Tuesday, April 28, 2026

Sermon - TLIS - 3.1.2 - Christian Architecture

Sermon - TLIS - 3.1.2 - Christian Architecture

2 Peter 1:3
His divine power has given us everything we need for a godly life through our knowledge of him who called us by his own glory and goodness.

Micah 6:8
He has shown you, O mortal, what is good. And what does the Lord require of you? To act justly and to love mercy and to walk humbly with your God.


No, we are not going to be talking about how to build churches.

When I started to teach about security architecture, and business architecture, most people misunderstood the term architecture.  Most people seemed to see architecture as a mere plan, or diagram, or outline of how you would put together security.  The architecture is much more than that.  The architecture is not a plan or a diagram or an outline.  The architecture is what allows you to develop and put together a plan or diagram or outline.

So I started to come up with an illustration for the students and candidates.  What if you were going to build a house?  For a house, everybody understands that you need an architecture.  Generally speaking, you would try and find an architect.  So let's design a house.  What do we need to build a house?

And, generally speaking, someone would almost immediately jump in by saying four walls.  And I would jump on that.  "Aha!" I would say, "but this house is in the South Pacific Islands.  We actually don't *want* four walls.  We live in a very humid environment.  We want the breezes to blow through as freely as possible.  If we don't, we are gonna have a problem with mold.  So we don't want walls.  We might want drapes of some kind, or screens, to give us privacy.  But we don't want anything to impede the air flow.  We do want a roof, because we have a lot of rainfall which contributes to the humidity.  But we don't want walls because it's generally warm enough that we are not going to be uncomfortable.  So all we need is a roof, and some screens or other curtains.

The point of this exercise is to get you to think bigger about what an architecture is.  The architecture is so big that it is really just a set of the requirements.  What is it that we need?  For a security architecture, what is it that we need in terms of security?  For a business architecture, what is it that we need in terms of our business?  The requirements are, basically, our architecture.

You also need to learn to think smaller.  The policy, for a business, is, generally, just a few sentences.  It looks more like a mission statement than the five hundred page manual that most people think about when you talk about business policy.  In terms of our house, our architecture really should only mention the need to keep the rain off, the need for some privacy, and the need for an airy feeling, and actuality.  That is the architecture, and it allows us to create something that is appropriate in terms of an actual design and implementation.

So, when we turn to trying to design an architecture for our Christian life, We only need a few basic outlines.  Love God.  Love your neighbor.  Spread the good news.  That's it.

Anything beyond this is extraneous, and actually risks becoming an impediment.  Just like our four walls in our South Pacific home.

Many people think too small with regard to security architecture.  That is, they look at it too closely.  They think that it should be a design that is to be implemented.  They think that it should specify particular vendors and particular products.  The problem with that is that when the business grows, you may outgrow that particular design, or those particular products, or even that particular vendor.  Security architecture should be able to support the business as it grows.  You should be able to expand the business, and expand your infrastructure, without violating the security architecture.

Similarly, the security architecture should be able to accommodate new business models or business plans.  If you have a small business and you are doing business as a storefront, then, as your business expands, are you able to accommodate electronic commerce or online commerce and online business?  Are you able to accommodate that within the structure of what you have been calling your security architecture?  If not, then what you have is not a security architecture, but simply a design.

So it is with the Christian life.  Our Christian architecture should be able to accommodate our concept of God growing larger.  After all, there is that wonderful book title "Your God Is Too Small."  Our God, any idea that we have about God, no matter how large, is not large enough to accommodate the reality of God.  God is just simply bigger than we think, and bigger than we could *ever* think.  If our idea of God is not able to grow and expand as we experience more of God then our Christian architecture is too small.  It cannot accommodate all of God.  As our understanding of God expands, we are going to have to change our idea of who God is, and possibly abandon everything that we have thought and considered and planned up to that point.

And just like security architecture, in terms of Christian architecture, less is more.  In order to have a Christian architecture that is able to accommodate expanding ideas about God, we have to have less specific detail and more openness.

Karl Barth's work is wonderful and has contributed greatly to theological understanding.  John Calvin's "Institutes of the Christian Religion" is a marvelous work and has provided comfort and assurance to many Christians and theologians over hundreds of years now.  (When it was first published in French, beyond the original Latin, it immediately became the world's first best seller in a popular language.)  But in terms of utility and accessibility to the everyday Christian, I assume that many, many more people have read C. S. Lewis's less than two hundred pages that are published as "Mere Christianity."  The very title, "Mere Christianity," indicates that Lewis is considering the simplest and most basic aspects of Christianity.  Lewis is not interested in defining the differences and distinctives.  He simply wants to define what he wants to define what all Christians can agree to.  Therefore, his work is more basic and more applicable to more people.  Just about anyone from any denomination can agree to it and learn from it.

