Shostack + Friends Blog

Reflecting on the framing of the Threats book (10 Apr 2023)

Cumulus is a cloud-oriented version of Elevation of Privilege (06 Apr 2023)

A few tools, some thoughts on injection, some standards, and some of Adam’s appsec news. (05 Apr 2023)

When will Adam Shostack be replaced by ChatGPT (01 Apr 2023)

Today in Friday Star Wars fun (31 Mar 2023)

This version of Star Wars is quite spectacular (24 Mar 2023)

(21 Mar 2023)

Searching my feelings as the audiobook of Threats is released. (17 Mar 2023)

An interesting discovery, hidden in Leonardo da Vinci's notebooks (10 Mar 2023)

NCC has released a threat model for Google Cloud Platform. What can it teach us? (01 Mar 2023)

This month is all about memory safety, unless you’re a standards group. (27 Feb 2023)

Roman concrete was cool, but the new MIT result may be off-base (24 Feb 2023)

ChatGPT in the headlines again (21 Feb 2023)

An amazing mash-up (11 Feb 2023)

The new IEEE S+P is all about usable security. (09 Feb 2023)