Usable Security and Privacy for Engineers
The new IEEE S+P is all about usable security.
Shostack + Friends Blog
Recent Blog Posts, Page 21
Watermarks
Watermarks show us wierd edges of AI work
Application Security Roundup - January
So many interesting articles from AI to an organizatoion of socio-technical harms, fascinating incident reports about Uber and Circle CI and some history of attack trees.
Fumée d'incendie
I have a very occaisonally indulged fascination with giant art installations, and enjoyed digging into the story behind Fumée d'incendie, a 130 meter art installation where the Loire reaches the Atlantic Ocean. (Wikipedia.)
The Hacker Mind
Adam spoke with Robert Vamosi of The Hacker Mind podcast
Not all developers can be Jedi
Adam joined Paul Roberts on the Conversing Labs podcast
Threats, To The Supply Chain
The threats book is in the supply chain, inconsistently.
Friday Star Wars: Presidents Daily Brief
The return of the (my) Friday Star Wars posts
Threats Book Launch Party
The live launch party for Threats!
Threats Book is Complete
The serious side of the book
Threats: The Table of Contents
Like the Force, each threat has a light side, and a dark side.
Threat Modeling is Measure Twice, Cut Once
Threat Modeling is the software version of measure twice, cut once.
The Appsec Landscape in 2023
External changes will be driving appsec in 2023. It’s time to frame the decisions in front of you.
The Last 747
Thoughts on the last 747, and engineering culture.
Threat Model Thursday: curl
Looking at a threat model for curl, the command line web client.