And it can stand the test of time as well.  A "mere" Christianity will be able to address the challenges of the Internet, where everyone in the world is now your neighbor.  A mere Christianity would be able to assess, evaluate, and direct the lives of Christians who are influencers on social media.  John Calvin, as smart as he was, might have had a bit of difficulty with that.

Architecture security architecture includes items such as your hardware and your software.  Christian architecture includes things like your beliefs, your philosophy, your perspective and worldview in seeing how reality actually works when there is a God behind it.  It includes other aspects as well.

The infrastructure of your life includes your resources, such as your money, your house, your car.  It also includes your very life itself: your health, your physical strength, your physical abilities, skills, and talents.  Are you willing to use all of these, as necessary, in the service of God?  Are you willing to still dedicate your life to the service of God if you start to lose some of these resources?  The architecture allows you to give a cohesive design to how you use all of this in terms of God's service.  The architecture gives you guidance as you are making decisions and makes sure that these decisions will be strategically consistent across time.  It's designed to be strategic, in that it has a longer life than any immediate blueprint or design or plan for your life in the short term.  This is one of the reasons that you don't want the architecture itself to be too specific because it can't become constrained by current or changing circumstances.  It's not going to be invalidated by changes in your understanding of the nature of God.  It should allow multiple implementations and plans for your future.  Depending on how situations change, if you don't have a Christian architecture then you will have trouble being able to quickly and effectively support needs that you see popping up in front of you, with the understanding that God has presented them to you as opportunities to help.

At a Christian meeting one time, one woman was giving her testimony, and said that she had accepted the Lord as her savior when she was four years old, and that her faith had not changed from that day to this.  I appreciate that we are supposed to have faith as little children.  I appreciate that faith is supposed to have an element of constancy to it.  But I couldn't help but think how sad it was, that her faith had not developed at all since she was four years old.  What can we know of God at four years old?  Yes, we can love him and trust him.  But we can go little further than that.  And as she had grown, evidently her faith had not.

It is this kind of issue that I seek to address when I say that we must minimize our Christian architecture, in order to accommodate a God who is large enough for the universe.  As we understand more and more of the world, God's creation of it, and the marvelous planning that went into preparing it for us, grow more evident the more you know.  Our humility, in the face of this magnificent planning, must also grow.  The more we know, the more we know that we do not yet know.  And our structure around our Christian faith must be such that it can withstand a sudden twist or shock.

I also recall another time, when I was quite alone, studying, for the first time, higher textual criticism of the Bible.  I remember the anger that I felt that I had been lied to all these years.  What was being presented to me in terms of higher criticism was obviously true, and yet all these years I had been presented with ideas and concept that were in direct contradiction to it, and were, therefore, wrong.  My faith had to withstand that kind of a shock and twist.  It did, with only a little residual anger involved.  But I can certainly understand those who have been presented with equally false information, provided by the church and the Christian society around them, and were suddenly awakened to the evidence that so much of what they believed had, in fact, been fairy tales.  And so many of them have, in that moment, turned away from the faith.

CS Lewis's mere Christianity is basic.  It emphasizes what God is, and what God is not.  It concentrates on the most basic and common elements of Christianity.  It lays out the dangers, to us, that are present in the world and in opposition to God.  For the most part it stays away from any controversial aspects and divisions between denominations of Christianity.  It sticks with the basics, the fundamentals, the most foundational concepts that we need to know to understand and follow God.  This is what our architecture needs to be.  It is no wonder that the Bible so often warns us not only that we must believe everything that is in it, but not to add anything to it.  Adding anything, as much as we may want to, carries with it the danger that this additional baggage may result in a loss of faith in the extra that has been added, with the added danger that faith itself may be lost.


Monday, April 27, 2026

Sermon - CoSMI - 1.0.3 - False Assumptions

Sermon - CoSMI - 1.0.3 - False Assumptions

Proverbs 30:8
Keep falsehood and lies far from me; give me neither poverty nor riches, but give me only my daily bread.

Isaiah 41:29
See, they are all false! Their deeds amount to nothing; their images are but wind and confusion.

Zechariah 10:2
The idols speak deceitfully, diviners see visions that lie; they tell dreams that are false, they give comfort in vain. Therefore the people wander like sheep oppressed for lack of a shepherd.


