A Tale of Two Addresses
Output encoding is a tool, not a hammer. Or maybe it's a hammer.
Shostack + Friends Blog
Recent Blog Posts, Page 8
On Democracy
Democracy has one function, and it’s under threat.
ThreatModCon San Francisco
Threatmodcon was amazing
Our back to school sale is ending
Our biggest sale ever ends today!
Appsec Roundup - September 2024
If you say threat modeling three times, it appears!
Secure Boot and Liability
Secure boot presents questions that should inform the liability conversation
Our back to school sale
Our biggest sale ever!
Google Health Symposium
Slides from Adam's talk at the Symposium
Appsec Roundup - August 2024
The most important stories around threat modeling, appsec and secure by design for August, 2024.
Secure Boot and Secure by Design
The failure to secure boot keys should be a bigger deal.
Handling Pandemic-Scale Cyber Threats (preprint)
A new paper on 'Pandemic Scale Cyber Events
Office Hours after training
Office hours are one way we strive to deliver a great training experience.
Threat Modeling Gameplay with Eop
You should get the Threat Modeling Gameplay book, now available!
Appsec Roundup - July 2024
The most important stories around threat modeling, appsec and secure by design for June, 2024.
Threat Modeling and GenAI with Venkat Ramakrishnan
Podcast episode with Venkat Ramakrishnan discussing the intersection of GenAI and threat modeling