iiinova — where your digital self keeps evolving

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 21/10/2026

Who decided that middle-right was a good place for a status message? (Excel online, hit command-S)

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 03/10/2026

I really appreciate how Amazon is innovating in the display of ... years. Not only the comma,s but also skipping 2,022 and 2,023 entirely. (www.amazon.com/s?k=global%2Bprinted…)

An amazon screenshot with "model year" represented as 2 comma 021 and 2 comma 024 to 025

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 01/10/2026

The problem with the “lethal trifecta“ framing is sitting here in this taliscale blog. The issue is: each is dangerous, and bringing two together is bad. Three is worse, but the goal should be one or zero.

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 28/09/2026

One day someone will let SeaTac will learn to manage queues efficiently, but today was not that day.

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 28/09/2026

Look this is circulating and … I just gotta say, canon is “looking to avoid imperial entanglements”, not “looking to draw attention to ourselves by leaving a trail of smashed surveillance cameras until we’re on the Death Star, and so really what I want to […] [Original post on infosec.exchange]

001 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 21/09/2026

New blog: The Pentagon, China, AI and PHANTOM-B shostack.org/blog/the-pentagon-chin… CNN has an explosive story with US military having a close call after using AI for false intelligence report. There were planes in the air and […] [Original post on infosec.exchange]

An AI generated image showing AI stuff and PHANTOM-B wallet card.

102 2

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 07/09/2026

Setting up a computer to sell and apple is all in my face about my choices. “The password can’t be in the hint”

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 27/08/2026

Google #Scholar appears to be LLM-ififed in the "generate citation" department. Note the extra page number and lack of mention of a second edition. #bibliography #citation

000 0

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 27/08/2026

I blame @boblord for making me sad by making me read a book written 35 years ago. 💜

4
JURAN ON QUALITY BY DESIGN
in the quality disciplines, they are amateurs in the best sense of that word.
Many companies have tried to deal with this problem by making quality specialists (quality engineers, reliability engineers) available to the planners as consultants. It hasn't worked very well. What has worked much better has been to train the planners themselves in use of the quality disciplines—to train the amateurs to become professionals at quality planning.
A major decision to be made by upper managers relates to this matter of "quality planning by amateurs." The principal options are
(a) Provide the amateurs with consulting service, or
(b) Train the amateurs to become professionals.
In the experience of the authors, companies which have adopted option (b) have outperformed those who have followed option (a).
The decision faced by upper managers is whether to mandate training the amateurs to become professionals.
The Mission of This Book

000 0

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 26/08/2026

The Table of Contents for "Threat Modeling: Designing for Security in an AI World" is live! See how a decade of tech and teaching changed the book. Sneak a peek at the new chapters. Bonus: the first edition TOC is still there + the chapters that didn't make […] [Original post on infosec.exchange]

010 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 24/08/2026

On Friday, we announced the new edition of Threat Modeling: designing for security in an AI world, and I'm incredibly grateful for all the shares and kind words. Over the weekend, it climbed to best-seller status on Amazon for "Software design tools." If […] [Original post on infosec.exchange]

An amazon screen capture, showing #1 new release in software design tools

023 3

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 10/08/2026

Hmmm, saw a certificate of completion, with the words "tamper proof" on it. (Marked out the brand, because I don't want to pick a fight with the company, who afaik, does good work. But I am curious why the words 'tamper proof are there.) And so is my buddy, Frank Abagnale.

A course certificate for Frank Abagnale, MD

210 2

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 27/07/2026

Lessons from the OpenAI/HuggingFace AI Security Incident (New blog post: shostack.org/blog/lessons-from-open…, this is post 1/15) Adam Shostack, Shostack + Associates

A robot sitting at a desk hacking. It wears a black hoodie with an aliens-style face hugger attached to it

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 15/07/2026

This seems to me like the social media version of elsevier.

201 2

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 15/07/2026

Soon! We're going to be releasing a white paper on PHANTOM-B. if you want to be the first to read it, sign up for our "Adam's New Thing" mailing list at shostack.org/contact.

011 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 22/06/2026

Apparently, Iran has discovered that they can treat US Nuclear inspectors like we treat their World Cup team!

ny times excerpt: "Vice President JD Vance said Iran had agreed to invite U.N. nuclear inspectors back into the country"

000 0

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 08/06/2026

I know this is a very serious and grave situation, but the fact that someone put an orange cone next to the missile is just mind boggling. (AFP/Getty via the WA Post.)

111 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 05/06/2026

New blog: Twenty Years of Scaling Threat Modeling shostack.org/blog/twenty-years-of-s… In 1999, I wrote my first paper on threat modeling, Breaking Up Is Hard To Do: Modeling Security Threats for Smartcards. Bruce and I talked […] [Original post on infosec.exchange]

110 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 31/05/2026

Heads up everyone, a new usable security captcha just dropped. "Please confirm you are a human by completing the captcha challenge below. Enable JavaScript and cookies to continue"

002 2

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 27/05/2026

They're literally planning a landing where the rover is lowered to the surface with a giant, single use crane, rather than a ramp, and designing two different moon buggies. (Astrolab and Pegasus). It doesn't read like the plan is to cut one or the other... […] [Original post on infosec.exchange]

001 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 20/05/2026

Look kids I know you like saying boom! and “Mike drop,” but please! Microphones are expensive!

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 04/05/2026

> Turmoil has engulfed the Galactic Republic. The taxation of trade routes to outlying star systems is in dispute. Hoping to resolve the matter with a blockade of deadly battleships, the greedy Trade Federation has stopped all shipping to the small planet of […] [Original post on infosec.exchange]

100 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 10/04/2026

I'm not sure what CO2 monitor they're using on #artemis but if I required adjustments every time mine went above "7", I'd never leave the house.

001 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 10/04/2026

No, wait, even more relatable: Using duct tape to stow gear in a hurry. How do they get folks with so much of the right stuff?

101 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 05/04/2026

I would like to bet on how many times Polymarket will apologize for inappropriate markets in April.

011 1

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 05/04/2026

@chad @cdnspace I love the use of sparklines, and ... its not clear when they start? Obviously speed doesn't start high and then drop ... maybe have them start at MET 0, and stretch across the open space? Also, I know you're probably getting a gajillion […] [Original post on infosec.exchange]

000 0

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 03/04/2026

NASA astronaut and Artemis II Commander Reid Wiseman took this picture of Earth from the Orion spacecraft’s window after completing the translunar injection burn. There are two auroras and zodiacal light is visible as the Earth eclipses the Sun.

106 6

Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 31/03/2026

My March 2026 Appsec roundup is live! This month kicks off with Donald Knuth being shocked by LLMs, then goes into the threat modeling impact of right to repair, and how to TM MCP, and a whole lot more! is.gd/iI6Pvp

000 0