I must admit that I find it intriguing when people make mistakes and misunderstand situations, even if they have been given completely factual descriptions.  On occasion, I will allow these misunderstandings to persist, purely for humorous purposes.  Once upon a time I had a discussion with a young woman about using our denominational residential summer camp at Keats Island for a weekend retreat.  She was concerned about the amount of time that they would spend doing dishes.  "Oh," I said, "Hobart will take care of that."  "Hobart?" she asked.  "The dishwasher," I replied.

(For those not familiar with the equipment in commercial or industrial kitchens, I should mention that Hobart is the brand name of a line of commercial and industrial dishwashing machines.)

She misunderstood.  At this point she thought that there was a man, living at the camp facility, who did the dishes.  For the next five minutes I answered all of her questions completely truthfully.  I noted that Hobart was old, and short, and somewhat round, and of a somewhat greyish complexion.  But I never did take the extra effort to ensure that she understood that Hobart was made of stainless steel panels and piping, rather than flesh and blood.  My amusement over this whole situation was accentuated by the fact that it took place in the church kitchen, and I was stacking dishes in a different version of a Hobart dishwasher.

But sometimes we allow people to have, and to hold, false assumptions.  Especially about us.  Sometimes we even rely on them.

For example, and as a first example, generally because it's the first thing we say to anybody else, there is the standard exchange of, "how are you," expecting the answer, "fine."  Generally speaking, this is probably a lie.  We are not only allowing people to have false assumptions about us, but actively promoting false assumptions about ourselves.  Possibly we are fine.  As a matter of fact, it might be quite possible that we are more than fine.  If that is the case, we generally say so.  But if we are less than fine, very often we don't want to say so.  Very often we don't want to admit that we are less than fine.

Admittedly, we are lying to people, because they have first lied to us.  They have asked the question how are we.  And, the thing is, they don't really care.  They don't want to know how we are.  In all too many cases this is just an automatic response like saying ouch when you bump your elbow on something.  If you think that I am lying at this point, then, the next time somebody asks how are you, start telling them how you really are.  And watch to see their eyes start darting back and forth, looking for the quickest escape routes out of the room.

And, of course, on social media, we do this lying preemptively, without anybody ever lying to us in the first place.  Nobody has, in fact, asked how we are.  But we pretend that they have, and therefore start saying how great we are.  Or, and this is a more insidious and invidious way of lying, we simply tell all about the good things that have happened to us, and the interesting parts of the lives we lead, and we don't ever mention the bad things that happened to us, or the difficulties and boring parts of the lives that we lead.

Or there's another one.  This series of sermons is directed in an audience of people who are influencers on social media.  Or intending to be influencers on social media.  And there was an old book, from a number of years ago, that ask the titular title, if you were charged with being a Christian, would there be enough evidence to convict you?  Well, in your case, would there be?  You are talking to an audience of 50,000, or 500,000 or 50 million.  Whatever the size of the audience, you are talking.  You are talking about your day, your ideas, your opinions: let's face it, you were talking about yourself.  And when talking about yourself, how often, without the question being specifically asked, would people know that you are in fact a Christian?

Let's dial it back a notch.  I was married at one point.  I am now a widower.  But people don't have to talk to me very long before they know that my wife's name was Gloria, and that she was a kind, and loving, and organized, and immensely curious person, who had some interesting ideas about how much you should take every opportunity to see the world as babies and infants see it.  They may learn these things about Gloria before they ever learn that she is dead.  That's because Gloria was immensely important in my life, and has changed me, as compared to what I was before I married her, to what I am today.

Is God important in your life?  Has God made changes in you?  Would people find that out, just simply by talking to you, or by listening to you talk on your social media channel?

Or, let's take it in another direction.  What if you are presenting to your followers that you are a Christian, but your faith is a little, shall we say, fluid?  Do you really believe?  Or are you relying on the fact that there is a large Christian market, and that being seen as a Christian allows you to penetrate that market.  Is your belief in God rather vague?  Should you really be presenting yourself as a Christian, when you aren't really sure what you believe?

In trying to find Biblical or scriptural passages to support this sermon, I found a number of things that seem to relate oddly specifically to social media.  For example, there is Isaiah 41:29: "See, they are all false! Their deeds amount to nothing; their images are but wind and confusion."  Can you think of a more appropriate description of social media?  So it would seem that trying to ensure that you are as honest as possible when posting something on social media would be a very good thing, if only to cut through the masses of misinformation and even disinformation that is spread out there deliberately.

