Mikko's Law
If it's Smart, it's Vulnerable
Reading If It’s Smart, It’s Vulnerable gave me a new background process I didn’t ask for. A quiet one. It kicks in when I’m setting up a device, installing software, or writing code that feels harmless enough. Every time I think “this will probably be fine,” the book taps me on the shoulder.
Hyppönen has spent decades watching security fail in very predictable ways. He’s seen the shift from simple viruses to sprawling, interconnected systems that are powerful, convenient, and deeply brittle. This book is him walking through what that actually means, using short essays rather than lectures.
He’s particularly good at moving between concrete examples and bigger ideas. One moment you’re reading about a real breach, the next you’re thinking about trust, complexity, and how little we really understand the systems we depend on. He doesn’t use hyped up scare tactics (which is refreshing!).
The writing hits a nice balance. It’s accessible without being shallow, and technical without being exhausting. You’re left with a clearer sense of why failures happen, not just that they do. The idea that stuck with me most is how convenience quietly erodes security, through shortcuts that add up over time.
Hearing Hyppönen speak in person later only made that clearer. The same calm delivery, the same focus on real-world consequences, and the same refusal to dramatize. It’s a perspective that stays with you — especially if you build software — and gently raises the bar for how carefully you think about what you’re creating.
Don’t want to read an entire book? Here’s a few links to his keynotes and talks: