Shostack + Friends Blog

What can we learn from Gunnar Peterson’s Threat Model for Thanksgiving? (23 Nov 2023)

Principles are lovely, but do they lead us to actionable results? (27 Oct 2023)

Art imitating life in ways you didn’t think possible (30 Jun 2023)

Books that I read in the second quater that are worth your time include two memoirs, a great book on the security of ML, and more! (28 Jun 2023)

Reflecting on the framing of the Threats book (10 Apr 2023)

Searching my feelings as the audiobook of Threats is released. (17 Mar 2023)

Adam spoke with Robert Vamosi of The Hacker Mind podcast (27 Jan 2023)

Adam joined Paul Roberts on the Conversing Labs podcast (23 Jan 2023)

The threats book is in the supply chain, inconsistently. (22 Jan 2023)

The live launch party for Threats! (19 Jan 2023)

The serious side of the book (17 Jan 2023)

Like the Force, each threat has a light side, and a dark side. (16 Jan 2023)

Books that I read in the fourth quater that are worth your time include several about safety with lessons for cybersecurity (19 Dec 2022)

Threats is almost in bookstores (08 Dec 2022)

The books I read in the third quarter of 2022 that are worth your time. (23 Oct 2022)

So excited to share the cover with you (19 Aug 2022)

A beautiful comparison site that allows you to see how the Webb telescope compares to Hubble. (18 Jul 2022)

Adam joined Josh and Kurt on the Open Source Security podcast (09 May 2022)

Exciting news from Adam Shostack on Star Wars Day 2022 (04 May 2022)

These are the books that I read in the second quarter, 2022 that are worth your time. (02 May 2022)

A new book on cyberpeace! (25 Apr 2022)

These are the books that I read in the second half of 2021 that I think are worth your time. (28 Jan 2022)

My opening keynote from Appsec Global 2021 (10 Jan 2022)

Andrew Stewart has an excellent new book, A Vulnerable System. (13 Sep 2021)

Adam Shostack's review of the book Practical Cybersecurity Architecture (26 May 2021)

Rupin Gupta runs Digital Guru books. He's one of the nicest people you'll ever meet, a real joy to work with, and he works hard to put books on shelves so that you can discover them. With the conference business changing, Digital Guru needs some help. (15 Jan 2021)

These are the books that I read in Q2 2020 that I think are worth your time. (19 Aug 2020)

I want to talk about two books: Bounce, by Matthew Syed and Range, by David Epstein. I want to talk about them together in part because Range is explicitly framed as a response to Bounce. (08 May 2020)

These are the books I read in the first quarter (and forgot to mention last quarter) that I think are worth your time. (14 Apr 2020)

Just what the title says... (01 Dec 2019)

Some books worth reading, particularly related to space and history (15 Jul 2019)

A resource for those developing games. (10 Apr 2019)

Just what the title says... (05 Apr 2019)

Almost 5 years after release, I'm looking for a few more Amazon reviews. (14 Feb 2019)

An unexpected book review. (04 Feb 2019)

The Threat Modeling Book has been featured on a list of resources by Digital Guardian. (12 Dec 2018)

J.E. Gordon’s Structures, or Why Things Don’t Fall Down is a fascinating and accessible book. Why don’t things fall down? It turns out this is a simple question with some very deep answers. (07 Dec 2018)

Some books worth reading. (26 Nov 2018)

[no description provided] (14 Sep 2018)

[no description provided} (31 Jul 2018)

[no description provided] (11 Apr 2018)

[no description provided] (25 Nov 2017)

Some of what I've read over the past quarter and want to recommend as worthy of your time. (11 Oct 2017)

[no description provided] (19 Jul 2017)

I'm always looking for interesting books to read. These are the books that I enjoyed enough to recommend in Q2. (07 Jul 2017)