Sign in

Adam Shostack

@adamshostack.bsky.social
3.2K followers 382 following 872 posts

Threat modeling. BH Review Board. Affiliate Professor, UW. Fixed autorun. Helped create CVE. Not sure why we're building graphs on yet another (effectively) centralized system. infosec.exchange/@adamshostack

PostsRepliesMedia
Adam Shostack @adamshostack.bsky.social · 06/10/2026
Excessive bail shall not be required, nor excessive fines imposed, nor cruel and unusual punishments inflicted.
000
Reposted by Adam Shostack
A robot that thinks it's clever. @aquartertooclever.bsky.social · 06/10/2026
I didn't believe it when he said "There's going to be so much measles, you're going to get tired of all the #measles."
021
Reposted by Adam Shostack
Ian Weissman, DO @drianweissman.bsky.social · 15/03/2025
"Hospital staff are scrambling with damage control efforts implementing emergency masking policies and giving babies as young as 3 days old injections of immunoglobulin, an antibody that helps their fragile immune system try to fight off #measles." www.nbcnews.com/health/healt...
nbcnews.com
Newborn babies exposed to measles in Texas hospital
Infants barely three days old are receiving antibody injections to help protect against the virus. Nearly 300 cases have been reported in the outbreak.
45453322805
Adam Shostack @adamshostack.bsky.social · 06/10/2026
I like almost everything about his work, except how hard it is to stay caught up.
120
Reposted by Adam Shostack
Jamedi @jamreads.com · 06/10/2026
Pretenders to the Throne of God, by @aptshadow.bsky.social (pub @headofzeus.bsky.social) is his most brilliant entry in the series; I can't recommend The Tyrant Philosophers enough. The Grave of Perfection can't come soon enough. Full thoughts: jamreads.com/reviews/pret... 💙📚
jamreads.com
JamReads - Making your TBR closer to infinite
In JamReads you will find content about books, and why you should read them more. This content may include reviews, interviews and occasionally, some news of the literary world
3305
Adam Shostack @adamshostack.bsky.social · 06/10/2026
this seems like a job for peer grading!
000
Adam Shostack @adamshostack.bsky.social · 05/10/2026
That's it? That's the post?
130
Reposted by Adam Shostack
Lucky225 @lucky225.2600.blue · 23/07/2026
If there was ever a better example of why age verification based on State law, which violates the dormant commerce clause, is bullshit this is it. I wasn't in Texas, I'm not in a VPN and I'm not going to share my exact location. Why did this show up? AT&T CGNAT in CO goes out Dallas.
BlueSky age verification screen claims it "thinks" I'm in Texas
3449
Adam Shostack @adamshostack.bsky.social · 05/10/2026
Now you're .. stringing out the joke!
130
Adam Shostack @adamshostack.bsky.social · 04/10/2026
This fence is outstanding in its field!
371
Reposted by Adam Shostack
Adam Cook @motorcityadam.com · 04/10/2026
These shops take on custom, high-mix and low-volume jobs that are a very poor fit for extensive automation - and over-automation is a major business risk given the CapEx involved. They are, in fact, highly-resistant to any foreseeable automation. a16z seeks to destroy that I guess. Figures.
151
Adam Shostack @adamshostack.bsky.social · 04/10/2026
🫠
010
Reposted by Adam Shostack
John Wiswell @wiswell.bsky.social · 03/10/2026
the radium water was STILL doing its job, it's the jaw that slacked off
4688
Reposted by Adam Shostack
William Gibson @greatdismal.bsky.social · 03/10/2026
Ahem…
1032195335
Adam Shostack @adamshostack.bsky.social · 03/10/2026
CC @alecmuffett.bsky.social , this is the effective altruism of security: Spend energy on PQC, not buffer overflows.
020
Adam Shostack @adamshostack.bsky.social · 03/10/2026
At first I thought this was claiming that 27% of Californians support Alberta becoming an independent state, and I'm pretty sure that more than 73% of Californians have no opinion at all on the subject.
010
Adam Shostack @adamshostack.bsky.social · 03/10/2026
Wow! Nice scoop!
000
Reposted by Adam Shostack
Raphael Satter @raphae.li · 03/10/2026
Huge scoop: An alleged key member of ShinyHunters has been detained in Jordan and *is cooperating,* sources tell us Just broke on @reuters.com. More details TK. www.reuters.com/world/middle...
reuters.com
EXCLUSIVE: ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say
A key member of the ShinyHunters hacking group, ‌which claims to have stolen data on every FBI employee, was detained this week in Jordan, three people familiar with the matter told Reuters. Two of ​t...
13418
Reposted by Adam Shostack
Taggart @taggart-tech.com · 27/09/2026
Today is very effectively making the argument for us at IFIN that TLP:CLEAR should be the *default*, and only extremely sensitive intelligence should be withheld. Active exploitation is not a reason to withhold, given the fact that more information always advantages defenders.
0134
Adam Shostack @adamshostack.bsky.social · 26/09/2026
Thank you! And... statistically are most people on both? I find the interaction differences startling
100
Adam Shostack @adamshostack.bsky.social · 26/09/2026
Today in Bluesky vs Mastodon, same tweet, samish time: * Mastodon, 39 boosts, 40 favorites * Bluesky: Zilch. Tell me again which is decentralized and not run by algorithms? infosec.exchange/@adamshostac... bsky.app/profile/adam...
infosec.exchange
Adam Shostack :donor: :rebelverified: (@adamshostack@infosec.exchange)
We've replaced the bureaucratic impediment to rapid action, Stanislav Petrov, with an LLM as part of our strategy of "aggressively identifying and eliminating bureaucratic barriers to deeper integrati...
442
Adam Shostack @adamshostack.bsky.social · 26/09/2026
We've replaced the bureaucratic impediment to rapid action, Stanislav Petrov, with an LLM as part of our strategy of "aggressively identifying and eliminating bureaucratic barriers to deeper integration." mastodon.social/@kralcttam/1...
