@adamshostack.bsky.social
Threat modeling. BH Review Board. Affiliate Professor, UW. Fixed autorun. Helped create CVE. Not sure why we're building graphs on yet another (effectively) centralized system. https://infosec.exchange/@adamshostack
Just published the Feb 2026 Secure By Design AppSec Roundup — smart threat modeling tools like Flowstrider, a push for secure coding policy, OAuth/API key issues, emerging AI risks including agent auth & RCE findings, plus S+A news (new COO & first GPS threat advisory). is.gd/jAgBcg
03.03.2026 23:48 — 👍 3 🔁 0 💬 0 📌 0There will be a huge fight over whether copyright vests in works generated by a few humans using AI tools. That will determine whether it is economically viable for large creative industries to replace lots of human creators while still being able to window and monetize the content the AI spits out.
02.03.2026 20:51 — 👍 8 🔁 2 💬 2 📌 1
"Farewell, Felix" - a blog post by Nico Lindner and Recurity Labs on the passing of Felix "FX" Lindner. RIP FX :(
blog.recurity-labs.com/2026-03-02/F...
RIP FX - You are a legend
02.03.2026 05:03 — 👍 52 🔁 23 💬 6 📌 2It was hard for me to be chatting since we had a few folks watching from bsides, and the chat window was very small. I'm glad to be able to see it now.
02.03.2026 01:36 — 👍 1 🔁 0 💬 0 📌 0
This is really beautiful, wow. What they did with our chat...
youtu.be/uK41l_c2A_Q
🕯️ Par’s Memorial 🕯️
Link below.
Please watch the CHAT video in the description.
Rest in peace, Jason Snitker
Legend. Always.
youtu.be/0qMRIZWCrJw?...
bluesky clippy: hey there! you seem to be mad at something but not the person you’re yelling at. would you like some help self-regulating?
28.02.2026 23:24 — 👍 2378 🔁 331 💬 24 📌 7Japan seems like a counter example to the restoration of democracy theme?
01.03.2026 00:07 — 👍 1 🔁 0 💬 1 📌 0
The judges in WV have seen enough.
They say that if the ICE continues detaining people in ways they have unanimously deemed illegal they will start issuing civil fines and contempt findings — including against state officials who help them carry it out.
storage.courtlistener.com/recap/gov.us...
So mass surveillance is ok as long as it doesn’t “target” Americans?
28.02.2026 03:52 — 👍 1 🔁 0 💬 0 📌 0Good morning BSides SEA. I’ll be presenting at 3pm on A New Hope for layering defenses. Come for the Star Wars references, stay for the collaboration.
27.02.2026 19:00 — 👍 3 🔁 1 💬 0 📌 0It’s not fraud because they wrote the words “risks include: we might be defrauding some investors” on page 1,372 of the prospectus.
27.02.2026 05:07 — 👍 3 🔁 0 💬 0 📌 0Venture capital, baby
27.02.2026 05:03 — 👍 2 🔁 0 💬 0 📌 0
Has Jack Dorsey ever run a profitable company?
That seems sort of relevant in evaluating his claim that AI changes everything.
ICYMI: The DEF CON 33 Hackers' Almanack is out now.
Hackers have made it clear what policymakers should know and quickly act upon.
It's time to start listening to what the experts have to say⬇️
harris.uchicago.edu/sites/defaul...
#CyberCivilDefense #Take9 #HackersAlmanack
AI controls are now live in Firefox 148. A single place to manage, customize, or completely block AI features in the browser.
See how it works here ⬇️ blog.mozilla.org/en/firefox/h...
I'm old enough to remember when you didn't need ID to get on a plane, and I'm old enough that no one asks me for ID for beer.
24.02.2026 21:49 — 👍 3 🔁 0 💬 0 📌 0
This leads to the F index: the highest number of fiction authors each of which you have read F books by. I think mine is 8:
Adrian McKinty
John Grisham
Tana French
Kurt Vonnegut
Agatha Christie
Stephen King
Michael Connelly
Carl Hiaasen
Walter Mosely
“The Congress shall have power…to declare war.”
23.02.2026 00:32 — 👍 649 🔁 109 💬 33 📌 10
No public school, school district, or public employee acting in an official capacity shall engage in the pedagogy, praxis, or inculcation of critical theories or related practices that promote division, dialectical world-views, critical consciousness, or anti-constitutional indoctrination.
Sorry I missed this the other day. New Hampshire Republicans are literally banning the teaching of dialectical thought. What a world.
(Bill passed House, now goes to Senate with GOP majority, and then to GOP governor.)
newhampshirebulletin.com/2026/02/19/h...
22.02.2026 21:04 —
👍 2
🔁 0
💬 0
📌 0
oh, no, I meant if you're an attacker, operate one, and then leave it mis-configured so you can have deniability.
22.02.2026 21:02 — 👍 1 🔁 0 💬 1 📌 0
I mean, "provides direct access to the core cell network" seems like a pretty good reason to operate one!
😉
I submit, respectfully, that you're weird. 😁
22.02.2026 18:13 — 👍 2 🔁 0 💬 0 📌 0
It's never a good sign when someone needs to declare someone else's "real name," that they can define for you.
In a free society, you can call yourself whatever you want, introduce yourself that way, & expect polite people to call you that.
You don't remember Bob Dylan's other name … & who cares?
This is incredibly blunt antisemitism, obviously, but it's worth pointing out that the core of it—that Jews are not "true" Jews or are perhaps even fake—is maybe second most common antisemitic belief in America and has been rapidly spreading across the left for quite a while.
22.02.2026 16:02 — 👍 386 🔁 73 💬 14 📌 3