41554 blogs · [ { "id": "01a087e0-3153-70ea-a11e-284ccfb3709f", "title": "CVE Funding and Process", "url": "https://shostack.org/blog/cve-funding-and-process/", "published_at": "2018-10-02T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea3042bb2", "title": "Space Elevator Test", "url": "https://shostack.org/blog/space-elevator-test/", "published_at": "2018-09-25T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea2f574f2", "title": "Reflective Practice and Threat Modeling (Threat Model Thursday)", "url": "https://shostack.org/blog/tmt-reflective-practice-and-threat-modeling/", "published_at": "2018-09-14T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea1ffc653", "title": "Threat Model Thursday: Legible Architecture", "url": "https://shostack.org/blog/tmt-legible-architecture/", "published_at": "2018-08-23T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea186c8ca", "title": "Toolbox: After a Conference", "url": "https://shostack.org/blog/toolbox-after-a-conference/", "published_at": "2018-08-21T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea0747760", "title": "Aretha Franklin", "url": "https://shostack.org/blog/aretha-franklin/", "published_at": "2018-08-13T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4ea0c09173", "title": "Threat Modeling in 2018: Attacks, Impacts and Other Updates", "url": "https://shostack.org/blog/threat-modeling-in-2018-attacks-impacts-and-other-updates/", "published_at": "2018-08-13T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9ec5d37a", "title": "CSO on AppSec at the Speed of Devops", "url": "https://shostack.org/blog/cso-on-appsec-at-the-speed-of-devops/", "published_at": "2018-08-06T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9f903c5a", "title": "CyberSecurity Hall of Fame", "url": "https://shostack.org/blog/cybersecurity-hall-of-fame/", "published_at": "2018-08-06T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9ec0d843", "title": "Summer Reading List", "url": "https://shostack.org/blog/summer-reading-list/", "published_at": "2018-07-31T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9e70bfb7", "title": "Threat Modeling Thursday: 2018", "url": "https://shostack.org/blog/tmt-2018-2/", "published_at": "2018-07-26T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9df19113", "title": "Half the US population will live in 8 states", "url": "https://shostack.org/blog/half-the-us-population-will-live-in-8-states/", "published_at": "2018-07-24T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9d208404", "title": "Hey, this movie looks pretty interesting!", "url": "https://shostack.org/blog/hey-this-movie-looks-pretty-interesting/", "published_at": "2018-07-20T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9d005d13", "title": "Keeping the Internet Secure", "url": "https://shostack.org/blog/keeping-the-internet-secure/", "published_at": "2018-07-17T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9c2cf9ca", "title": "Games and Cards", "url": "https://shostack.org/blog/games-and-cards/", "published_at": "2018-07-16T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9b53cc19", "title": "Friday Star Wars", "url": "https://shostack.org/blog/friday-star-wars-july2018/", "published_at": "2018-07-13T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9b14f55c", "title": "Threat Modeling Thursday: 2018", "url": "https://shostack.org/blog/tmt-2018/", "published_at": "2018-07-12T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9a5fd7f8", "title": "Automotive Privacy", "url": "https://shostack.org/blog/automotive-privacy/", "published_at": "2018-07-09T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e99a657ab", "title": "Threat Model Thursdays: Crispin Cowan", "url": "https://shostack.org/blog/tmt-crispin-cowan/", "published_at": "2018-07-05T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e98e89a1f", "title": "Continuum Interview", "url": "https://shostack.org/blog/continuum-interview/", "published_at": "2018-06-28T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e984dbdde", "title": "Carpenter!", "url": "https://shostack.org/blog/carpenter/", "published_at": "2018-06-25T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e97590018", "title": "Threat Model Thursday: Architectural Review and Threat Modeling", "url": "https://shostack.org/blog/tmt-architectural-review-and-threat-modeling/", "published_at": "2018-06-21T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9668ceaa", "title": "Threat Model Thursday: Chromium Post-Spectre", "url": "https://shostack.org/blog/tmt-chromium-post-spectre/", "published_at": "2018-06-14T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e965ac34b", "title": "'EFAIL' Is Why We Can't Have Golden Keys", "url": "https://shostack.org/blog/efail-is-why-we-cant-have-golden-keys/", "published_at": "2018-06-11T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e95810e61", "title": "Eagle vs Fox", "url": "https://shostack.org/blog/eagle-vs-fox/", "published_at": "2018-06-10T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e950c7985", "title": "Conway's Law and Software