And then there was Proverbs 30:8, "Keep falsehood and lies far from me; give me neither poverty nor riches, but give me only my daily bread."  I found this amazingly appropriate.  So many of you, with aspirations as influencers, are trying to make your daily bread, your livelihood and living, as influencers from your social media account.  And pay attention to that "neither poverty nor riches" aspect.  So many people think that being an influencer is the road to riches, but if you are making your daily bread, if you have enough to get by on and enough for your needs, why is it that you need riches?

And the final passage, from Zechariah.  If you have aspirations to be an influencer, you have aspirations to be a shepherd.  You are attempting to lead people.  You are attempting to influence them and guide them.  Make sure that you do it truthfully.  Make sure that you are doing it honestly and well.  If a blind guide leads blind followers, the Bible also tells us that they will both fall into a ditch.


This (CoSMI) is a series of sermons and devotionals directed at those who work as influencers in the field of social media.

Sermon - CoSMI - 1.0.1 - Authenticity

Sermon - CoSMI - 1.1.3 - Reputation


Sunday, April 26, 2026

I'm glad my pain, grief, and depression can bring such joy into the lives of others

He always seems so vastly amused by my grief and depression.  The fact that I am suffering seems a constant source of hilarity to him.

In reality, of course, it's probably nervous laughter.  Nervous laughter is very common.  We human beings are not good at identifying our specific emotions.  If we feel a strong emotion, it's likely to get diverted to some other emotion.  So if you are afraid, or angry, or have some other strong emotion, and expressing that emotion is inappropriate in the situation, you tend to laugh.

And I certainly inspire terror in all kinds of people in the churches.  I mean, he's a minister, you might think that he might be able to handle it a bit more than most.  But apparently not.  So he laughs at my grief and pain.

All the ministers know that I am grieving and depressed, of course.  They even joke about it.  Well, not exactly joke about my pain, but joke about the fact that you never asked Rob how he is.  You know what the answer is going to be.  Terrible.

I know that I terrify people in the churches.  My very existence terrifies people.  They don't want to think about the possibility of having a life like mine, and every time they see me, they have to.  They have to consider that, without some hidden sin, without any particular lack of faith, something bad could happen to them, and they could lose something very significant to their life, and their life could be much worse than it is now, regardless of how it is now.

So the people in the churches don't talk to me, and often actively avoid me, and learn, very quickly, never to ask Rob how he is doing or feeling.

But not all that many actually laugh at my pain.

Saturday, April 25, 2026

Searching questions about genAI

I'm writing a sermon, as a part of a series of sermons and devotionals for influencers on social media.  The idea is what I remember as part of a song, possibly from the 1970s.  I couldn't remember the name of the song, or the singer, or the group.

Google failed me at finding the song.  But a number of colleagues disagree with my assessment of genAI as being a solution in search of a problem.  They claim that it is best seen as a kind of search engine.  So I gave it a try.  And they were right!

Sort of.  ChatGPT failed.  Claude failed.  Meta AI failed, although it unhelpfully suggested a bunch of other unrelated songs.

But DeepSeek succeeded.  Which I, of course, find rather heavily ironic.  The Godless Communists are the ones to help me find a gospel song, and the material for my sermon.  (Qwen, interestingly, didn't find the song I wanted, but *did* find a not completely dissimilar *gospel* song.)

The song is, apparently, a standard in bluegrass gospel music and may have been performed by various artists.  The version I've found, and the one I recall, is "If I Forget the Ones," by Dogwood.  I've now found a couple of hits on YouTube.

Sermon - TLIS - 8.0.3 - Protocols

Sermon - TLIS - 8.0.3 - Protocols

Deuteronomy 5:29
Oh, that their hearts would be inclined to fear me and keep all my commands always, so that it might go well with them and their children forever!

James 1:22
Do not merely listen to the word, and so deceive yourselves. Do what it says.


I watch too many Hallmark movies.  I particularly like the ones that involve royalty: princes and princesses, generally marrying commoners, generally Americans who are completely ignorant of royal protocol.  Usually, in these particular movies, the commoner either gets into conflict with, or runs roughshod over, the royal protocols.

There are, of course, protocols involving royalty, and celebrities, and diplomacy, and a number of other human activities.  As a matter of fact, I know an awful lot about protocols, because we deal with protocols in technology.  And it may surprise you to learn that we have protocols and technology for pretty much exactly the reason that the nobility and royalty have protocols.

