Why do we call them trust boundaries?
Why do we call them trust boundaries, anyway?
Shostack + Friends Blog
Posts in category "microsoft"
Sutter on Safety
What do we need to assess if memory safe langages are 'sufficient'?
Other comments on the CSRB Microsoft Report
Other people have written about the CSRB report, and I wanted to share their perspectives.
CSRB Report on Microsoft
The CSRB has released its report into an intrusion at Microsoft, and...it’s a doozy.
Application and AI roundup - October
Exciting news from the SEC, lots of AI, and lots of threat modeling.
Comparing Retrospectives
We can learn a lot from comparing retrospectives
Microsoft Can Fix Ransomware Tomorrow
My latest at Dark Reading draws attention to how Microsoft can fix ransomware tomorrow.
Application Security Roundup - Feb
This month is all about memory safety, unless you’re a standards group.
Bing’s ChatGPT
ChatGPT in the headlines again
The Appsec Landscape in 2023
External changes will be driving appsec in 2023. It’s time to frame the decisions in front of you.
25 Years of Appsec - Appsec Global
Adam is delivering the opening keynote for OWASP Global Appsec 2021 with a 25 year restrospective on the history of appsec and a look into its future.
What are we going to do: CO2 edition
What happened when Microsoft tried to buy climate abatements
The Updates Must Go Through
The timing of updates is not coincidental.
Microsoft Autoupdate hangs Excel 16.47.21032301
Microsoft AutoUpdate for Mac has gotten exceptionally aggressive about running. Even if you use launchctl to disable it, you get a pop up roughly every 15 minutes of using an Office program.
Conway's Law and Software Security
[no description provided]
The Fights We Have to Fight: Fixing Bugs
[no description provided]