On Monopolies
In a simpler age, Matt Stoller famously lost his job for critiquing Google.
Shostack + Friends Blog
Training: Threat Modeling for Security Champions
Expanding on our distributed class structure.
A PCI Threat Model
Compliance isn't Security, oh and something I wrote.
Mentions
A few recent mentions
Starting Threat Modeling: Focused Retrospectives are Key
Don't skip this important step.
Threat Modeling, Insiders and Incentives
Inspired by the recent story of Tesla's insider, I'd like to discuss insider threat as it fits into threat modeling.
Phil Venables Blogging
It's not LinkedIn posts or Tweets, but a real live blog.
The Uber CSO indictment
Thoughts on Mark Rasch's essay, Conceal and Fail to Report - The Uber CSO Indictment
Podcast with Sidney Dekker
This is a really interesting podcast interview with Sidney Dekker, who's one of the most important thinkers in safety.
Elevation of Privilege In The Time of Cholera
How to play in person games while maintaining safe distances.
Worthwhile Books Q2 2020
These are the books that I read in Q2 2020 that I think are worth your time.
Better Taught Than Caught!
Informal training may work in some cases, but Threat Modeling skills should be passed on through more formal means.
Information Disclosure In Depth
I have something to disclose...
MDIC Annual Public Forum
I'll be speaking at the MDIC's Annual Public Forum today, discussing how threat modeling helps bring maturity to the medtech sector.
When to Threat Model
A talk from the Biohacking Village at DefCon brought up a good point.