The Asset Trap
As we look at what's happened with the Russian attack on the US government and others via Solarwinds, I want to shine a spotlight on a lesson we can apply to threat modeling.
Shostack + Friends Blog
Elevation of Privilege In The Time of Cholera, Redux
So far, so good.
Charley Pride (1934-2020)
Early DRM artist recently passed away.
Fireeye Hack & Culture
Thoughts on the recent Fireeye Hack and the culture surrounding breaches
We Need a Discipline of Cybersecurity Public Health
The video of my Distinguished Lecture at Ruhr University Bochum is now online, and I've got reference to share as well.
Mitigating Social Bias in Knowledge Graphs
Something to consider
It's Not Working!
Help me help you...
Stencils and Sketch Books
Going beyond the whiteboard.
Breaking Encryption Myths (EU Commission on Encryption)
Speaking up
A Threat Modeling Manifesto
A diverse set of experts and advocates for threat modeling are releasing a threat modeling manifesto, modeled after the agile manifesto and focused on values and principles.
On Legitimacy (After the Election)
Additional thoughts on the subject.
Friday Star Wars: Lego Holiday Celebration
A little something to make you smile today:
Maps and Visualization
A colorful map shares a powerful message.
On Legitimacy
The legitimacy of the outcomes of our election are already under aggressive and sustained attack.
Notice the Outrage Machines
With three days to the US election, the outrage machines are running on all cylinders. It'll be easier to stay happy if you remember to notice them.