House Oversight Committee on Equifax
The House Oversight Committee has released a scathing report on Equifax...
Shostack + Friends Blog
Recent Blog Posts, Page 35
Structures, Engineering and Security
J.E. Gordon’s Structures, or Why Things Don’t Fall Down is a fascinating and accessible book. Why don’t things fall down? It turns out this is a simple question with some very deep answers.
Gavelblocken, 2018
The Gavle Goat is up.
Books which are worth your time: Q4
Some books worth reading.
Threat Modeling in 2018: Attacks, Impacts and Other Updates
Check out my talk from Blackhat 2018
Change in the Weather
Some recent changes in the weather...
Airline Safety
Airplanes are filthy...
Podcast with Ron Woerner
Another podcast, another chance to talk about Threat Modeling
Privacy Extension to Elevation of Privilege game
An extended version of Elevation of Privilege, now with Privacy.
Measuring ROI for DMARC
I'm pleased to be able to share work that Shostack + Associates and the Cyentia Institute have been doing for the Global Cyber Alliance.
GAO Report on Equifax
I still have questions...
Does PCI Matter?
It's certainly not a silver bullet...
The Architectural Mirror (Threat Model Thursday)
[no description provided]
CVE Funding and Process
[no description provided]
Space Elevator Test
Japan has launched a miniature space elevator.