Shostack + Friends Blog

Posts in category "disclosure"

An AI image of two modern 737 airplanes nearly missing each other, styled as a 1950s pulp paperback cover

Airline Close Calls

Thoughts on an article on near misses (22 Aug 2023)

Threat Research: More Like This

I want to call out some impressive aspects of a report by Proofpoint. (14 Jun 2020)

slow exposure of busy traffic intersection at night

Cryptographic Excitement

A couple big stories in the realm of cryptography that got me excited. (16 Jan 2020)

‘No Need’ to tell the public (?!?)

Secrecy isn't the best policy when it comes to public health. (08 Apr 2019)

Cover of House Oversight Committee report

House Oversight Committee on Equifax

The House Oversight Committee has released a scathing report on Equifax... (11 Dec 2018)

Doing Science with Near Misses

Near misses are an important source of information for avoiding accidents, and it's a shame we don't use them in cybersecurity. (06 Feb 2018)

Vulnerabilities Equities Process and Threat Modeling

[no description provided] (20 Nov 2017)

It's Not The Crime, It's The Coverup or the Chaos

[no description provided] (26 Sep 2017)

Voter Records, SSN and Commercial Authentication

[no description provided] (05 Jul 2017)

Our Favorite Content

General threat modeling posts

The Security Principles of Saltzer and Schroeder, illustrated with Star Wars

Subscribe (RSS/Mail)

RSS/ATOM: The ATOM feed is here. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking here.

Email: If you’d like a lower volume set of updates on what Adam is doing, Adam’s New Thing gets only a few messages a year, guaranteed. We include a subset of posts in each.