Airline Close Calls
Thoughts on an article on near misses
Shostack + Friends Blog
Posts in category “disclosure”
Threat Research: More Like This
I want to call out some impressive aspects of a report by Proofpoint.
Cryptographic Excitement
A couple big stories in the realm of cryptography that got me excited.
‘No Need’ to tell the public (?!?)
Secrecy isn't the best policy when it comes to public health.
House Oversight Committee on Equifax
The House Oversight Committee has released a scathing report on Equifax...
GAO Report on Equifax
I still have questions...
NTSB on Uber (Preliminary)
[no description provided]
$35M for Covering up A Breach
[no description provided]
Doing Science with Near Misses
Near misses are an important source of information for avoiding accidents, and it's a shame we don't use them in cybersecurity.
Learning from Near Misses
[no description provided]
Vulnerabilities Equities Process and Threat Modeling
[no description provided]
It's Not The Crime, It's The Coverup or the Chaos
[no description provided]
Voter Records, SSN and Commercial Authentication
[no description provided]