Security", "url": "https://shostack.org/blog/conways-law-and-software-security/", "published_at": "2018-06-06T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e94a7b024", "title": "The DREAD Pirates", "url": "https://shostack.org/blog/tmt-the-dread-pirates/", "published_at": "2018-05-31T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e93ee063f", "title": "NTSB on Uber (Preliminary)", "url": "https://shostack.org/blog/ntsb-on-uber-preliminary/", "published_at": "2018-05-25T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e9399d346", "title": "Threat Model Thursday: Google on Kubernetes", "url": "https://shostack.org/blog/tmt-google-on-kubernetes/", "published_at": "2018-05-24T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e931cdc84", "title": "4 Common Missteps in Threat Modeling", "url": "https://shostack.org/blog/4-common-missteps-in-threat-modeling/", "published_at": "2018-05-21T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e92cfbad9", "title": "Joining the Continuum Team", "url": "https://shostack.org/blog/joining-the-continuum-team/", "published_at": "2018-05-15T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e92030d0d", "title": "Just Culture and Information Security", "url": "https://shostack.org/blog/just-culture-and-information-security/", "published_at": "2018-05-09T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e913e0b26", "title": "Redzone Podcast on threat modeling", "url": "https://shostack.org/blog/redzone-podcast-on-threat-modeling/", "published_at": "2018-05-07T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e90dd8f91", "title": "TESS Launch Closeup", "url": "https://shostack.org/blog/tess-launch-closeup/", "published_at": "2018-05-01T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e90169679", "title": "Best Cyber News Blogs, thanks!", "url": "https://shostack.org/blog/best-cyber-news-blogs-thanks/", "published_at": "2018-04-30T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8fb0d658", "title": "Threat Model Thursday: Q&A", "url": "https://shostack.org/blog/tmt-q-and-a/", "published_at": "2018-04-26T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8eb2f161", "title": "$35M for Covering up A Breach", "url": "https://shostack.org/blog/35m-for-covering-up-a-breach/", "published_at": "2018-04-24T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8df0ed29", "title": "Designing for Good Social Systems", "url": "https://shostack.org/blog/designing-for-good-social-systems/", "published_at": "2018-04-23T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8d05730c", "title": "Threat Modeling Thursday: #threatmodelhero", "url": "https://shostack.org/blog/tmt-hashtag-threatmodelhero/", "published_at": "2018-04-19T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8c55100d", "title": "346,000 Wuhan Citizens’ Secrets", "url": "https://shostack.org/blog/346000-wuhan-citizens-secrets/", "published_at": "2018-04-13T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8b6acaf5", "title": "Threat Model Thursday: Talking, Dialogue and Review", "url": "https://shostack.org/blog/tmt-talking-dialogue-and-review/", "published_at": "2018-04-12T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8ac4f254", "title": "Security Engineering: Computers versus Bridges", "url": "https://shostack.org/blog/security-engineering-computers-versus-bridges/", "published_at": "2018-04-11T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8a4875b9", "title": "Gartner on DevSecOps Toolchain", "url": "https://shostack.org/blog/gartner-on-devsecops-toolchain/", "published_at": "2018-04-10T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8a193432", "title": "Threat Model Thursday: ARM's Network Camera TMSA", "url": "https://shostack.org/blog/tmt-arms-network-camera-tmsa/", "published_at": "2018-04-05T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e89903bf9", "title": "John Harrison's Struggle Continues", "url": "https://shostack.org/blog/john-harrisons-struggle-continues/", "published_at": "2018-04-03T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8959c940", "title": "Reasonable Software Security Engineering Podcast", "url": "https://shostack.org/blog/reasonable-software-security-engineering-podcast/", "published_at": "2018-04-02T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e88b29971", "title": "Blaming the User", "url": "https://shostack.org/blog/blaming-the-user/", "published_at": "2018-03-30T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e88ae3bf3", "title": "Threat Model Thursday: ARM Yourselves!", "url": "https://shostack.org/blog/tmt-arm-yourselves/", "published_at": "2018-03-29T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e88432bf9", "title": "Ries on Gatekeepers", "url": "https://shostack.org/blog/ries-on-gatekeepers/", "published_at": "2018-03-27T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8758f8c4", "title": "Friday Star Wars: Trek and CISSP", "url": "https://shostack.org/blog/star-wars-friday-trek-and-cissp/", "published_at": "2018-03-23T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e873e264a", "title": "Threat Model Thursday: