Skip to main content

Shostack + Friends Blog

Posts in category “website”

Recent accessibility improvements for the Shostack + Associates website

Accessibility is an ongoing process. Learn about some recent updates to the Shostack + Associates website that increase accessibility and usability. (25 Nov 2025)

Our Favorite Content

General threat modeling posts

The Security Principles of Saltzer and Schroeder, illustrated with Star Wars

Other Star Wars blog posts

Modeling attackers and their motives

Doing science with near misses

Posts about Adam’s “Threats” book

Posts about Adam’s “Threat Modeling” book

Posts about “The New School of Information Security” book

About this blog

Popular Blog Topics

Threat Model Thursday,
exploring specific published threat models

Threat Modeling (general topic)

Application Security

Software Engineering

Privacy + Personal Security

Research + Reports

Podcasts, Videos + Webinars

Subscribe (RSS/Mail)

RSS/ATOM: The RSS feed is here. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking here.

Email: If you’d like a lower volume set of updates on what Adam is doing, Adam’s New Thing gets only a few messages a year, guaranteed. We include a subset of posts in each.

Recent posts

State of Threat Modeling 2024-2025

12 Dec 2025

The first-ever, community-powered report on threat modeling

Windows Links and Usable Security

05 Dec 2025

Some dialogs can harm the viewer

Secure By Design roundup - November 2025

30 Nov 2025

Perspective on CISOs as facilitators, a deep dive into the types of diagrams for medical devices, poetry, Chinese LLMs, Chinese drones and Chinese routers. Do any of them contain secrets?

Recent accessibility improvements for the Shostack + Associates website

25 Nov 2025

Accessibility is an ongoing process. Learn about some recent updates to the Shostack + Associates website that increase accessibility and usability.

Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.