The Appsec Landscape in 2023
External changes will be driving appsec in 2023. It’s time to frame the decisions in front of you.
Shostack + Friends Blog
Recent Blog Posts, Page 14
The Last 747
Thoughts on the last 747, and engineering culture.
Threat Model Thursday: curl
Looking at a threat model for curl, the command line web client.
Fast, Cheap and Good, Redux
A new paper on how fast, cheap and good can combine into something we usually discount.
More on GPT-3 and threat modeling
More thoughts about AI and threat modeling
Gavle Goat
A straw goat that has not been burned.
What do you get the person who has everything?
The best gift for 2023
Darkreading: Threat Modeling in the Age of OpenAI's Chatbot
Pointer to Adam’s latest Darkreading article
Usable Security Matters
Usable security matters
Worthwhile Books Q4 2022
Books that I read in the fourth quater that are worth your time include several about safety with lessons for cybersecurity
Space News
Interesting space news, including ISS and 3d printed engines
Liability for the Second Death Star
Legal commentary on the Second Death Star Project
Human-Centered Security
Threat Modeling for UX Designers with Adam Shostack on Heidi Trost's podcast
GPT-3
The OpenAI chatbot is shockingly improved — its capabilities deserve attention.
GPT-3
Text captured from GPT-3