Protocols are there to manage and mitigate expectations.  Protocols are there to ensure that communication takes place.  Protocols are particularly there to ensure that communication takes place, even between two parties who have not communicated previously.  This happens whether you are a commoner meeting royalty, or two diplomats representing different countries, meeting together, when they haven't had any dealings previously, but are now in conflict, or two devices on the Internet trying to send messages back and forth about their status.  Protocols establish a minimum standard for the most basic level of communication, regardless of what that communication is about.

Aside from knowing what protocols are, and do, and the importance of protocols, I have to admit that I have very little use for them.  I am a systems analyst.  I deal with problems.  In particular, I deal with problems that have occurred and are not subject to, or do not respond to, the usual standards of troubleshooting.  As Einstein's definition of madness indicates, if you keep on doing the same thing, over and over again, and it keeps on failing, then why try the same thing and expect it to work on the twenty-seventh time around?  I am the person that people call in when what they know, and what they have tried, and their normal protocols, have failed.  Therefore, I only deal in situations where the protocols *don't* work.

This is why, when my father explained a problem that had taxed the church's board for four months without any kind of a resolution, I was able to provide the solution before he had it even finished explaining the problem.  This is why, when a friend of Gloria's commented that I usually think outside the box, Gloria replied that she didn't think that I realized that there *was* a box.  I look at things differently.  I have to look at things differently, because all the people who looked at the things in the same way have been unable to solve the problem.  The normal protocols didn't work.  And, realistically, for so many of the jobs that I have had in my life, I have had to be the person who solved problems when the normal protocols didn't work.  Therefore protocols simply do not work for me.  I have no use for them.

Protocol often goes by another name: tradition.  That's the way we have always done it.  It is a perfectly valid reason to do it again that way.  Why reinvent the wheel? If it has worked before, it will, most likely, work again.  The problem arises when the way we have done it before no longer works.  If the way we have done it before doesn't work anymore, then doing it the same way is still not going to work.  You therefore have to break the protocol, and break the tradition, and do something new.  And you need somebody like me, who is not bound by the protocol and tradition, to find a new way to do things.  Or, if the way that we have done it before still works, but it doesn't address a new problem that we desperately need to have addressed, then the way we have always done it before is not going to solve the new problem.  Once again, you need something new to solve the new problem.

I have said that protocols are there to facilitate communication and processes.  At first glance, this may seem to be counterintuitive.  Like security itself https://fibrecookery.blogspot.com/2026/04/sermon-tlis-011-security-is-hindrance.html , protocols are often seen as an impediment to communication.  After all, how do you communicate, if you have to do it in absolutely the right way and with absolutely the right forms and words?  However, there are definite reasons for it.

As I have pointed out, similarly to the situation with security, the use of protocols is often regarded as an impediment to communication, rather than a means for communication to exist.  Sometimes protocols actually are a there for the purpose of impeding communication.  Not necessarily preventing it, but sometimes delaying it.  Sometimes protocols exist so that conversation can be slowed down.  This takes place in communications technology, as well.  Sometimes it is necessary to slow down communication so that errors aren't made, and aren't propagated.  Sometimes you need to slow down communications so that you make sure that what is said is said properly, and communicated without error.  Sometimes protocols are there to make sure that information is transmitted in the proper format.  Sometimes protocols are there to make sure that the proper things are said, and that certain unhelpful things are *not* said.  All of this can be seen as impeding communications, in terms of delaying, or making the communications more difficult.  But, in actuality, the intent is to make sure that people think about their communication.  To make sure that what is said is helpful and appropriate and moves the process forward rather than creating a problem.

Protocol for royalty is there for a reason.  People want to be near other people who are powerful.  However, if this access is not restricted, then the powerful person gets mobbed, and cannot use his or her power effectively.  This is the same whether the powerful person is a monarch, or a CEO, or a celebrity.  (When movies first started being made in British Columbia in a big way, the American actors were often delighted at the fact that they could walk down the street and go into a restaurant like a normal person, and not be mobbed.  In that case the reticence wasn't reticence as much as an outgrowth of the rather extreme politeness that is part of the Canadian mindset.) 

Establishing a protocol helps to manage expectations.  People don't expect to be able to get near the monarch, since protocol says that you shouldn't.  People don't expect to be able to talk to a monarch, since the protocol says that you don't talk to them monarch unless the monarch talks to you first.  Similar protocols apply to CEOs and celebrities.  They manage the expectations of the general public.  This allows those people to conduct their affairs in relative peace.

