Skip to main content

Gatekeepers at the Perimeter and the Danger of Convenience

In this week’s Torah portion, Parashat Shoftim, Moses outlines a foundational rule for creating a healthy society, “Judges and officers you shall appoint for yourself in all your gates” (Deuteronomy 16:18). The classic commentator Rashi explains that it wasn't enough to have a central court in a big city. Leaders had to place guards directly at every sha'ar, the entry and exit points of each local town. Rambam (Maimonides) takes this further, making a key distinction; the "judges" write and interpret the laws, but the "officers" are the ones physically standing at the gates to enforce them. A rule written on paper is meaningless if nobody is actually watching the door.

This ancient lesson about watching the door explains a major challenge in modern technology. Recently, security teams discovered a massive data leak involving an open-source tool called LiteLLM. In simple terms, LiteLLM acts as a digital "receptionist" or middleman for companies using artificial intelligence. Instead of connecting every employee's computer directly to different AI models, companies route all their requests through this single digital door to keep things organized. However, because hackers managed to compromise this middleman, hundreds of thousands of private passwords, company credentials, and secret access keys were exposed across thousands of businesses.

By relying on a single digital middleman for convenience without constantly double checking who was passing through it, these companies left their gates wide open. In Jewish law, the Talmud notes, governance fails the moment someone bypasses the gatekeeper. Even high-ranking officials were subject to checks at the entrance of the city. In the digital world, assuming that a tool or service is safe just because it's convenient is the modern equivalent of firing the guards at the city wall.

The enduring takeaway from Parashat Shoftim is that good intentions and high-level policies mean very little without active, everyday vigilance. Whether guarding the entrance of an ancient town or protecting sensitive information in a digital network, real security requires us to keep watch at every boundary, and never trade safety for ease.

Good Shabbos!

Popular posts from this blog

Trust, Hidden Rules, and Protecting What Matters

In this week’s Torah portion, Chukat-Balak (Numbers 19–25), we encounter one of the Torah’s most mysterious laws: the red heifer. G-d commands the Israelites to use the ashes of a perfect red cow, mixed with water, to purify people who have come into contact with death. Strangely, the very people preparing this purifying mixture become impure themselves. The Sages call this a chok, a divine decree that goes beyond simple human logic. Rashi explains that nations of the world and even our own impulses mock it because it doesn’t fit neat categories of clean and unclean. Yet it works within G-d’s system. The portion also shows human efforts to control events, complaints in the desert, or King Balak hiring the prophet Balaam to curse Israel, only for G-d to turn those plans upside down into blessings. The message is clear: we must act responsibly while accepting that some things are ultimately in G-d’s hands. This tension feels very relevant to recent tech headlines. Just weeks ago, reports...
Read more

Vows, Oversight, and the Blueprint of GRC

In the opening of this week’s Torah portion, Parashat Matot, the Torah introduces the intricate laws of Nedarim, vows and oaths. The text explicitly warns, “If a man makes a vow to the Lord... he shall not profane his word; according to all that proceeds from his mouth, he shall do” (Numbers 30:3). However, the Torah immediately pivots to a highly structured framework of oversight. Classical commentaries, including the Rambam (Maimonides), explain that this mechanism exists because individual verbal commitments cannot be left entirely unchecked. Unregulated vows can create severe personal and communal vulnerabilities. The Torah balances individual accountability with a system of absolute governance, risk mitigation, and compliance.   This dual structure of personal commitment and centralized oversight is the exact operational definition of Governance, Risk, and Compliance (GRC) in corporate technology. In any large enterprise, individual teams are constantly making "digital vows....
Read more

The Threat of Blurring the Lines

In this week’s Torah portion, Parashat Pinchas, the Jewish people are getting ready to finally enter the Land of Israel. To prepare for this massive transition, the Torah establishes strict, permanent borders for each of the twelve tribes. We learn this through a famous legal case brought by the daughters of Tzelofchad, which results in a divine law: land cannot be passed from one tribe to another (Numbers 36:7). The great commentator Ramban (Nachmanides) explains that these boundaries were not arbitrary. They were essential for keeping order and ensuring that each tribe maintained its unique identity and territory without causing chaos or mixing things up. This ancient focus on keeping territories separated mirrors a major cybersecurity issue discovered by tech researchers this past week. Security teams found that a new generation of "AI web browsers," smart tools designed to browse the web, open tabs, and perform tasks for you, are accidentally breaking a foundational secur...
Read more