Shostack + Friends Blog

(29 Jan 2023)

Adam spoke with Robert Vamosi of The Hacker Mind podcast (27 Jan 2023)

Adam joined Paul Roberts on the Conversing Labs podcast (23 Jan 2023)

The threats book is in the supply chain, inconsistently. (22 Jan 2023)

The return of the (my) Friday Star Wars posts (20 Jan 2023)

The live launch party for Threats! (19 Jan 2023)

The serious side of the book (17 Jan 2023)

Like the Force, each threat has a light side, and a dark side. (16 Jan 2023)

Threat Modeling is the software version of measure twice, cut once. (12 Jan 2023)

External changes will be driving appsec in 2023. It’s time to frame the decisions in front of you. (05 Jan 2023)

Thoughts on the last 747, and engineering culture. (30 Dec 2022)

Looking at a threat model for curl, the command line web client. (29 Dec 2022)

A new paper on how fast, cheap and good can combine into something we usually discount. (28 Dec 2022)

More thoughts about AI and threat modeling (25 Dec 2022)

A straw goat that has not been burned. (25 Dec 2022)