Shostack + Friends Blog

person creating smoke with handheld device

Threat Model Thursday: Technology Consumers

“It depends on your threat model...” (29 Apr 2021)

This time for sure, Pinky!

If everyone agrees on what we should do, why do we seem incapable of doing it? (23 Apr 2021)

IoT Security & Threat Modeling

Expanding on the UK Government's ‘The Uk Code of Practice for Consumer IoT Security’ and how it aligns with Threat Modeling. (22 Apr 2021)

Threat Model Thursday: Github's Approach

A bunch of people recently asked me about Robert Reichel’s post 'How We Threat Model,' and I wanted to use it to pick up on Threat Model Thursdays. (16 Apr 2021)

The Updates Must Go Through

The timing of updates is not coincidental. (14 Apr 2021)

groups of children sitting at tables, coloring, in a classroom setting

I get this question a lot: Can distributed/remote training work as well as in person? Especially for threat modeling, where there's a strong expectation that training involves whiteboards... (13 Apr 2021)

Behind the Scenes: Training Development

Developing a training program is hard, especially when it will be delivered remotely. (06 Apr 2021)

a pizza topped with lamb and bitter greens

Passover Pie

For Passover, we made a lamb and bitter greens pizza. Now, you may be saying to yourself that that’s wrong, but allow me to explain. (01 Apr 2021)

group of professionals reviewing threat model diagrams on window-cling whiteboards in a city office

Threat Modeling Classes

Through the pandemic, I’ve rebuilt the way I teach threat modeling. The new structure and the platforms I needed to adapt for my corporate clients also allows me to offer the courses to the public. (30 Mar 2021)

Microsoft Autoupdate hangs Excel 16.47.21032301

Microsoft AutoUpdate for Mac has gotten exceptionally aggressive about running. Even if you use launchctl to disable it, you get a pop up roughly every 15 minutes of using an Office program. (26 Mar 2021)