1<!DOCTYPE html> 2<html lang="en"> 3 4 <head> 5 <!-- Google Tag Manager --> 6
6<script>
vendor: 323 bytes, line 6
6(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','
6GTM-KC7S55M
vendor: 3 bytes, line 6
6');
6</script>
6 7 8 <meta charset="utf-8"> 9 <meta http-equiv="X-UA-Compatible" content="IE=edge"> 10 <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> 11 <meta name="generator" content="Eleventy v3.1.2"> 12 13 <link href="https://shostack.org/feed.xml" rel="alternate" title="Shostack RSS Feed" type="application/atom+xml"/> 14 15 <title>Search the Shostack Site & Blog | Shostack + Associates</title> 16 17 <link rel="icon" type="image/png" href="/img/site/green-lock-favicon.png"> 18 <link rel="shortcut icon" href="/img/site/green_lock_favicon.ico"> 19 20 <link rel="stylesheet" type="text/css" href="/css/style.css"> 21 <link rel="stylesheet" type="text/css" href="/fontawesome/css/all.css"> 22 23 <meta name="description" content=""> 24 25 <!-- Open Graph --> 26 <meta name="twitter:card" content="summary_large_image" /> 27 <meta name="twitter:creator" content="@adamshostack" /> 28 <meta property="og:url" content="https://shostack.org/search.html" /> 29 <meta property="og:title" content="Search the Shostack Site & Blog | Shostack + Associates" /> 30 <meta property="og:type" content="website" /> 31 <meta property="og:description" content="" /> 32 <meta property="og:image" content="https://shostack.org/img/Shostack-logo-for-social-white-bg.jpg" /> 33 <!-- bonus OG tags --> 34 35 36 37 38 </head> 39 40 <body> 41 <!-- Google Tag Manager (noscript) -->
vendor: 70 bytes, lines 41-42
41 42 <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=
42GTM-KC7S55M
vendor: 86 bytes, lines 42-44
42" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> 43 44
44<!-- hidden skip link for screen readers --> 45 <div id="skip"><a href="#main-content">Skip to main content</a></div> 46 47 48<nav class="topmenubar reversed" role="navigation"> 49 <a href="/"> 50 <img id="main-logo" src="/img/Shostack-logo-white.png" alt="Shostack and Associates logo, click for Homepage" width="248" height="60"> 51 </a> 52 <button id="menu-icon" aria-expanded="false" aria-controls="menu" title="Menu"></button> 53 <ul id="menu"> 54 55 <li class="has-submenu"><a href="/about">About</a> <i class="far fa-chevron-down"></i> 56 <ul class="submenu"> 57 <li><a href="/about">Shostack + Associates</a></li> 58 <li><a href="/about/adam">Adam Shostack</a></li> 59 <li><a href="/partners">Our Partners</a></li> 60 </ul> 61 </li> 62 <li class="has-submenu"><a href="/training">Services</a> <i class="far fa-chevron-down"></i> 63 <ul class="submenu"> 64 <li><a href="/training">Training</a></li> 65 <li><a href="/secure-design-accelerator">Accelerator</a></li> 66 <li><a href="/speaking">Speaking Requests</a></li> 67 <li><a href="/consulting">Consulting</a></li> 68 </ul> 69 </li> 70 <li class="has-submenu"><a href="/resources">Resources</a> <i class="far fa-chevron-down"></i> 71 <ul class="submenu"> 72 <li><a href="/resources">Overview</a></li> 73 <li><a href="/resources/threat-modeling">Threat Modeling</a></li> 74 <li><a href="/books">Books</a></li> 75 <li><a href="/tm-games">Games</a></li> 76 <li><a href="/resources/cyber-public-health">Cyber Public Health</a></li> 77 <li><a href="/resources/lessons">Lessons Learned</a></li> 78 <li><a href="/resources/videos">Videos</a></li> 79 <li><a href="/resources/whitepapers">Whitepapers</a></li> 80 </ul> 81 </li> 82 <li><a href="/blog">Blog</a></li> 83 <li><a href="/contact">Contact</a></li> 84 <li><a href="/search" title="search icon"><i class="fas fa-search"></i></a></li> 85 </ul> 86 87</nav> 88 89<main