Skip to main content

Shostack + Friends Blog

Posts in category "breach laws"

The Uber CSO indictment

Thoughts on Mark Rasch's essay, Conceal and Fail to Report - The Uber CSO Indictment (28 Aug 2020)

$35M for Covering up A Breach

[no description provided] (24 Apr 2018)

Our Favorite Content

General threat modeling posts

The Security Principles of Saltzer and Schroeder, illustrated with Star Wars

Other Star Wars blog posts

Modeling attackers and their motives

Doing science with near misses

Posts about Adam’s “Threats” book

Posts about Adam’s “Threat Modeling” book

Posts about “The New School of Information Security” book

About this blog

Popular Blog Topics

Threat Model Thursday,
exploring specific published threat models

Threat Modeling (general topic)

Application Security

Software Engineering

Privacy + Personal Security

Research + Reports

Podcasts, Videos + Webinars

Subscribe (RSS/Mail)

RSS/ATOM: The ATOM feed is here. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking here.

Email: If you’d like a lower volume set of updates on what Adam is doing, Adam’s New Thing gets only a few messages a year, guaranteed. We include a subset of posts in each.

Recent posts

ThreatModCon San Francisco

03 Oct 2024

Threatmodcon was amazing

Our back to school sale is ending

30 Sep 2024

Our biggest sale ever ends today!

Appsec Roundup - September 2024

25 Sep 2024

If you say threat modeling three times, it appears!

Secure Boot and Liability

17 Sep 2024

Secure boot presents questions that should inform the liability conversation

Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.