Shostack + Friends Blog

Congratulations to the CSRB!

I'm thrilled the first CSRB report is available.

The cover from the CSRBs inaugural report.

I'm thrilled that the CSRB has released Review of the December 2021 Log4j Event, their inaugural report. There's also a short Twitter thread from Undersecretary Rob Silvers. I'm happy to see him call the board "a new institution."

I've not yet had a chance to read the report, and I'm sure I'll have more to say when I do, but given my longstanding interest I wanted to share.

Originally published by Adam on 14 Jul 2022
Categories: government reports and data software engineering security

Our Favorite Content

General threat modeling posts

The Security Principles of Saltzer and Schroeder, illustrated with Star Wars

Subscribe (RSS/Mail)

RSS/ATOM: The ATOM feed is here. We recommend RSS as the best way to follow this blog, and think generally RSS is the best way to take control of the information you take in. You can read our thinking here.

Email: If you’d like a lower volume set of updates on what Adam is doing, Adam’s New Thing gets only a few messages a year, guaranteed. We include a subset of posts in each.