the average earning expatriate is going to generate this few tens of thousands of dinars in one go?

Gulf countries do not offer citizenships or long-term residence permits. A few avenues have opened up such as residences for business owners and property investors. However, not all expatriate employees can avail of these benefits.

Dollar pegging keeps inflation under control, which makes employers to keep the salary levels same for several years altogether.

Therefore, the financial growth is fairly static over the years while the industry's salary standards grow constantly, if not dramatically, across the world.

So, after spending several years, one may find their peers back home are more or less getting the same salaries as you do and are lucky enough to spend their lives with their families.

Mohan Krishnamurthy

http://www.gulf-daily-news.com/source/XXXVII/278/pdf/page06.pdf

http://www.gulf-daily-news.com/source/XXXVII/278/pdf/page07.pdf

Westbound Flight now available on Kindle Direct Publishing (KDP)

2014-12-19T17:52:00.000+05:30

http://www.amazon.com/dp/B00R3X8QGM

Launching Almoayed ICT, Kingdom of Bahrain

2014-08-23T06:03:00.001+05:30

Sunday, 10th August 2014

Almoayed Group is one of the leading ICT solutions providers with more than three decades of dedicated ICT and associated technologies experience in Bahrain, the GCC and Middle East region.
It was established in Bahrain in 1982 by chairman and founder Nabeel Almoayed, with the vision to develop, deploy and support innovative, quality and sustainable ICT solutions and services that meet the needs of valued customers in Bahrain and the region.

The company has since established a track record as a leader in the IT sector. It has played an integral role in the development of the kingdom’s “technology infrastructure”, and in the process has developed a wide range of strategic partnerships and alliances with technology industry leaders such as Cisco, IBM, Avaya and EMC, just to name a few.

Almoayed Group is now proud to introduce Almoayed ICT – a consolidation of the various existing divisions and group subsidiaries currently operating within the Information and Communications Technology (ICT) sector.

The newly-registered entity will incorporate Almoayed Data Group (ADG), Almoayed Telecom (Amtel), Almoayed Networks (Amnet) and other subsidiaries under one unified structure. “Our aim is to create a platform for future growth,” said executive director Dr Nawaf Almoayed.

Strategy

“Unifying our various entities is a key part of our long-term strategy, and will provide us with the necessary framework to achieve our growth targets.

“The new entity will be better geared to serve our customers by combining resources and expertise under one roof and will serve to reinforce our position as a turnkey solutions provider for all our customers’ ICT requirements.”

The ICT sector has been identified as one of the key sectors and prioritised for development by the government of Bahrain in its National Economic Strategy.
With this news Almoayed ICT reaffirms its commitment to Bahrain Economic Vision 2030 by providing the latest in cutting-edge technologies and IT infrastructure requirements for the kingdom.
With a highly experienced, qualified and dedicated workforce, Almoayed ICT is at the forefront of service and quality.

“The ICT industry is inherently one of the most dynamic and fast-changing industries, and our organisation has evolved pro-actively over the past three decades,” said Almoayed Group Chief Executive Parag Bhave.
“We are proud of our history that is synonymous with Bahrain’s development and progress in the past 30 years and our technological capabilities continue to evolve and grow.
“Our customers depend on us to build and deploy effective and reliable solutions and to provide comprehensive, trustworthy business support.

“Under Almoayed ICT we will be better positioned to provide a more comprehensive and wider range of solutions to our valued customers covering all fields of ICT.”

Almoayed Group's Hat Trick: Winners of Bahrain Marathon Relay 2013 (IT Segment)

2013-10-27T13:10:00.000+05:30

Pictures soon

Gulf News Article on one of my mentors: Mr. Ramesh Mahalingam

2013-10-20T13:05:00.001+05:30

http://gulfnews.com/business/retail/developing-a-fuzzy-business-like-consulting-1.1244246#.UmJFK_GeS7E.facebook

Developing a ‘fuzzy’ business like consulting

IdealMC is an independent consulting and advisory firm

By Manoj Nakra, Special to Gulf News
Published: 21:00 October 18, 2013

Image Credit: Clint Egbert/Gulf News
Ramesh S. Mahalingam, Managing Director - Ideal Management Consultants, at this office in Al Rostamani Tower B.

