Threat Modeling in 2019
RSA has posted a video of my talk, “Threat Modeling in 2019”.
Shostack + Friends Blog
Recent Blog Posts, Page 31
India's Intermediary Guidelines
I've signed on to Access Now's letter to the Indian Ministry of Electronics and Information Technology, asking the Government of India to withdraw the draft amendments proposed to the Information Technology (Intermediary Guidelines) Rules.
Happy Pi Day!
There's only a few times to use a pie chart, but to help you celebrate, there's how to keep track of your intake:
A Seat At The Table (AppSecCali)
My talks from AppSecCali 2019
Facebook's Privacy Constitution
[no description provided]
After a Conference
Some tips on how to regoup and catch up after being away for conferences.
Spoofing In Depth
Adam @ RSA
Where and when to find Adam Shostack at RSA 2019
What Should Training Cover?
When suggesting that someone needs more training, consider what specific points should be covered.
Dolphins and Pufferfish
More chaos in nature
55 5 ⭐ Reviews?
Almost 5 years after release, I'm looking for a few more Amazon reviews.
Podcast: DevSecOps
I recently chatted with Mark Miller over at DevSecOps
The Queen of the Skies and Innovation
Innovation, regulation, and more.
Nature and Nurture in Threat Modeling
What comes easily should still be taught and elaborated upon.
Fire Doesn't Innovate by Kip Boyle (Book Review)
An unexpected book review.