Synopsys", "url": "https://shostack.org/blog/tmt-synopsys/", "published_at": "2018-03-22T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e86919600", "title": "Threat Modeling Panel at APPSEC Cali 2018", "url": "https://shostack.org/blog/threat-modeling-panel-at-appsec-cali-2018/", "published_at": "2018-03-20T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e85deb045", "title": "Speculative Execution Threat Model", "url": "https://shostack.org/blog/speculative-execution-threat-model/", "published_at": "2018-03-15T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e85912330", "title": "Citizen Threat Modeling and more data", "url": "https://shostack.org/blog/citizen-threat-modeling/", "published_at": "2018-03-14T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e85454fa7", "title": "Threat Modeling: Citizens Versus Systems", "url": "https://shostack.org/blog/threat-modeling-citizens-versus-systems/", "published_at": "2018-03-08T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e84813e50", "title": "Threat Modeling Privacy of Seattle Residents", "url": "https://shostack.org/blog/threat-modeling-privacy-of-seattle-residents/", "published_at": "2018-02-22T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e83f90966", "title": "BlackHat and Human Factors", "url": "https://shostack.org/blog/blackhat-and-human-factors-2018/", "published_at": "2018-02-19T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e83200c1d", "title": "Keep the Bombe on the Bletchley Park Estate", "url": "https://shostack.org/blog/keep-the-bombe-on-the-bletchley-park-estate/", "published_at": "2018-02-15T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8304829c", "title": "Doing Science with Near Misses", "url": "https://shostack.org/blog/doing-science-with-near-misses/", "published_at": "2018-02-06T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e823e9273", "title": "AppSec Cali 2018: Izar Tarandach", "url": "https://shostack.org/blog/appsec-cali-2018-izar-tarandach/", "published_at": "2018-01-30T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e82d3fb10", "title": "Jonathan Marcil’s Threat Modeling Toolkit talk", "url": "https://shostack.org/blog/jonathan-marcils-threat-modeling-toolkit-talk/", "published_at": "2018-01-30T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e8201dd81", "title": "Star Trek's Astromycologist", "url": "https://shostack.org/blog/star-treks-astromycologist/", "published_at": "2018-01-26T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e81e72a3b", "title": "AppSec California TM Panel", "url": "https://shostack.org/blog/appsec-california-tm-panel/", "published_at": "2018-01-23T00:00:00+00:00" }, { "id": "01a087e0-3152-7108-9e1d-4d4e810e043f", "title": "Fire and building codes", "url": "https://shostack.org/blog/fire-and-building-codes/", "published_at": "2018-01-19T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d3c7f016", "title": "The Resistance Has Infiltrated This Base!", "url": "https://shostack.org/blog/the-resistance-has-infiltrated-this-base/", "published_at": "2018-01-11T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d2db00ba", "title": "Not Bugs, but Features", "url": "https://shostack.org/blog/not-bugs-but-features/", "published_at": "2018-01-05T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d2ad3e51", "title": "Pen Testing The Empire", "url": "https://shostack.org/blog/pen-testing-the-empire/", "published_at": "2018-01-01T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d2316e8b", "title": "Threat Modeling Tooling from 2017", "url": "https://shostack.org/blog/threat-modeling-tooling-from-2017/", "published_at": "2017-12-28T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d1821c82", "title": "Portfolio Thinking: AppSec Radar", "url": "https://shostack.org/blog/portfolio-thinking-appsec-radar/", "published_at": "2017-12-27T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d13b183e", "title": "Gavle Goat Gallantly Guarded", "url": "https://shostack.org/blog/gavle-goat-gallantly-guarded/", "published_at": "2017-12-08T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d0d48cf6", "title": "Learning from Near Misses", "url": "https://shostack.org/blog/learning-from-near-misses/", "published_at": "2017-12-04T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d090f59b", "title": "The Carpenter Case", "url": "https://shostack.org/blog/the-carpenter-case/", "published_at": "2017-11-28T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407d0163ece", "title": "45 Years", "url": "https://shostack.org/blog/45-years/", "published_at": "2017-11-25T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cfc611a4", "title": "Averting the Drift into Failure", "url": "https://shostack.org/blog/averting-the-drift-into-failure/", "published_at": "2017-11-22T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cf5e5322", "title": "Vulnerabilities Equities Process and Threat Modeling", "url": "https://shostack.org/blog/vulnerabilities-equities-process-and-threat-modeling/", "published_at": "2017-11-20T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407ceff78f7", "title": "Microsoft's PCI Blueprint", "url": "https://shostack.org/blog/microsofts-pci-bluepprint/", "published_at": "2017-11-14T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407ce0c2aae", "title": "The Fights We Have to Fight: Fixing Bugs", "url": "https://shostack.org/blog/the-fights-we-have-to-fight-fixing-bugs/", "published_at": "2017-11-08T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cde3dee6", "title": "Data Flow Diagrams 3.0", "url": "https://shostack.org/blog/data-flow-diagrams-3-0/", "published_at": "2017-11-05T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cdb78b86", "title": "Why is 'Reply' Not the Strongest Signal?", "url": "https://shostack.org/blog/why-is-reply-not-the-strongest-signal/", "published_at": "2017-11-02T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cd5ebf1a", "title": "Emergent Design Issues", "url": "https://shostack.org/blog/emergent-design-issues/", "published_at": "2017-10-29T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cce03318", "title": "20 Year Software: Engineering and Updates", "url": "https://shostack.org/blog/20-year-software-engineering-and-updates/", "published_at": "2017-10-23T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cc34ddc6", "title": "Threat Modeling ‘App Democracy’", "url": "https://shostack.org/blog/threat-modeling-app-democracy/", "published_at": "2017-10-20T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cb390f2c", "title": "Building an Application Security Team", "url": "https://shostack.org/blog/application-security-team/", "published_at": "2017-10-15T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cb1f49a9", "title": "Worthwhile Books, Q3", "url": "https://shostack.org/blog/worthwhile-books-q3-2017/", "published_at": "2017-10-11T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407cac8ffbd", "title": "Emergent Musical Chaos", "url": "https://shostack.org/blog/emergent-musical-chaos/", "published_at": "2017-10-07T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407ca739630", "title": "It's Not The Crime, It's The Coverup or the Chaos", "url": "https://shostack.org/blog/its-not-the-crime-its-the-coverup-or-the-chaos/", "published_at": "2017-09-26T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c9d46b19", "title": "Parroting Bad Security Advice", "url": "https://shostack.org/blog/parroting-bad-security-advice/", "published_at": "2017-09-22T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c96c34e9", "title": "“The Readability Of Scientific Texts Is Decreasing Over Time”", "url": "https://shostack.org/blog/the-readability-of-scientific-texts-is-decreasing-over-time/", "published_at": "2017-09-20T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c8c4e3c6", "title": "Threat Modeling and Architecture", "url": "https://shostack.org/blog/threat-modeling-and-architecture/", "published_at": "2017-09-18T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c7d0104d", "title": "Threat Modeling Training (London!)", "url": "https://shostack.org/blog/threat-modeling-training-london/", "published_at": "2017-09-14T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c7bffbc8", "title": "Pie Charts, or this could be hell", "url": "https://shostack.org/blog/pie-charts-or-this-could-be-hell/", "published_at": "2017-09-13T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c6d703d8", "title": "Breach Vouchers & Equifax 2017 Breach Links", "url": "https://shostack.org/blog/breach-vouchers-equifax-2017-breach-links/", "published_at": "2017-09-07T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c7b1f8ad", "title": "Open for Business", "url": "https://shostack.org/blog/open-for-business/", "published_at": "2017-09-07T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c6abb842", "title": "Star Wars, Star Trek and Getting Root on a Star Ship", "url": "https://shostack.org/blog/star-wars-star-trek-and-getting-root-on-a-star-ship/", "published_at": "2017-09-01T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c69e359a", "title": "Organizing Threat Modeling Magic", "url": "https://shostack.org/blog/organizing-threat-modeling-magic/", "published_at": "2017-08-29T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c68bd355", "title": "Babylonian Triginometry", "url": "https://shostack.org/blog/babylonian-triginometry/", "published_at": "2017-08-25T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c5ca8bea", "title": "Celebrating Alt-Left Lawlessness", "url": "https://shostack.org/blog/celebrating-alt-left-lawlessness/", "published_at": "2017-08-17T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c56894a3", "title": "Amicus brief in “Carpenter” Supreme Court Case", "url": "https://shostack.org/blog/amicus-brief-in-carpenter-supreme-court-case/", "published_at": "2017-08-16T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c5581365", "title": "Learning From npm's Rough Few Months", "url": "https://shostack.org/blog/learning-from-npms-rough-few-months/", "published_at": "2017-08-15T00:00:00+00:00" }, { "id": "01a087e0-3151-73b1-bca2-f407c462f92a", "title": "Interesting Monday Reads", "url": "https://shostack.org/blog/interesting-monday-reads-20170814/", "published_at": "2017-08-14T00:00:00+00:00" } ] posts Claim your blog

