corpus.blog
41554 blogs · [ { "id": "01a087e0-3154-710d-8a76-d3ba4862dca5", "title": "Thoughts on the Executive Order", "url": "https://shostack.org/blog/thoughts-on-the-executive-order/", "published_at": "2021-06-07T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba47c59913", "title": "Van Buren", "url": "https://shostack.org/blog/van-buren/", "published_at": "2021-06-04T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba46c6dbe6", "title": "Recording Lectures", "url": "https://shostack.org/blog/recording-lectures/", "published_at": "2021-06-01T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba4671de22", "title": "Review: Practical Cybersecurity Architecture", "url": "https://shostack.org/blog/review-practical-cybersecurity-architecture/", "published_at": "2021-05-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba44fbb9ff", "title": "NSF Wants Data on Your Data Needs", "url": "https://shostack.org/blog/nsf-wants-data-on-your-data-needs/", "published_at": "2021-05-20T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba45d9c505", "title": "Using Threat Modeling to Improve Compliance (TM Thursday)", "url": "https://shostack.org/blog/using-threat-modeling-to-improve-compliance-tm-thursday/", "published_at": "2021-05-20T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba44642fac", "title": "Colonial Pipeline, Darkside and Models", "url": "https://shostack.org/blog/colonial-pipeline-darkside-and-models/", "published_at": "2021-05-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba43d764f5", "title": "Pacific Northwest Appsec Conference", "url": "https://shostack.org/blog/pacific-northwest-appsec-conference/", "published_at": "2021-05-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba43c586ca", "title": "Tracking Company Says 96% of iPhone Users Block Tracking", "url": "https://shostack.org/blog/tracking-company-says-96-of-iphone-users-block-tracking/", "published_at": "2021-05-08T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba43868c31", "title": "Apple Guidance on Intimate Partner Surveillance", "url": "https://shostack.org/blog/apple-guidance-on-intimate-partner-surveillance/", "published_at": "2021-05-06T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba42cfeaa6", "title": "Threat Model Thursday: Technology Consumers", "url": "https://shostack.org/blog/threat-model-thursday-technology-consumers/", "published_at": "2021-04-29T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba4298dfe8", "title": "'Stop Vaccine Finger Wagging'", "url": "https://shostack.org/blog/stop-vaccine-finger-wagging/", "published_at": "2021-04-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba41f41733", "title": "This time for sure, Pinky!", "url": "https://shostack.org/blog/this-time-for-sure-pinky/", "published_at": "2021-04-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba41008b6f", "title": "IoT Security & Threat Modeling", "url": "https://shostack.org/blog/iot-security-threat-modeling/", "published_at": "2021-04-22T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba402fa17d", "title": "Threat Model Thursday: Github's Approach", "url": "https://shostack.org/blog/tmt-githubs-approach/", "published_at": "2021-04-16T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba4000c3cf", "title": "The Updates Must Go Through", "url": "https://shostack.org/blog/the-updates-must-go-through/", "published_at": "2021-04-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3f40b1ea", "title": "Can Training Work Remotely?", "url": "https://shostack.org/blog/can-training-work-remotely/", "published_at": "2021-04-13T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3e866db5", "title": "Behind the Scenes: Training Development", "url": "https://shostack.org/blog/behind-the-scenes-training-development/", "published_at": "2021-04-06T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3e3cab51", "title": "Passover Pie", "url": "https://shostack.org/blog/passover-pie/", "published_at": "2021-04-01T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3dbb6b2d", "title": "Threat Modeling Classes", "url": "https://shostack.org/blog/threat-modeling-classes/", "published_at": "2021-03-30T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3d5a7de8", "title": "Ever Given & Suez", "url": "https://shostack.org/blog/ever-given-suez/", "published_at": "2021-03-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3db77f08", "title": "Microsoft Autoupdate hangs Excel 16.47.21032301", "url": "https://shostack.org/blog/microsoft-autoupdate-hangs-excel-16-47-21032301/", "published_at": "2021-03-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3d0b8880", "title": "Mmmm, Pandemic Puppies", "url": "https://shostack.org/blog/mmmm-pandemic-puppies/", "published_at": "2021-03-24T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3c8f0bb0", "title": "Happy (Belated) Pi Day!", "url": "https://shostack.org/blog/belated-pi-day/", "published_at": "2021-03-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3c703f71", "title": "Linkedin Learning", "url": "https://shostack.org/blog/linkedin-learning/", "published_at": "2021-02-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3c67c6ab", "title": "My Year Without Flying", "url": "https://shostack.org/blog/my-year-without-flying/", "published_at": "2021-02-18T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3b7319ef", "title": "Better OKRs Through Threat Modeling", "url": "https://shostack.org/blog/better-oks-through-threat-modeling/", "published_at": "2021-02-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3a7ad9aa", "title": "Threat Modeling and Social Issues", "url": "https://shostack.org/blog/threat-modeling-and-social-issues/", "published_at": "2021-01-28T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba39ea2ac4", "title": "Irius Risk & Gary McGraw", "url": "https://shostack.org/blog/irius-risk-gary-mcgraw/", "published_at": "2021-01-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba39d8b011", "title": "Podcast on Using Games", "url": "https://shostack.org/blog/podcast-on-using-games/", "published_at": "2021-01-25T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba39099ca3", "title": "Digital Guru Books", "url": "https://shostack.org/blog/digital-guru-books/", "published_at": "2021-01-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba38e2872a", "title": "It's 2021: Have you checked your backups?", "url": "https://shostack.org/blog/its-2021-check-backups/", "published_at": "2021-01-03T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba38492227", "title": "Vaccines", "url": "https://shostack.org/blog/vaccines/", "published_at": "2020-12-28T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba37eb9608", "title": "Just the Great Conjunction of Saturn and Jupiter...shot from the moon", "url": "https://shostack.org/blog/just-the-great-conjunction-of-saturn-and-jupiter-shot-from-the-moon/", "published_at": "2020-12-27T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba37bbb2c3", "title": "Dinosaur Feathers", "url": "https://shostack.org/blog/dinosaur-feathers/", "published_at": "2020-12-24T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba372be080", "title": "Chang'e 5!", "url": "https://shostack.org/blog/change5/", "published_at": "2020-12-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3631f5dc", "title": "The Asset Trap", "url": "https://shostack.org/blog/the-asset-trap/", "published_at": "2020-12-16T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba353d804e", "title": "Elevation of Privilege In The Time of Cholera, Redux", "url": "https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera-redux/", "published_at": "2020-12-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3525a84b", "title": "Charley Pride (1934-2020)", "url": "https://shostack.org/blog/charley-pride-1934-2020/", "published_at": "2020-12-13T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba34d038f1", "title": "Fireeye Hack & Culture", "url": "https://shostack.org/blog/fireeye-hack-culture/", "published_at": "2020-12-09T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba346db324", "title": "We Need a Discipline of Cybersecurity Public Health", "url": "https://shostack.org/blog/we-need-a-discipline-of-cybersecurity-public-health/", "published_at": "2020-12-07T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba33ea3b40", "title": "Mitigating Social Bias in Knowledge Graphs", "url": "https://shostack.org/blog/mitigating-social-bias-in-knowledge-graphs/", "published_at": "2020-12-04T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3306cc58", "title": "It's Not Working!", "url": "https://shostack.org/blog/its-not-working/", "published_at": "2020-11-25T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3298fd04", "title": "Stencils and Sketch Books", "url": "https://shostack.org/blog/stencils-and-sketch-books/", "published_at": "2020-11-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba32644ed8", "title": "Breaking Encryption Myths (EU Commission on Encryption)", "url": "https://shostack.org/blog/breaking-encryption-myths/", "published_at": "2020-11-22T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba31e53260", "title": "A Threat Modeling Manifesto", "url": "https://shostack.org/blog/threat-modeling-manifesto/", "published_at": "2020-11-17T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3177ff64", "title": "On Legitimacy (After the Election)", "url": "https://shostack.org/blog/on-legitimacy-after-the-election/", "published_at": "2020-11-11T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3137bb75", "title": "Friday Star Wars: Lego Holiday Celebration", "url": "https://shostack.org/blog/friday-star-wars-lego-holiday-celebration/", "published_at": "2020-11-06T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba3054f204", "title": "Maps and Visualization", "url": "https://shostack.org/blog/maps-and-visualization/", "published_at": "2020-11-04T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba30224187", "title": "On Legitimacy", "url": "https://shostack.org/blog/on-legitimacy/", "published_at": "2020-11-02T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba30184fd4", "title": "Notice the Outrage Machines", "url": "https://shostack.org/blog/notice-the-outrage-machines/", "published_at": "2020-10-31T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2f9ab5bc", "title": "On Monopolies", "url": "https://shostack.org/blog/on-monopolies/", "published_at": "2020-10-09T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2f4745cd", "title": "Training: Threat Modeling for Security Champions", "url": "https://shostack.org/blog/training-threat-modeling-for-security-champions/", "published_at": "2020-10-07T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2ee5a8a6", "title": "A PCI Threat Model", "url": "https://shostack.org/blog/pci-threat-model/", "published_at": "2020-09-24T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2e4d0215", "title": "Mentions", "url": "https://shostack.org/blog/mentions/", "published_at": "2020-09-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2dabe746", "title": "Starting Threat Modeling: Focused Retrospectives are Key", "url": "https://shostack.org/blog/starting-threat-modeling-focused-retrospectives-are-key/", "published_at": "2020-09-17T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2cc82ac7", "title": "Threat Modeling, Insiders and Incentives", "url": "https://shostack.org/blog/threat-modeling-insiders-and-incentives/", "published_at": "2020-09-10T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2bf0af3e", "title": "Phil Venables Blogging", "url": "https://shostack.org/blog/phil-venables-blogging/", "published_at": "2020-09-07T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2b95c67c", "title": "The Uber CSO indictment", "url": "https://shostack.org/blog/the-uber-cso-indictment/", "published_at": "2020-08-28T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2ae89b00", "title": "Podcast with Sidney Dekker", "url": "https://shostack.org/blog/podcast-with-sidney-dekker/", "published_at": "2020-08-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2a3ce9c2", "title": "Elevation of Privilege In The Time of Cholera", "url": "https://shostack.org/blog/elevation-of-privilege-in-the-time-of-cholera/", "published_at": "2020-08-24T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2a2944ce", "title": "Worthwhile Books Q2 2020", "url": "https://shostack.org/blog/worthwhile-books-q2-2020/", "published_at": "2020-08-19T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba298bf52b", "title": "Better Taught Than Caught!", "url": "https://shostack.org/blog/better-taught-than-caught/", "published_at": "2020-08-18T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2941c89e", "title": "Information Disclosure In