When security goes off the rails
My newest post over at Dark Reading ponders regulation.
Shostack + Friends Blog
Polymorphic Warnings On My Mind
The more we see it, the more we ignore it.
Promoting Threat Modeling Work
Some thoughts on promoting others’ threat modeling work.
Testing Building Blocks
There are a couple of new, short (4-page), interesting papers from a team at KU Leuven discussin the building blocks of threat modeling.
Episode 9 Spoilers
Today is the last Star Wars Day before Episode 9 comes out, and brings the Skywalker saga to its end.
3 Arguments for Threat Modeling
Top 3, from Continuum
The White Box Essays (Book Review)
A resource for those developing games.
Science of Security, Science for Security
Recent article in Bentham’s Gaze
‘No Need’ to tell the public (?!?)
Secrecy isn't the best policy when it comes to public health.
Hayabusa!
Congratulations to the Hayabusa2 mission team, who flew to an asteroid, dropped multiple rovers, an impactor and a separate camera satellite to observe the impactor. The Hayabusa2 then flew around, to the far side of the asteroid to avoid ejecta from the impactor. In a few weeks, Hayabusa2 will probably land, collect more samples and then fly back to Earth.
Books Worth Your Time (Q1 2019)
Just what the title says...
Leave Those Numbers for April 1st
Over-inflated numbers won't scare me into buying your ‘solution’.
20 Years of STRIDE: Looking Back, Looking Forward
Has it been that long already?
Cybersecurity is not very important
Some points to consider, from Andrew Odlyzko.
Threat Modeling in 2019
RSA has posted a video of my talk, “Threat Modeling in 2019”.