Back to shostack.org

Blog · corpus.blog/blogs/shostack.org/posts

shostack.org

shostack.org

2018

CVE Funding and Process original ↗

2 Oct 2018

Space Elevator Test original ↗

25 Sept 2018

Reflective Practice and Threat Modeling (Threat Model Thursday)original ↗

14 Sept 2018

Threat Model Thursday: Legible Architecture original ↗

23 Aug 2018

Toolbox: After a Conference original ↗

21 Aug 2018

Aretha Franklin original ↗

13 Aug 2018

Threat Modeling in 2018: Attacks, Impacts and Other Updates original ↗

13 Aug 2018

CSO on AppSec at the Speed of Devops original ↗

6 Aug 2018

CyberSecurity Hall of Fame original ↗

6 Aug 2018

Summer Reading List original ↗

31 Jul 2018

Threat Modeling Thursday: 2018 original ↗

26 Jul 2018

Half the US population will live in 8 states original ↗

24 Jul 2018

Hey, this movie looks pretty interesting!original ↗

20 Jul 2018

Keeping the Internet Secure original ↗

17 Jul 2018

Games and Cards original ↗

16 Jul 2018

Friday Star Wars original ↗

13 Jul 2018

Threat Modeling Thursday: 2018 original ↗

12 Jul 2018

Automotive Privacy original ↗

9 Jul 2018

Threat Model Thursdays: Crispin Cowan original ↗

5 Jul 2018

Continuum Interview original ↗

28 Jun 2018

Carpenter!original ↗

25 Jun 2018

Threat Model Thursday: Architectural Review and Threat Modeling original ↗

21 Jun 2018

Threat Model Thursday: Chromium Post-Spectre original ↗

14 Jun 2018

'EFAIL' Is Why We Can't Have Golden Keys original ↗

11 Jun 2018

Eagle vs Fox original ↗

10 Jun 2018

Conway's Law and Software Security original ↗

6 Jun 2018

The DREAD Pirates original ↗

31 May 2018

NTSB on Uber (Preliminary)original ↗

25 May 2018

Threat Model Thursday: Google on Kubernetes original ↗

24 May 2018

4 Common Missteps in Threat Modeling original ↗

21 May 2018

Joining the Continuum Team original ↗

15 May 2018

Just Culture and Information Security original ↗

9 May 2018

Redzone Podcast on threat modeling original ↗

7 May 2018

TESS Launch Closeup original ↗

1 May 2018

Best Cyber News Blogs, thanks!original ↗

30 Apr 2018

Threat Model Thursday: Q&A original ↗

26 Apr 2018

$35M for Covering up A Breach original ↗

24 Apr 2018

Designing for Good Social Systems original ↗

23 Apr 2018

Threat Modeling Thursday: #threatmodelhero original ↗

19 Apr 2018

346,000 Wuhan Citizens’ Secrets original ↗

13 Apr 2018

Threat Model Thursday: Talking, Dialogue and Review original ↗

12 Apr 2018

Security Engineering: Computers versus Bridges original ↗

11 Apr 2018

Gartner on DevSecOps Toolchain original ↗

10 Apr 2018

Threat Model Thursday: ARM's Network Camera TMSA original ↗

5 Apr 2018

John Harrison's Struggle Continues original ↗

3 Apr 2018

Reasonable Software Security Engineering Podcast original ↗

2 Apr 2018

Blaming the User original ↗

30 Mar 2018

Threat Model Thursday: ARM Yourselves!original ↗

29 Mar 2018

Ries on Gatekeepers original ↗

27 Mar 2018

Friday Star Wars: Trek and CISSP original ↗

