Author, game designer, technologist, teacher.
Helped to create the CVE and many other things. Fixed autorun for XP. On Blackhat Review board.
Books include Threats: What Every Engineer Should Learn from Star Wars (2023), Threat Modeling: Designing for Security, and The New School of Information Security.
Following back if you have content.
| Website | https://shostack.org |
| Latest book | https://threatsbook.com |
| Opsec status | Currently clean |
| Youtube | https://youtube.com/shostack |
Since Palantir is asking "inclusion into what" my answer is: the American dream. People from anywhere can come here, work hard, and make a better life for themselves and their kids, regardless of creed or color.
I hope that clears things up for them.
https://bsky.app/profile/did:plc:gvda6fem6r7selm4gzjjww4a/post/3mjtxuerknk2r
RE: https://infosec.exchange/@owasp/116420882074866844
Want to present a talk at the #OWASP Global #AppSec Conference 2026 in San Francisco in November?
Call For Papers is now open
👇
"Tests of intelligence and brain function showed the same results whether or not people drank fluoridated water growing up, a highly anticipated, long-term study found.
The new research, published Monday in the respected Proceedings of the National Academy of Sciences, is the first to measure community water fluoridation exposure during childhood in the U.S. and any potential impact on cognition up to age 80."
Ask the Candidates for ACM President!
First batch of Q&A posted.
Very cool initiative from @vardi : ask questions to the 2026 candidates for presidency of @ACM !
It's here https://www.cs.rice.edu/~vardi/acmelection2026/
you can upvote existing questions and you don't need to be an ACM member. Currently, many of the questions on the onlinequestions.org instance are indeed points I'd very much like to see ACM address...
Well.
That's not at all an absolutely horrifying idea.
Nope.
(Headline: AI’s New Training Data: Your Old Work Slacks And Emails
Defunct startups are being liquidated for their Slack archives, Jira tickets, and email threads—operational exhaust that AI labs now treat as premium training data. )
Kymberlee Price uses her experience with secure design engineering practices to suggest ways to measure the ROI of threat modeling that track impact, not just activity, in our latest blog post .
stephen ryner jr. 🦉
Mike Sheward
Sam Stepanyan 
🐘
Bich Nguyen
Moshe Vardi
a3nm
VM (Vicky) Brasseur
Shostack + Associates