A Tale of Two Addresses
Output encoding is a tool, not a hammer. Or maybe it's a hammer.
Shostack + Friends Blog
Posts in category "product management"
Tracking Company Says 96% of iPhone Users Block Tracking
So there's some good news and some bad news in this story: 'Too Bad, Zuck: Just 4% of U.S. iPhone Users Let Apps Track Them After iOS Update'.
Medical Device Threat Modeling
New training being developed, seeking interest.
Amazon's 'Alexa Built-in' Threat Model
Exploring supply chain threat modeling with Alexa
Medical Device Security Standards
Recently, I've seen four cybersecurity approaches for medical devices, and we can learn by juxtaposing them.
Interesting Reads, August 19
Just what the title says
Safety and Security in Automated Driving
Let’s explore the risks associated with Automated Driving.
The Road to Mediocrity
The road to mediocre writing is paved with over-simplification and distraction.
Passwords Advice
Bruse Marshall has put together a useful comparison of password requirements from OWASP ASVS v3 and v4.
The White Box Essays (Book Review)
A resource for those developing games.
Leave Those Numbers for April 1st
Over-inflated numbers won't scare me into buying your ‘solution’.
Incentives and Multifactor Authentication
What if we gamified security?
Threat Model Thursday: Architectural Review and Threat Modeling
[no description provided]
The DREAD Pirates
[no description provided]
Joining the Continuum Team
[no description provided]
Not Bugs, but Features
[no description provided]
The Fights We Have to Fight: Fixing Bugs
[no description provided]
Why is 'Reply' Not the Strongest Signal?
[no description provided]
20 Year Software: Engineering and Updates
[no description provided]
The Dope Cycle and a Deep Breath
[no description provided]
Threat Modeling Password Managers
[no description provided]
Secure updates: A threat model
[no description provided]
Bicycling and Threat Modeling
[no description provided]
The Ultimate Stopping Machine?
[no description provided]
Threat Modeling & IoT
[no description provided]
How Not to Design an Error Message
[no description provided]
2017 and Tidal Forces
[no description provided]
The Dope Cycle and the Two Minutes Hate
[no description provided]