23 Mar 2018

Threat Model Thursday: Synopsys original ↗

22 Mar 2018

Threat Modeling Panel at APPSEC Cali 2018 original ↗

20 Mar 2018

Speculative Execution Threat Model original ↗

15 Mar 2018

Citizen Threat Modeling and more data original ↗

14 Mar 2018

Threat Modeling: Citizens Versus Systems original ↗

8 Mar 2018

Threat Modeling Privacy of Seattle Residents original ↗

22 Feb 2018

BlackHat and Human Factors original ↗

19 Feb 2018

Keep the Bombe on the Bletchley Park Estate original ↗

15 Feb 2018

Doing Science with Near Misses original ↗

6 Feb 2018

AppSec Cali 2018: Izar Tarandach original ↗

30 Jan 2018

Jonathan Marcil’s Threat Modeling Toolkit talk original ↗

30 Jan 2018

Star Trek's Astromycologist original ↗

26 Jan 2018

AppSec California TM Panel original ↗

23 Jan 2018

Fire and building codes original ↗

19 Jan 2018

The Resistance Has Infiltrated This Base!original ↗

11 Jan 2018

Not Bugs, but Features original ↗

5 Jan 2018

Pen Testing The Empire original ↗

1 Jan 2018

2017

Threat Modeling Tooling from 2017 original ↗

28 Dec 2017

Portfolio Thinking: AppSec Radar original ↗

27 Dec 2017

Gavle Goat Gallantly Guarded original ↗

8 Dec 2017

Learning from Near Misses original ↗

4 Dec 2017

The Carpenter Case original ↗

28 Nov 2017

45 Years original ↗

25 Nov 2017

Averting the Drift into Failure original ↗

22 Nov 2017

Vulnerabilities Equities Process and Threat Modeling original ↗

20 Nov 2017

Microsoft's PCI Blueprint original ↗

14 Nov 2017

The Fights We Have to Fight: Fixing Bugs original ↗

8 Nov 2017

Data Flow Diagrams 3.0 original ↗

5 Nov 2017

Why is 'Reply' Not the Strongest Signal?original ↗

2 Nov 2017

Emergent Design Issues original ↗

29 Oct 2017

20 Year Software: Engineering and Updates original ↗

23 Oct 2017

Threat Modeling ‘App Democracy’original ↗

20 Oct 2017

Building an Application Security Team original ↗

15 Oct 2017

Worthwhile Books, Q3 original ↗

11 Oct 2017

Emergent Musical Chaos original ↗

7 Oct 2017

It's Not The Crime, It's The Coverup or the Chaos original ↗

26 Sept 2017

Parroting Bad Security Advice original ↗

22 Sept 2017

“The Readability Of Scientific Texts Is Decreasing Over Time”original ↗

20 Sept 2017

Threat Modeling and Architecture original ↗

18 Sept 2017

Threat Modeling Training (London!)original ↗

14 Sept 2017

Pie Charts, or this could be hell original ↗

13 Sept 2017

Breach Vouchers & Equifax 2017 Breach Links original ↗

7 Sept 2017

Open for Business original ↗

7 Sept 2017

Star Wars, Star Trek and Getting Root on a Star Ship original ↗

1 Sept 2017

Organizing Threat Modeling Magic original ↗

29 Aug 2017

Babylonian Triginometry original ↗

25 Aug 2017

Celebrating Alt-Left Lawlessness original ↗

17 Aug 2017

Amicus brief in “Carpenter” Supreme Court Case original ↗

16 Aug 2017

Learning From npm's Rough Few Months original ↗

15 Aug 2017

Interesting Monday Reads original ↗

14 Aug 2017