Depth", "url": "https://shostack.org/blog/information-disclosure-in-depth/", "published_at": "2020-08-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba28b3dd7d", "title": "MDIC Annual Public Forum", "url": "https://shostack.org/blog/mdic-annual-public-forum-2020/", "published_at": "2020-08-13T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba27f329db", "title": "When to Threat Model", "url": "https://shostack.org/blog/when-to-threat-model/", "published_at": "2020-08-12T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba26f6c13b", "title": "Maximizing the Value of Virtual Security Conferences", "url": "https://shostack.org/blog/maximizing-the-value-of-virtual-security-conferences/", "published_at": "2020-07-31T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba26e6aecf", "title": "Sociotechnical Approach to Cyber Security", "url": "https://shostack.org/blog/sociotechnical-approach-to-cyber-security/", "published_at": "2020-07-24T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba260fe03a", "title": "Video Series", "url": "https://shostack.org/blog/video-series/", "published_at": "2020-07-21T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba255d2715", "title": "Software Engineering Radio", "url": "https://shostack.org/blog/software-engineering-radio/", "published_at": "2020-07-15T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba24a775ae", "title": "Amicus Brief on CFAA", "url": "https://shostack.org/blog/amicus-brief-on-cfaa/", "published_at": "2020-07-13T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2438328a", "title": "Internet Society Opposition to LAED Act", "url": "https://shostack.org/blog/internet-society-opposition-to-laed-act/", "published_at": "2020-07-07T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba239d8300", "title": "Threat Model In My Devops", "url": "https://shostack.org/blog/threat-model-in-my-devops/", "published_at": "2020-07-02T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2386b752", "title": "Threat Modeling and the SAFE Framework", "url": "https://shostack.org/blog/threat-modeling-safe-framework/", "published_at": "2020-06-30T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba2303b201", "title": "The Cyentia Library Relaunches", "url": "https://shostack.org/blog/the-cyentia-library-relaunches/", "published_at": "2020-06-22T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba22b2bfff", "title": "Happy Juneteenth!", "url": "https://shostack.org/blog/happy-juneteenth-4/", "published_at": "2020-06-19T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba22a5c422", "title": "The Jenga View of Threat Modeling", "url": "https://shostack.org/blog/the-jenga-view-of-threat-modeling/", "published_at": "2020-06-16T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba224da782", "title": "Threat Research: More Like This", "url": "https://shostack.org/blog/threat-research-more-like-this/", "published_at": "2020-06-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba21fe316d", "title": "Sonatype Report on DevSecOps", "url": "https://shostack.org/blog/sonatype-report-on-devsecops/", "published_at": "2020-06-12T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba210aeadc", "title": "Contextualisation of Data Flow Diagrams...", "url": "https://shostack.org/blog/contextualisation-of-data-flow-diagrams/", "published_at": "2020-06-09T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba20e5908a", "title": "'Best Practices for IoT Security'", "url": "https://shostack.org/blog/best-practices-for-iot-security/", "published_at": "2020-06-08T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1fef9151", "title": "Evidence Based Security", "url": "https://shostack.org/blog/evidence-based-security/", "published_at": "2020-06-04T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1fb3935b", "title": "One Bad Apple", "url": "https://shostack.org/blog/one-bad-apple/", "published_at": "2020-06-03T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1ee5c809", "title": "SLR as a Webcam", "url": "https://shostack.org/blog/slr-as-a-webcam/", "published_at": "2020-05-28T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1e5d46eb", "title": "Code: science and