Ramesh started Ideal Management Consultants (IdealMC), a consulting / advisory company, after acquiring diverse experience as a CFO and in investment banking. The value offering of IdealMC has evolved and morphed over time. Ramesh ‘crafted’ the service offering to the needs of the market. IdealMC now has 10 employees.

What does IdealMC do?

R: IdealMC is an independent consulting and advisory firm. Dubai has had a number of consulting firms that were off-shoots of auditing companies. Very few companies offered consulting and advisory services to the SME sector. I saw a niche, and set up a boutique firm to occupy this space. In due course two things happened: we moved up the ladder to serve mid- to large clients, and we added training to our offerings.

Where was entrepreneurship in you?

R: After becoming a CA at 21, I imagined I would set up my own firm one day. Since then, I worked in diverse business sectors to gain diverse experience – in FMCG, shipping, oil & gas and investment banking. Working with top names in each of these sectors gave me a solid foundation and exposure to global best practices.

Years later, when my father retired after 38 years of service with a single employer, I felt his loss of identity, his feeling of being unemployed and unsought. This made me decide that my “retirement” should be in my hands. This, in a sense, rekindled the thought of entrepreneurship in me.

Your first assignment?

An HR job that came from a large retailer – to advise and implement the HR integration of a mid-sized service company they had just acquired. Our challenge lay in integrating two diverse companies with no commonalities in business or staffing. Since the office was not yet ready, the three of us operated from home and had meetings across the dinner table. Our need to deliver on the assignment was greater than readying the office.

When did you know the company had started?

From the very first assignment. I had an instinct that this would work. Our clients liked what we did, and referred us to others. We built our service offerings assignment by assignment, all based on client requirements. Gradually we saw it fall into three broad verticals: management consulting, advisory and training.

When did you need additional people?

We started off as a team of three, all of us highly driven to create a name for the firm. My initial concerns were “as a small firm would we be able to hire more such committed talent?”

Fortunately, we were able to find intelligent, talented and highly dedicated people relatively quickly, within the first few months.

Was it a cost issue?

Set up costs were not big. Around AED 350k got us the license, office space, visas, and furniture. The challenge was to manage the cash flows till we received our first payment.

Any surprises?

While I had envisaged the firm to focus on finance and cost management, our first assignment was in the HR area! Since then we have undertaken several HR assignment for diverse clients. Another unexpected green pasture was training which we entered into in response to a client’s request.

Any challenges in recruiting?

On average we hired a person every month after our first assignment till we reached 10.

I believe that every team member is an entrepreneur and stakeholder in the firm – an ‘emptreneur’. Our HR policy is designed to reward each person for business originated and mandates delivered.

Have you been recruiting from the beginning?

Recruitment is an ongoing exercise since I believe in getting the right people on board when they are available. We have been recruiting right through the recession in the belief that assignments would follow. Fortunately they have.

Any tense moments?

Yes, every time we send out a proposal and the client is close to decision-making. It’s a positive tension. Most of our clients have been good with paying for services provided, sparing us from unproductive stress.

You are a little uncomfortable soliciting business. How did you overcome this?

I don’t think I have overcome it! Rather than soliciting business, we try to promote ourselves as a firm, hoping our work speaks for itself. We love referrals – and have landed several assignments in this manner.

Is this your customer acquisition strategy?

Our primary strategy is to let our work speak for itself; and to follow it up with a thorough conversion process. Our proposals are detailed and comprehensive. They inspire confidence in our ability to execute.

Why do clients choose you? Is it a balance of quality and price? Or they want a boutique guy to do the work - specialization? Or they feel that big guys don’t pay attention?

I think it is because clients like our “solutions” approach; our commitment to the “spirit” of the assignment and the passion we exhibit shows in our work. We want to be the best regarded consulting firm.

My exposure to multiple industries and the diverse roles I fulfilled in my career makes it possible for me to advise clients with practical solutions. Clients see our Directors engaging actively on each assignment and feel they are getting their money’s worth while hiring us.

