Security Researcher Comments on HIPAA Security Rule
A group of us have urged HHS to require better handling of security reports
Shostack + Friends Blog
Posts in category "government"
Party over country
One of the things we expect of a politician in a civilized country is that they put their country first.
On Democracy
Democracy has one function, and it’s under threat.
The Unanimous Declaration of the Thirteen United States of America
When was the last time you looked over what our country was founded upon?
The National CyberSecurity Strategy: Liability is Coming
Major Cyber Incidents Investigations
I'm thrilled this how to guide for standing up new investigations is available.
Congratulations to the CSRB!
I'm thrilled the first CSRB report is available.
FDA Draft Premarket Guidance
The FDA has issued draft guidance for pre-market security
Medical Device Threat Modeling Webinar
An important webinar by MDIC about the medical device threat modeling playbook is now available!
Threat Model Thursday: 5G Infrastructure
The US Government's lead cybersecurity agencies have released an interesting report, and I wanted to use this for a Threat Model Thursday, where we take a respectful look at threat modeling work products to see what we can learn.
IoT Security & Threat Modeling
Expanding on the UK Government's ‘The Uk Code of Practice for Consumer IoT Security’ and how it aligns with Threat Modeling.
The Updates Must Go Through
The timing of updates is not coincidental.
On Monopolies
In a simpler age, Matt Stoller famously lost his job for critiquing Google.
How Are Computers Compromised (2020 Edition)
Understanding the way intrusions really happen is a long-standing interest of mine.
Cryptographic Excitement
A couple big stories in the realm of cryptography that got me excited.
Encryption & Privacy Policy and Technology
A few tidbits in recent news.
Medical Device Security Standards
Recently, I've seen four cybersecurity approaches for medical devices, and we can learn by juxtaposing them.
NIST on SDLs
Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) from NIST is open for comment.
The Unanimous Declaration of the Thirteen United States of America
When was the last time you looked over what our country was founded upon?
The Unanimous Declaration of the 13 United States
When was the last time you looked over what our country was founded upon?
CVE Funding and Process
[no description provided]
Half the US population will live in 8 states
Our country's population is shifting, which could have a dramatic effect on politics.
Keeping the Internet Secure
[no description provided]
Threat Model Thursday: Architectural Review and Threat Modeling
[no description provided]
Fire and building codes
[no description provided]