production", "url": "https://shostack.org/blog/code-science-and-production/", "published_at": "2020-05-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1d7acad0", "title": "How Are Computers Compromised (2020 Edition)", "url": "https://shostack.org/blog/how-are-computers-compromised-2020-edition/", "published_at": "2020-05-20T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1c9fa2cf", "title": "Models and Accuracy (Threat Modeling Thursday)", "url": "https://shostack.org/blog/models-and-accuracy-threat-modeling-thursday/", "published_at": "2020-05-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1bdc2a04", "title": "SDL Article in CACM", "url": "https://shostack.org/blog/sdl-article-in-cacm/", "published_at": "2020-05-11T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1bc1a142", "title": "Bounce and Range", "url": "https://shostack.org/blog/bounce-and-range/", "published_at": "2020-05-08T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1b6110c2", "title": "Threat Model Thursday: Data Flow Diagrams", "url": "https://shostack.org/blog/tmt-data-flow-diagrams/", "published_at": "2020-04-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1b29cc71", "title": "Worthwhile Books (Q1 2020)", "url": "https://shostack.org/blog/worthwhile-books-q1-2020/", "published_at": "2020-04-14T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1a8b42be", "title": "Power Dynamics in Threat Modeling", "url": "https://shostack.org/blog/power-dynamics-in-threat-modeling/", "published_at": "2020-04-02T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba1a07c85d", "title": "Answering 'What Are We Working On' When Remote", "url": "https://shostack.org/blog/answering-what-are-we-working-on-when-remote/", "published_at": "2020-03-30T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba19a96b75", "title": "Friday Star Wars", "url": "https://shostack.org/blog/friday-star-wars-2/", "published_at": "2020-03-27T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba197bb88e", "title": "Medical Device Threat Modeling", "url": "https://shostack.org/blog/medical-device-threat-modeling/", "published_at": "2020-03-26T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba18abcd56", "title": "The COVID Pandemic", "url": "https://shostack.org/blog/the-covid-pandemic/", "published_at": "2020-03-23T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba17ed0f7d", "title": "Threat Modeling with Questionnaires", "url": "https://shostack.org/blog/threat-modeling-with-questionnaires/", "published_at": "2020-03-19T00:00:00+00:00" }, { "id": "01a087e0-3154-710d-8a76-d3ba16fd9d96", "title": "Free Threat Modeling Training", "url": "https://shostack.org/blog/free-threat-modeling-training/", "published_at": "2020-03-17T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfd70606e", "title": "Amazon's 'Alexa Built-in' Threat Model", "url": "https://shostack.org/blog/amazons-alexa-built-in-threat-model/", "published_at": "2020-03-05T00:00:00+00:00" }, { "id": "01a087e0-3153-70ea-a11e-284cfd63cdd5", "title": "Threat Modeling Training at Blackhat 2020", "url": "https://shostack.org/blog/threat-modeling-training-at-blackhat-2020/", "published_at": "2020-03-02T00:00:00+00:00" } ] posts Claim your blog
Back to shostack.org
Blog · corpus.blog/blogs/shostack.org/posts

shostack.org

shostack.org

2021

Thoughts on the Executive Orderoriginal ↗
7 Jun 2021
Van Burenoriginal ↗
4 Jun 2021
Recording Lecturesoriginal ↗
1 Jun 2021
Review: Practical Cybersecurity Architectureoriginal ↗
26 May 2021
NSF Wants Data on Your Data Needsoriginal ↗
20 May 2021
Using Threat Modeling to Improve Compliance (TM Thursday)original ↗
20 May 2021
Colonial Pipeline, Darkside and Modelsoriginal ↗
15 May 2021
Pacific Northwest Appsec Conferenceoriginal ↗
14 May 2021
Tracking Company Says 96% of iPhone Users Block Trackingoriginal ↗
8 May 2021
Apple Guidance on Intimate Partner Surveillanceoriginal ↗
6 May 2021
Threat Model Thursday: Technology Consumersoriginal ↗
29 Apr 2021
'Stop Vaccine Finger Wagging'original ↗
26 Apr 2021
This time for sure, Pinky!original ↗
23 Apr 2021
IoT Security & Threat Modelingoriginal ↗
22 Apr 2021
Threat Model Thursday: Github's Approachoriginal ↗
16 Apr 2021
The Updates Must Go Throughoriginal ↗
14 Apr 2021
Can Training Work Remotely?original ↗
13 Apr 2021
Behind the Scenes: Training Developmentoriginal ↗
