‘No Need’ to tell the public (?!?)
Secrecy isn't the best policy when it comes to public health.
Shostack + Friends Blog
Hayabusa!
Congratulations to the Hayabusa2 mission team, who flew to an asteroid, dropped multiple rovers, an impactor and a separate camera satellite to observe the impactor. The Hayabusa2 then flew around, to the far side of the asteroid to avoid ejecta from the impactor. In a few weeks, Hayabusa2 will probably land, collect more samples and then fly back to Earth.
Books Worth Your Time (Q1 2019)
Just what the title says...
Leave Those Numbers for April 1st
Over-inflated numbers won't scare me into buying your ‘solution’.
20 Years of STRIDE: Looking Back, Looking Forward
Has it been that long already?
Cybersecurity is not very important
Some points to consider, from Andrew Odlyzko.
Threat Modeling in 2019
RSA has posted a video of my talk, “Threat Modeling in 2019”.
India's Intermediary Guidelines
I've signed on to Access Now's letter to the Indian Ministry of Electronics and Information Technology, asking the Government of India to withdraw the draft amendments proposed to the Information Technology (Intermediary Guidelines) Rules.
Happy Pi Day!
There's only a few times to use a pie chart, but to help you celebrate, there's how to keep track of your intake:
A Seat At The Table (AppSecCali)
My talks from AppSecCali 2019
Facebook's Privacy Constitution
[no description provided]
After a Conference
Some tips on how to regoup and catch up after being away for conferences.
Spoofing In Depth
I'm quite happy to say that my next Linkedin Learning course has launched! This one is all about spoofing.
Adam @ RSA
Where and when to find Adam Shostack at RSA 2019
What Should Training Cover?
When suggesting that someone needs more training, consider what specific points should be covered.