Similarly, in diplomacy, protocols govern the communication.  If two nations are at war, it doesn't do to grab the two leaders of the two nations and stick them in a room.  First of all there are negotiations with third parties.  The third parties contact representatives of the two belligerent nations.  Protocols are established or modified in order to determine what topics are allowed to be discussed, and what topics are *not* allowed to be discussed.  This is why diplomatic negotiations take so long, and seem to be so ineffective.  However, keeping the two belligerents apart prevents them from directly addressing insults and vituperation against each other.  Therefore, when they finally meet, an awful lot has already been agreed to, and the chance of inadvertent insults upsetting the entire process has been minimized.

As I say, in the technical world we use protocols a lot. Protocols are an agreed upon form.  I have addressed the issue of establishing communication with synchronization and acknowledgment packets.

We have protocols in the Christian life as well.  This may come as a surprise to those of you who think that their particular church is fairly non-liturgical.  But liturgy is simply what you do on a traditional basis.  Some churches have formalized their liturgy, and have books of common prayers, and lists of scriptural passages that they read, regularly, at various set times of the year.  Other churches do not have quite such a rigid structure written down, but still have a very rigid structure anyways.

For example, pretty much every church is going to have some congregational singing, announcements, scripture reading, a sermon, prayer, and a benediction.  Oh now these aspects of the service may come at different times.  Some may have the announcements first.  Some may have the announcements in the middle.  Some may have the announcements at the end of the service, or even after the benediction so that it almost seems like the announcements are not part of the service.  However, in reality, they are.  When they give the benediction, nobody leaves, and everybody stays to hear the announcements.  The announcements are part of the liturgy.

Oh, and then there is also coffee time.  Coffee time is part of the liturgy.  Sometimes it is before the service.  Sometimes it is after the service.  I attend a couple of churches where they have coffee time actually within the service itself, generally just before the sermon.  (I suppose serving people caffeine just before you preach a sermon is a good way to ensure that a larger number of them will actually stay awake during the sermon.)  But very few churches do not have any coffee time at all.  Coffee time is part of the liturgy.

We even have a liturgy for campfire devotions at Christian summer camp.  You want to burn off any excess energy the kids have left over, but then get them quietly off to sleep at night.  So you have three fast songs, two slow songs, and a devotional.

And liturgy is tradition, and tradition is protocol.  There are protocols in our Christian churches.

There are also some protocols in our approaches to God.  And there are good reasons for these protocols, as there very often are for most protocols.  We are to love God.  That is a given.  But we are also to fear God.  Fear not as in anxiety or terror, but fear as in respect not simply for the power of God, but for His righteousness and holiness.  We must love God, yes.  But we must also recognize the fact that we are not worthy of God, or God's love.  God is consistent, and grants us his love constantly.  This very constancy may inure us to the fact that the love is constant, and we may begin to feel that we deserve this love.  Fearing God, and humbly considering our own lack of holiness, is an important aspect of the Christian life.


Friday, April 24, 2026

OSF - 2.22 - scams - recruitment

OSF - 2.22 - scams - recruitment

Recruitment scams typically come either via email or through social media sites.  Social media sites, particularly those directed at either career planning, professional development, or building your network of connections, can provide the scammers with a fertile recruiting ground.  Typically those on these sites are eager to divulge their skills and interests, and this allows scammers the ability to target the supposed job specifically to the victim they want to approach.

Recruitment scams are aimed at the unemployed or underemployed and are taking advantage of the vulnerability of this population to any offer of employment.  As with any scam, there are going to be some variations in the approaches here.  For example, an advanced be fraud may initially be making an appeal strictly to greed.  However, over time, a number of scammers moved away from the greed motivation, and augmented it with appeals to conscience or the desire to help.  Those particular forms of advanced fee scam stress either the pitiable nature of the illness that the scammer is supposedly suffering from, towards the end of their life, or the appeal to assist in creating a charity, and improve the lives of others.

Recruitment scams come in a wide variety of forms.  Sometimes it is a specific offer of a particular job.  In this case, the scam may be aimed at the potential employee.  In some cases, the scam is simply a phishing scam, where the scammers are trying to pick up personal information, and possibly banking or credit card information, from the supposed potential employee.  In other cases, the scammers are trying to sell, or upsell, the potential employee on training courses, certification facilities, resume services, or other services or products that may be presented as enhancing the potential employee's ability to find work.

Specific offers of specific jobs are sometimes targeted at existing employees of an existing company.  In this case, the scam is also a phishing scam, but is primarily aimed at obtaining information about the company at which the individual is currently employed.  Obtaining information about wages, terms of service, job satisfaction, and so forth can be used in industrial information gathering.