How did you select this niche?

We work with a mix of small, medium and large clients. In some cases they gave us relatively low-risk work to see how we performed; before we were able to get strategic assignments from them.

Your customer focus changed?

For us every assignment is significant. The diversity of clients and the range of assignments have constantly tested our team’s versatility. We now have a critical mass of delivered work to be able to confidently take on larger assignments.

How did you evolve pricing for your services?

We learnt along the way. We now have a scientific system wherein we estimate the time required by each resource level to complete an assignment and price the work accordingly. We also have a set of tools that help us track our performance, time and cost for each team member.

What worries you today?

How to keep up the reputation built thus far. How to make that favorable first impression each time we engage with the client.

Would you walk away from a job or a company?

Yes. We have done that when we are not comfortable with the declared intent of the client. Integrity is all important to us.

How long does it take you to win a job?

Between 2 days and 9 months.

Have you changed as a person?

Yes, the buck stops with me - I now have to think of all possibilities and consequences before making a decision, whereas earlier the parameters were limited and defined. The plus side is that from being a functionary operating within specific limits, I now have a lot more latitude.

I now have the added responsibility of signing my own paycheck and approving my own leave application!

Did you have to unlearn something?

It’s been re-learning rather than unlearning. No stereotypes, no rigidities. If I have to meet a client at 11 at night I do it.

Manoj Nakra, currently with Apparel group, is a mentor to DubaiSME members.

A past overtaken by a fast moving world

2013-08-08T10:40:00.000+05:30

Gulf Daily News 8th August 2013 - http://www.gulf-daily-news.com/NewsDetails.aspx?storyid=358869

These days newspapers often have stories about the global recession, an increase in unemployment, gross domestic product, growth rates, crude oil prices or falling gold prices, but I sincerely doubt this makes any sense to the common man.

Generation after generation we hear older people saying "in our day" or "in those days" - and I have started saying the same. Is it just that we are aging, or has it been always the way the world has progressed?

Let me rewind to a time when I was comfortable carrying a BD20 note in my wallet and would be unable to spend the whole amount in a week. What has changed?

Well, to start with, the need for communications has increased. Earlier, the justification was that businesses needed to always be connected. Now, it's the same even for individuals. So the once non-existent cost of mobile phones, mobile Internet, home Internet, Internet dongles and WiFi charges have come into play.

Secondly, super malls have cropped up everywhere.Simple purchases of groceries, milk and yoghurt do not happen anymore. You take a shopping cart, start browsing through the stalls, pick up anything and everything (often required items and mostly non-essential items on offer or sale).Now the shopping experience is all the more different and of course, all the more expensive.

Thirdly, the food joints offering the world's cuisine all within driving distance have turned us into food explorers. If it's a one-time venture, fine! But it doesn't stop there. You then have to introduce your friends to the newly-discovered restaurant. "That particular cheese item, what was it, ah well, that was very authentic.""You must try this..." I'm not sure whether we can really figure out whether the Italian or Mexican dishes on offer are authentic or not. How good are we at judging the authenticity of a particular cuisine? Nevertheless, every trip costs you something - an unplanned and non-essential expense.

Four, there is the ever-growing need for home electronic gadgets. It's amazing. Remember the simple Yashica, with 36 photos a film roll? You had to wait until you finished the entire roll and then rush to the photo studio - and then wait till the guy developed it in a dark room. The expressions on your face to see a few of your photos that were overexposed or underexposed. Forget about the excitement and thrill of seeing the photos, it wasn't expensive then! Now you have flashy digital cameras, camcorders and mobile phone cameras. Terabytes of storage are required to store the photos. Will you ever find that "one day" to sort the photos, delete the bad ones and retain the good ones? Maybe take a few for printing? Nope! What used to be considered a small business is now available in most modern homes. And you keep buying these expensive portable hard disks to store those precious moments, which you are never going to view again! At least not frequently! The habit of showing your photo albums to guests is no longer to be seen.