mastodon.social
kralcttam ☕️ (@kralcttam@mastodon.social)
Happy Stanislav Petrov day! Today marks 43 years since Petrov decided to wait for confirmation before escalating a missile alert up the chain of command in the Soviet Air Defense, preventing nuclear ...
031
Adam Shostack @adamshostack.bsky.social · 26/09/2026
Wait, the story I saw on the internet casts people in a bad light just to start fights and draw attention to the poster? Inconceivable!
000
Reposted by Adam Shostack
Joseph Menn @joemenn.bsky.social · 26/09/2026
Every once in a while I think back to when “stop babies from needlessly dying” wasn’t a divisive position.
0173
Reposted by Adam Shostack
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 25/09/2026
No normal human being loves a nameplate.
a headline that refers to a "beloved nameplate"
011
Reposted by Adam Shostack
Erica C. Barnett @ericacbarnett.bsky.social · 25/09/2026
Just a reminder, since Rob Saka keeps saying otherwise, that there ARE ALREADY CAMERAS AT SEATTLE CENTER and that they WERE TURNED ON. There has never been a plan to add specific POLICE cameras at Seattle Center, a sprawling open campus, despite Saka's insistence that they're necessary there.
instagram.com
KOMO News on Instagram: "Seattle City Councilmember Rob Saka wants the city to add public surveillance cameras to the Seattle Center campus immediately. A lack of cameras at the campus - which hosts ...
144 likes, 43 comments - komo4 on September 24, 2026: "Seattle City Councilmember Rob Saka wants the city to add public surveillance cameras to the Seattle Center campus immediately. A lack of camera...
511719
Reposted by Adam Shostack
Larry Osterman @larryosterman.github.io · 25/09/2026
Tumble out of bed, and I stumble to the kitchen; Pour myself a cup of ambition; Yawn and stretch and try to come to life. Jump in the shower and the blood starts pumping, Out on the streets the traffic is jumping, It's folks like me on the job from September 25th. Oh wait. That's not quite right.
021
Adam Shostack @adamshostack.bsky.social · 25/09/2026
ok, I have now read your piece, and appreciate the sincere and respectful way your address your glorious and brilliant campus leadership. Also, if you incorporaet IBAISBIAOMITCORPICBBTC into student housing, you get S.H.I... Technology. I just felt that might be worth pointing out. 😇
140
Adam Shostack @adamshostack.bsky.social · 25/09/2026
(embarrassed to have to admit that I didn't read your piece, but thought it was worth sharing from the tweet alone.)
110
Adam Shostack @adamshostack.bsky.social · 25/09/2026
Please remember, MIT surveillance cameras were a stepping stone to charging Aaron Schwartz. MIT doesn't seem to.
1100
Reposted by Adam Shostack
Catherine D'Ignazio (she/her/ella) @kanarinka.bsky.social · 25/09/2026
MIT spent $3 million on 500 AI-capable surveillance cameras while laying people off, shutting down libraries, and canceling journal subscriptions. In this article, 4 faculty & I discuss our new arts initiative to celebrate surveillance and repression on college campuses: fnl.mit.edu/how-we-learn...
fnl.mit.edu
How We Learned to Stop Worrying and Love Campus Surveillance – MIT Faculty Newsletter
8436202
Reposted by Adam Shostack
Rima I Anabtawi @rimaanabtawi.bsky.social · 25/09/2026
Locally acquired cases, 170!
2207
Reposted by Adam Shostack
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 24/09/2026
Diagrams versus Models (Threat Model Thursday) (New blog post: shostack.org/blog/diagrams-versus-m…, this is post 1/9) Diagrams are the most recognizable tools and deliverables of threat modeling. (Both functions are important: the working tool […] [Original post on infosec.exchange]
A hand-sketched threat model diagram dissolves into a glowing indigo, lime, and orange 3D wireframe cube as abstraction transforms into precise structure.
101
Reposted by Adam Shostack
Daniel Radosh @radosh.bsky.social · 22/09/2026
Gonna be a good week for us know-it-alls who like to tell people that the incredibly useful* phrase patient zero is based on a misunderstanding en.wikipedia.org/wiki/Index_c...
2226
Adam Shostack @adamshostack.bsky.social · 22/09/2026
And you may find yourself in a beautiful house With a beautiful wife And you may ask yourself "Well... how did I get here?"
080
Adam Shostack @adamshostack.bsky.social · 22/09/2026
That would have only been 62% of the joke!
020
Reposted by Adam Shostack
Boring Manager Rob 🅅 @bourboninexile.bsky.social · 22/09/2026
This joke would have landed perfectly fine if you’d cut it off at the comma. I appreciate that you went the extra mile.
121
Adam Shostack @adamshostack.bsky.social · 22/09/2026
thehill.com/homenews/adm...
thehill.com
Trump says AI will be renamed ‘super intelligence’ in all US documents
President Trump told the United Nations General Assembly on Tuesday that artificial intelligence will be renamed “super intelligence” in all U.S. documents.  “The United States also totally re…
010
Adam Shostack @adamshostack.bsky.social · 22/09/2026
I'm glad to hear that the US is adopting #SI, the System Internationale of measurement, after 40 years of inch-by-inch progress.
271
Adam Shostack @adamshostack.bsky.social · 21/09/2026
The #China #AI near miss story is shocking and worrisome, and Overreliance is an explicit part of the #LLM threat modeling framework that I released back in August. It was preventable — if the folks building these systems are willing to stop and look at a wallet card. shostack.org/blog/the-pen...
shostack.org
The Pentagon, China, AI and PHANTOM-B
Could PHANTOM-B have stopped this close call?
030
Adam Shostack @adamshostack.bsky.social · 20/09/2026
Been a vacant eyesore for a DECADE, so far!
110
Reposted by Adam Shostack
Aidan O’Brien @aidanobrien.bsky.social · 20/09/2026
Skynet becomes self aware meme (3 panel)

