Adam Shostack

/set font calibri Secret1!

How do I set my posting font in Bluesky?

Hey uhh threatsbook.com threats: what every engineer should learn from Star Wars.

This holiday season give the gift of fighting for what you love. Spend time with houseless punk kids who refuse to give up on each other in award-winner No Word For Water. Fortify your health boundaries with Covid Safety Handbook. Demand privacy with all-gender, all orientation Smart Girl's Guide.

Photo of the book OUT THERE: THE SCIENCE BEHIND SCI-FI FILM AND TV by Ariel Waldman with foreword from astronaut Mae Jemison

Ariel sitting on the ground in Antarctica with her camera and macro probe lens.

TL;DR:

✔️ Get a cool (signed!) sci-fi book
✔️ Support public media content
✔️ Give hope to an independent filmmaker

20% off here until December 7: www.patreon.com/138950/join 🧪

Watch:

I find slack works way better when used in browser tabs, not the electron app, because I can tell browser tabs to go away. I have two bookmark folders ("Slacks" and "Occasional Slacks")

The Adams family started
When Isla walked into Rick's Cafe...

ok, it needs workshopping, but I swear, we're onto something!

I ARE BAD AT Internetz

Shostack + Friends Blog > Windows Links and Usable Security Some dialogs can harm the viewer

@ericlawrence.com Consider yourself trolled :)

shostack.org/blog/windows...

If anyone says we "don't have enough evidence" on HepB vaccine safety, that's just wrong.

Our review has found 42 HepB RCTs plus decades of post-licensure monitoring (VAERS, VSD, FDA BEST, big cohort studies).

The problem isn't lack of data, it's ignoring it.

docs.google.com/spreadsheets...

I look forward to the metrics for “shaping adversary behavior” 🍿

Five-page draft Trump administration cyber strategy targeted for January release Trump administration plans January 2026 release of a six-part national cybersecurity strategy, focusing on deterrence, regulations, workforce, procurement, infrastructure, and emerging technologies.

Five pages? That's barely a strategylet! cyberscoop.com/trump-nation...

“Facing” is shorter than “designed, built and operated” but who builds a facility like this?

Detainees at ‘Alligator Alcatraz’ facing ‘harrowing human right violations’, new report alleges Amnesty International finds immigrants at Florida facility were shackled and left outside in metal cage for up to a day

Amnesty International: Detainees at Concetration Camp DeSantis "shackled inside a 2ft high metal cage and left outside without water for up to a day at a time".

www.theguardian.com/us-news/2025...

This is an absolutely brilliant thread

Scientific communication at its finest

“No country has ever reverted from universal to selective HBV birth dose vaccination because it works. It's been one of public health's quietest triumphs.”

I hope to goodness ACIP does not delay the birth dose

Hard to square all the talk about “gold-standard science” with an ACIP process that bars CDC hepatitis B experts and sidesteps the people holding the primary safety data. That’s not how you do science-driven policy.

First Marine Board of Inquiry into the Titan Hotel disaster is slated for 2028.

Meet Adam Shostack, founder and Executive Director of Shostack and Associates! ​Shostack helped create the CVE. Now, he's an Emeritus member of the Advisory Board, fixed Autorun for hundreds of… OSTIF Meet the Community- Adam Shostack

If you haven't met the OSTIF community and me, they have a special introduction for you.

Check out OSTIF's Meet the Community video to learn more about my professional experience and envisioned changes for the open source community.

Thanks to the OSTIF team for the great intro! shorturl.at/q9J8R

do you or someone you buy gifts for love speculative fiction? activism? HAVE I GOT THE BOOK FOR YOU! Getting fantastic reviews already! Out THIS TUESDAY!

We have always been at war with Venezuela.

This is explicitly confirming the allegation: that he's ordering the killings for their own sake. The logical implication of which is hit them again if there are any survivors, which is both exactly what the Post reported and a cold-blooded textbook war crime.

Ed Whelan was Principal Deputy Assistant Attorney General for OLC from 2001-2004, so when he suggests that laws of war have been violated by the executive branch, that’s… something

YouTube video by JimiHendrixVEVO The Jimi Hendrix Experience - Foxey Lady (Miami Pop 1968)

“Don't be reckless with other people's hearts. Don't put up with people who are reckless with yours.”

- Jimi Hendrix -.

youtu.be/_PVjcIO4MT4?...

If you’re serving a big meal today, take a second to garnish. The little bit of work will delight your guests and make everything look more appetizing!

--because the faster they earn out their advance, a) the faster they will start getting royalty payments and b) the higher an advance they can get for the next contract.

You could argue there’s zero, because the people who understand coding at the PHY layer don’t deal with (or really understand) the A/D hardware and the amps and filters at a deep level. (Not to even get into network layers, which are nightmarish, but aren’t really the “radio”.)

Don’t be redonculus. No one even understands how to make a pencil, never mind a 5g ue or base station and don’t get me started on backhaul. Even the people who build those networks have no idea

I bet they could add it as a subscription option?

And it doesn't have doors that will trap you in the vehicle.