Five, don't forget the days when we used to play merrily and return home by dusk. Inexpensive, eh? Now modern children are tuned to PlayStation and Xbox. If you can afford the capital expense of buying the consoles, what about the games? BD15 or BD20 for a game? Come on! That used to be my weekly expense before the dawn of this new era! What has changed?

Everything around except the people of my generation and, of course, most of you readers in sync with what I have written. Now, is it time to go shopping? It seems there is some special offer on digital cameras!

Mohan Krishnamurthy

GDN Digitial Edition Page 6

GDN Digital Edition Page 7

leomohan-2026

My Weekend Token Utilisation Report #Week 1

Takeaway

Saturday Morning: OpenWebUI — My AI Café

What it is

Why it’s fun

Setup

Saturday Afternoon: OpenCode — My Coding Partner Who Never Sleeps

What it is

Why it’s awesome

Setup

Sunday Morning: OpenDesign — The AI Design Studio That Actually Ships Real Output

What it actually does

Why it’s addictive

Setup

Sunday Afternoon: Making All Three Work Together

The Trio

Example workflow

Why this matters

Benefits (The Serious Part of the Naughty Title)

The Twist

From LDL & HDL to LLD & HLD: A Project Manager's Guide to Reading Blood Test Reports

HDL (Good Cholesterol) = HLD (High-Level Design)

LDL (Bad Cholesterol) = LLD Gone Wrong

Triglycerides = Pending Action Items

Blood Pressure = Project Pressure

Hemoglobin = Team Productivity

Vitamin D = Stakeholder Support

HbA1c = Technical Debt Index

ECG = Project Audit

Final Diagnosis

Presenting Without Borders: How I Delivered a Seamless English–Arabic Hybrid Presentation

Most presentations are judged by their content, design, or delivery. But occasionally, the true test lies in something deeper: can every person in the room understand you?

Designing the Foundation: A Presentation Built for Two Languages

Turning Text Into Voice: A DIY Arabic Narration Studio

Creating a Live Translation Loop: English ↔ Arabic in Real Time

The Outcome: A Room Without Language Barriers

How Many More Years Will It Take to Tell What’s Real?

Goodreads

Drowning in Digital Defenders: How Too Many Cybersecurity Tools Can Actually Make You Less Safe

I. Introduction: The Paradox of Protection

II. A Walk Down Memory Lane: How We Got Here

The Early Days (1960s-1980s): Simple Threats, Simple Solutions:

The Internet Boom (1990s-Early 2000s): New Threats, More Tools:

The Modern Era (Past Decade): The Attack Surface Explodes & So Does the Toolset:

III. The Current Mess: Why More Isn't Always Merrier

What is "Tool Sprawl"?

The Alarm Bells Are Ringing:

The Headache-Inducing Causes:

The Painful Impacts on Your Business:

IV. Controversies & Debates: Is More Really Better?

V. The Light at the End of the Tunnel: Future Developments & Solutions

The Push for Consolidation (Platformization!):

Emerging Tech & Smart Strategies:

The Path Forward: A Proactive Approach

VI. Conclusion: Smarter Security, Not Just More Security

AI-Powered Browsers: The Hidden Security Crisis We Can’t Ignore

The Wake-Up Call

What’s a Prompt Injection—and Why It’s Dangerous?

Why AI Browsers Are Uniquely Vulnerable

What Can Users and Teams Do to Stay Safe?

Personal Measures

Organizational Measures

The Leadership Imperative

Final Reflection

Notes:

Should We Encourage Standard Browsers Without AI Plug-ins?

Why AI Plug-ins Pose a Risk

Strategic Recommendation

Bridging the Generational Gap: Managing New Generation Team Members

1. Understand the Generational Context

2. Clarify Expectations Transparently

3. Adopt a Flexible, Supportive Leadership Style

4. Reinforce Purpose and Recognition

5. Model the Behavior You Want to See

6. Address Underperformance Proactively

7. Build a Collaborative Culture

Key Takeaway:

The AI Browser War Has Begun: Dia, Atlas, Comet vs. Chrome, Edge, Safari

The New Challengers: Vision, Disruption, and Emotional Intelligence