Sometimes the recruitment scam is more generic.  A fairly vague offer of work may open the door to different kinds of scams.  Sometimes the jobs are actual jobs, but very often these result in offers of gig economy type jobs.  The gig economy jobs, very often based on completed submitted work, may initially seem attractive, but once specific requirements are factored in, the hourly wage may be ridiculously low.

In addition, with regard to gig economy work, potential candidates should always realize that the payment may be contingent upon acceptable work, with the employer being the sole arbiter of what work is acceptable.  In this case, workers may find that they are doing an awful lot of work which is being supposedly rejected by the employer, but is actually being used for postings on social media and other types of situations.  This type of work is probably being reduced by the use of artificial intelligence to create slop for social media sites, and so the likelihood of encountering this particular type of recruitment scam is somewhat decreasing.

As noted, recruitment scams may be simply phishing scam approaches.  Sometimes it is not bank account or financial information that the scammers are concerned about, as much as obtaining information about the candidate.  People will be less cautious about providing details in a job interview situation, or what seems to be a job interview situation.  Normal job interviews do not, of course, delve into deeply personal matters: in many jurisdictions, this is forbidden by law.  However, very few people faced with a job interview situation will be too terribly concerned about the niceties involved with whether or not the interviewer is allowed to ask you that particular question, particularly if the interview seems to be a friendly one and the questions are being submitted in what seems to be an informal chit-chat part of the interview.  This obtaining of personal information can be passed along to scammers of other types, who will then have the ability to target this particular individual for more specific types of scams as their situation indicates a vulnerability to a specific approach.  

Sometimes it is different difficult to make a distinction between a recruitment scam, and the simple fact of an over eager recruiter, who has a job that isn't very good, and simply wants to use a shotgun approach to get absolutely anyone to take the work.  On the basis that I am an expert in a few different technical fields, and I'm a published author, I am subject to frequent approaches from supposed "publishers" who are, in fact, simply looking for writers-for-hire to turn out the latest hack job on the latest technical topic of interest.

An obvious protection against the recruitment scams is simply to contact the company for which you are supposed to be working, and find out whether they are, in fact, hiring that position.  However, sometimes the scammers try to circumvent this in a variety of ways.  For example, sometimes the job is a supposed contract job which, when the particular contract is completed, may lead to further appointment with the parent company.  Sometimes the project to be undertaken is a secret project, and is supposedly not widely known even among the employees of the company that is purportedly to hire you.  There are a variety of approaches that can be taken in order to prevent you from simply contacting the company, and particularly the human resources department, to find out whether or not anybody knows who you are, or is it aware of the position you are being offered.


Online scams, frauds, and other attacks (OSF series postings)

Thursday, April 23, 2026

Sermon - TLIS - 3.7.2 - Reference Monitor

Sermon - TLIS - 3.7.2 - Reference Monitor

Psalm 94:15
Judgment will again be founded on righteousness, and all the upright in heart will follow it.

Psalm 119:66
Teach me knowledge and good judgment, for I trust your commands.

Matthew 12:36
But I tell you that everyone will have to give account on the day of judgment for every empty word they have spoken.


When I teach the information security seminars, I have to make sure, when we come the part of security architecture that is entitled reference monitor, that the students and candidates realize that this is a concept that we are talking about.  You will never be able to go into a computer store and buy a reference monitor.  There is nothing in an operating system that you can purchase that will be labeled as the reference monitor.  There is no piece of equipment that is a reference monitor.

The idea behind the reference monitor concept is that, somewhere buried in the internals of the operating system, there is something, somewhere, that carries out this one particular function.  That is, anytime a subject wants to have access to an object, that request has to go through the reference monitor.  It doesn't matter what the reference monitor is.  It doesn't even matter if it is implemented in hardware or in software.  It doesn't matter what the rules are that govern the reference monitor.  If every single request, by *any* subject in the system, to any object in the system, has to go through one particular location that will grant or disallow access, that is a reference monitor.  If there is even a single request that can go directly from a subject to an object without going through this central checkpoint, then the system does not have a reference monitor.

Microsoft Windows, for example, does not have a reference monitor.  Any window in the Windows operating system can send a message to any other window in the system.  And "message" can be a command for the window to do something, to perform some kind of action.  This was used, to rather disastrous effect, when somebody created a virus called Shatter.  Shatter was able to operate because Windows does not have a reference monitor.

