The Economy
Trump’s cornerstone economic policy is bad for America and the world.
Shostack + Friends Blog
Posts in category "economics"
On policy
I wish this election were about policy
Handling Pandemic-Scale Cyber Threats (preprint)
A new paper on 'Pandemic Scale Cyber Events
Sutter on Safety
What do we need to assess if memory safe langages are 'sufficient'?
Take Control of What You Read
As 2023 draws to a close, take control of what you read.
Chuck, Acme, and Remediation Avoidance
Threat modeling really CAN save you money, just ask Chuck!
The National CyberSecurity Strategy: Liability is Coming
The Appsec Landscape in 2023
External changes will be driving appsec in 2023. It’s time to frame the decisions in front of you.
GPT-3
The OpenAI chatbot is shockingly improved — its capabilities deserve attention.
GPT-3
Text captured from GPT-3
Short reads, March 2022
Interesting articles from around the internet, March edition
Fast, Cheap + Good Whitepaper
Threat modeling doesn't need to be a slow, heavyweight activity!
On Monopolies
In a simpler age, Matt Stoller famously lost his job for critiquing Google.
Code: science and production
Phil Bull presents an interesting, generally convincing, argument in 'Why you can ignore reviews of scientific code by commercial software developers', with a couple of exceptions.
Valuing CyberSecurity Research Datasets
A paper at the Workshop on the Economics of Information Security titled “Valuing CyberSecurity Research Datasets” focuses on the value of the IMPACT data sharing platform at DHS, and how the availability of data shapes research.
Leave Those Numbers for April 1st
Over-inflated numbers won't scare me into buying your ‘solution’.
Cybersecurity is not very important
Some points to consider, from Andrew Odlyzko.
Measuring ROI for DMARC
I'm pleased to be able to share work that Shostack + Associates and the Cyentia Institute have been doing for the Global Cyber Alliance.
20 Year Software: Engineering and Updates
[no description provided]
Maintaining & Updating Software
[no description provided]
More Satellites Than You Can Shake a Stick At
[no description provided]