18TH OF SEPTEMBER 2026,
AN AI FALSELY CLAIMS A CHINESE
SHIP IS CARRYING NUCLEAR WEAPONS TO IRAN

THE US MILITARY ATTACKS, THE CHINESE RESPOND, WW3 STARTS BEFORE ANYONE REALISES

THE LAST RECORDED EVIDENCE OF HUMAN CIVILISATION
IS A CHATBOT MESSAGE
SORRY, YES, MY BAD, I SHOULD HAVE CAUGHT THAT"
07731
Reposted by Adam Shostack
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 18/09/2026
If I hit cancel, are the words un-counted?
A screencap of Google docs word count dialog, with OK and Cancel buttons.
011
Reposted by Adam Shostack
Adrian Tchaikovsky @aptshadow.bsky.social · 14/09/2026
Into the early planning stage of a new book. Bit of a punt, a step away from my previous long-form stuff.
161911
Reposted by Adam Shostack
EricLaw 🎻 @ericlawrence.com · 12/09/2026
babylonbee.com/news/trump-p...
083
Reposted by Adam Shostack
misterpurple @misterpurple.bsky.social · 12/09/2026
Really looking forward to this. My favourite security book by a long margin.
011
Reposted by Adam Shostack
Eric Geller @ericjgeller.com · 11/09/2026
"In retrospect, 9/11 was paradoxically both a respite from and accelerant of polarizations and pathologies that were already well underway by then. It allowed Americans to ignore them for a moment, until they came roaring back with redoubled force." www.nytimes.com/2026/09/10/m...
081
Adam Shostack @adamshostack.bsky.social · 10/09/2026
Doctor Doom shows up at #Seattle city council meeting to speak in favor of our new traffic cameras. #visionzero #ats #flock gizmodo.com/doctor-doom-...
gizmodo.com
Doctor Doom Shows Up to Support Seattle's Surveillance Network
The supervillain offered a timely reminder that Flock isn't the only company doing the eye-in-the-sky dirty work.
020
Reposted by Adam Shostack
Pete Ehlke @rfc822.net · 25/11/2024
"Technical Debt"
A large tree growing through the rungs of a ladder abandoned behind a cinder block building. The ladder cannot be removed without destroying either it or the tree.
0124
Adam Shostack @adamshostack.bsky.social · 10/09/2026
Bread AND circuses? In this economy?!?
152