This is one of the reasons that we say that security has to be designed in from the beginning.  It is also one of the reasons that I hate, loathe, and despise Facebook.  (One of the other reasons that I hate Facebook is that you are the product that Facebook sells.  Facebook's whole business model is built on taking information that you give to Facebook, and then selling it to, well, actually, absolutely anybody who wishes to buy it.)  When Facebook was first implemented, we in the security field noted that it had all kinds of security weaknesses in it.  When we had said this often enough, Facebook decided that they would implement some kind of security controls.  And so they did.  And then they built more functions on top of all of that mess, and we complained that the functions themselves were not secure, and so Facebook slapped a bunch more security controls on top of *them*.  Now Facebook has such a huge number of security controls, in such a huge number of places, all of which will apply to certain aspects of Facebook, but not to others, that even those of us who are experts in security cannot figure out how to ensure that information on Facebook that you want to be secure is, in fact, secure.  (Always remembering, as I have pointed out, that anything that you tell Facebook, Facebook feels justified in selling to anyone else.)

(Do I have to point out, overly strongly, that Facebook does not have a reference monitor either?)

Do you have a reference monitor in your Christian Life? 

Does every thought, every action, everything you say, have to pass through a Christian reference monitor?  Does everything that you say and do get measured against Christian standards?  God's standards?

For all too many people, the answer is no.  I have, in another sermon, noted the fact that an entire men's retreat, men who were considered to be leadership within their churches and pillars of their Christian communities, greatly disliked material on work and business life that was presented to them at a men's retreat.  This was because it challenged their assumptions that, as long as they went to church on Sunday, they could do what they liked the rest of the week.  God didn't really care about business, and didn't really care about how they made their money.  But that isn't true, and the speaker, who had put together this wonderful, Biblically sound, thoroughly scripturally grounded material on how to do work, and how to conduct your business, as a Christian, did a terrific job, but was roundly rejected by most of the men at the retreat.  They didn't like the challenge to the prosperity gospel, or the challenge to the acceptance of capitalism as being completely consistent with Christianity, or the idea that how you made your money still had to be consistent with what God demanded of you.

And many people are like that.  Sometimes they fence off Sunday.  Sunday is for God, and Sunday is dedicated to God.  And they go to church in the morning, and they don't do anything particularly bad in the afternoon, either.  But, come Monday morning, it's a different story when they go off to work.

Or some men just build a fence around work.  Sunday is a holy day, and time with the family is holy as well.  And God gets to direct how that time is spent, and how they love their wives, and how they bring up their children.  But that doesn't have anything to do with what happens when they get to work.  Work is beyond the fence.  So the reference monitor that acts the rest of the week, suddenly inoperable from nine to five, Monday to Friday.

Sometimes the separation isn't necessarily time-based.  Maybe it's idea based.  There are certain ideas, and concepts, and activities, and conversations, that God is in charge of.  And God's requirements, and God's ideas, are to be a priority at those times.  But then there is there are the other times.  There's times with the guys, when it's time for locker room talk.  And that talk is a little bit raunchier, and wives and children are not as respected, and are even targets are ridicule and disappointment.

And remember, if you think you have a reference monitor, but whatever you think of as a reference monitor doesn't mediate access control for everything, then, no, you don't have a reference monitor.  (Gee, I seem to have heard that idea before.  Something along the lines that, if you sin at all, even once, you are a sinner.)

There is another way to use the idea of the reference monitor in measuring your Christian life.  Whatever doesn't go through the reference monitor, that is an indication of a false idol in your life.  If business is more important to you thank God, or even if business decisions don't get past through the Christian reference monitor, then business is an idol in your life.  If your family, and you're dealing with your family, don't pass through the Christian reference monitor, then your family is an idol in your life.  If something as small, and seemingly innocent, as going fishing doesn't pass through the Christian reference monitor, then fishing is an idol in your life.  If anything, education, choice of career, choice of girlfriend or wife, choice of romantic partner and or spouse, choice of the family dog; any of these things that don't pass through the Christian reference monitor should be examined to see if they are false idols in your life.

Also check the information that may be coming to you via a concept from another sermon covert channel, the covert channel.  See if this information is passing through your Christian reference monitor.  If it isn't, there's a good chance the world is making yet another attack against you, trying to feed you information that is contrary or detrimental to your Christian life.

And taking all of this together, if something is bypassing your Christian reference monitor, and coming possibly via a covert channel, and is possibly an idol in your life, that idol has set up in your life its own reference monitor.  You may be making decisions based on this false idol before even passing anything along to be judged by God's standards.