6 Apr 2021
Passover Pieoriginal ↗
1 Apr 2021
Threat Modeling Classesoriginal ↗
30 Mar 2021
Ever Given & Suezoriginal ↗
26 Mar 2021
Microsoft Autoupdate hangs Excel 16.47.21032301original ↗
26 Mar 2021
Mmmm, Pandemic Puppiesoriginal ↗
24 Mar 2021
Happy (Belated) Pi Day!original ↗
15 Mar 2021
Linkedin Learningoriginal ↗
23 Feb 2021
My Year Without Flyingoriginal ↗
18 Feb 2021
Better OKRs Through Threat Modelingoriginal ↗
15 Feb 2021
Threat Modeling and Social Issuesoriginal ↗
28 Jan 2021
Irius Risk & Gary McGraworiginal ↗
26 Jan 2021
Podcast on Using Gamesoriginal ↗
25 Jan 2021
Digital Guru Booksoriginal ↗
15 Jan 2021
It's 2021: Have you checked your backups?original ↗
3 Jan 2021

2020

Vaccinesoriginal ↗
28 Dec 2020
Just the Great Conjunction of Saturn and Jupiter...shot from the moonoriginal ↗
27 Dec 2020
Dinosaur Feathersoriginal ↗
24 Dec 2020
Chang'e 5!original ↗
23 Dec 2020
The Asset Traporiginal ↗
16 Dec 2020
Elevation of Privilege In The Time of Cholera, Reduxoriginal ↗
15 Dec 2020
Charley Pride (1934-2020)original ↗
13 Dec 2020
Fireeye Hack & Cultureoriginal ↗
9 Dec 2020
We Need a Discipline of Cybersecurity Public Healthoriginal ↗
7 Dec 2020
Mitigating Social Bias in Knowledge Graphsoriginal ↗
4 Dec 2020
It's Not Working!original ↗
25 Nov 2020
Stencils and Sketch Booksoriginal ↗
23 Nov 2020
Breaking Encryption Myths (EU Commission on Encryption)original ↗
22 Nov 2020
A Threat Modeling Manifestooriginal ↗
17 Nov 2020
On Legitimacy (After the Election)original ↗
11 Nov 2020
Friday Star Wars: Lego Holiday Celebrationoriginal ↗
6 Nov 2020
Maps and Visualizationoriginal ↗
4 Nov 2020
On Legitimacyoriginal ↗
2 Nov 2020
Notice the Outrage Machinesoriginal ↗
31 Oct 2020
On Monopoliesoriginal ↗
9 Oct 2020
Training: Threat Modeling for Security Championsoriginal ↗
7 Oct 2020
A PCI Threat Modeloriginal ↗
24 Sept 2020
Mentionsoriginal ↗
23 Sept 2020
Starting Threat Modeling: Focused Retrospectives are Keyoriginal ↗
17 Sept 2020
Threat Modeling, Insiders and Incentivesoriginal ↗
10 Sept 2020
Phil Venables Bloggingoriginal ↗
7 Sept 2020
The Uber CSO indictmentoriginal ↗
28 Aug 2020
Podcast with Sidney Dekkeroriginal ↗
26 Aug 2020
Elevation of Privilege In The Time of Choleraoriginal ↗
24 Aug 2020
Worthwhile Books Q2 2020original ↗
19 Aug 2020
Better Taught Than Caught!original ↗
18 Aug 2020
Information Disclosure In Depthoriginal ↗
14 Aug 2020
MDIC Annual Public Forumoriginal ↗
13 Aug 2020
When to Threat Modeloriginal ↗
12 Aug 2020
Maximizing the Value of Virtual Security Conferencesoriginal ↗
31 Jul 2020
Sociotechnical Approach to Cyber Securityoriginal ↗
24 Jul 2020
Video Seriesoriginal ↗
21 Jul 2020
Software Engineering Radiooriginal ↗
15 Jul 2020
Amicus Brief on CFAAoriginal ↗
13 Jul 2020
Internet Society Opposition to LAED Actoriginal ↗
7 Jul 2020
Threat Model In My Devopsoriginal ↗
2 Jul 2020
Threat Modeling and the SAFE Frameworkoriginal ↗
30 Jun 2020
The Cyentia Library Relaunchesoriginal ↗
22 Jun 2020
Happy Juneteenth!original ↗
19 Jun 2020
The Jenga View of Threat Modelingoriginal ↗
16 Jun 2020
Threat Research: More Like Thisoriginal ↗
14 Jun 2020
Sonatype Report on DevSecOpsoriginal ↗
12 Jun 2020
Contextualisation of Data Flow Diagrams...original ↗
9 Jun 2020
'Best Practices for IoT Security'original ↗
8 Jun 2020
Evidence Based Securityoriginal ↗
4 Jun 2020
One Bad Appleoriginal ↗
3 Jun 2020
SLR as a Webcamoriginal ↗
28 May 2020
Code: science and productionoriginal ↗
26 May 2020
How Are Computers Compromised (2020 Edition)original ↗
20 May 2020
Models and Accuracy (Threat Modeling Thursday)original ↗
14 May 2020
SDL Article in CACMoriginal ↗
11 May 2020
Bounce and Rangeoriginal ↗
8 May 2020
Threat Model Thursday: Data Flow Diagramsoriginal ↗
23 Apr 2020
Worthwhile Books (Q1 2020)original ↗
14 Apr 2020
Power Dynamics in Threat Modelingoriginal ↗
2 Apr 2020
Answering 'What Are We Working On' When Remoteoriginal ↗
30 Mar 2020
Friday Star Warsoriginal ↗
27 Mar 2020
Medical Device Threat Modelingoriginal ↗
26 Mar 2020
The COVID Pandemicoriginal ↗
23 Mar 2020
Threat Modeling with Questionnairesoriginal ↗
19 Mar 2020
Free Threat Modeling Trainingoriginal ↗
17 Mar 2020
Amazon's 'Alexa Built-in' Threat Modeloriginal ↗
5 Mar 2020
Threat Modeling Training at Blackhat 2020original ↗
2 Mar 2020
Previous Next