class="page has-sidebar"> 90 91 <section id="main-content"> 92 <nav class="breadcrumbs" aria-label="Page Location" itemscope itemtype="http://schema.org/BreadcrumbList"> 93 <ol> 94 <li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem"> 95 <a href="/" itemprop="item"> 96 <span itemprop="name">Shostack + Associates</span> 97 </a> 98 <meta itemprop="position" content="1" /> 99 </li> 100 101<li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem" aria-current="page"> 102 <span itemprop="name" class="current">Search</span> 103 <meta itemprop="position" content="2" /> 104</li> 105 106 </ol> 107 </nav> 108 109 <h1 class="page-title">Search the Shostack Site & Blog</h1> 110 <div id="title-underpill"> </div> 111 112 113 <div class="onsite-search"> 114 <p>Use this form to search through recent blog posts (requires Javascript):</p> 115 <form action="search.html" method="get" class="search" id="onsite-search-form"> 116 <label for="search-str">What are you looking for?<br></label> 117 <input type="text" name="q" id="onsite-search-str"></p> 118 <button type="submit" class="submit" id="onsite-search-btn">Search the Shostack Blog</button> 119 </form> 120 <div id="onsite-search-results"></div> 121 </div> 122 123 <div class="divider"> </div> 124 125 <div class="basic-search"> 126 <p>Use this form to search the entirety of <b>shostack.org</b>, including older blog entries, couresty of Google Indexing:</p> 127 <form action="https://www.google.com/search" method="get" class="search"> 128 <input type="hidden" name="q" id="q" value="site:https://shostack.org"> 129 <label for="google-search-str">Search <small style="font-style:italic;">(results will be displayed on Google's site)</small><br></label> 130 <input type="text" name="q" id="google-search-str"></p> 131 <button type="submit" class="submit">Search with Google</button> 132 </form> 133 </div> 134 135
135<script type="text/javascript"> 136 (function (window, document, undefined) { 137 let form = document.querySelector("#onsite-search-form"); 138 let input = document.querySelector("#onsite-search-str"); 139 let resultsList = document.querySelector("#onsite-search-results"); 140 141 let articleHTML = function(article) { 142 let html = 143 '<article class="search-result">'+ 144 '<a href="'+article.url+'"><h3>'+article.title+'</h3></a><p class="post-excerpt"><span class="postmeta">('+article.date+')</span> '+article.excerpt+'</p></article>'; 145 return html; 146 } 147 148 // fetch JSON data 149 fetch('/search.json').then(function(response) { 150 return response.json(); 151 }) 152 .then(function(response) { 153 const searchIndex = response.search; 154 form.addEventListener('submit', function(e){ 155 e.preventDefault(); 156 157 // look for matches in each item in the JSON 158 var results = []; 159 for(var entry in searchIndex) { 160 var found = searchIndex[entry].text.indexOf(input.value); 161 if(found != -1 ) { 162 results.push(searchIndex[entry]) 163 } 164 } 165 166 // display results 167 let resultsOutput; 168 if(results.length < 1 ) { 169 resultsOutput = "<p>Sorry, no results found.</p>"; 170 } else { 171 resultsOutput = '<p>Found '+ results.length +' matching articles, listed with most recent post first.</p><div class="divider"> </div>'; 172 resultsOutput += results.map(function (article) { 173 return articleHTML(article); 174 }).join('<div class="divider"> </div>'); 175 } 176 resultsList.innerHTML = resultsOutput; 177 }); 178 }); 179 })(window, document); 180 </script>
180 181 182 </section> 183 184 <aside class="sidebar blog-sidebar" aria-label="Sidebar"> 185 186 187 <h2>All Blog Categories</h2> 188<div class="tagslist"> 189 190 191 <p><a href="/blog/category/id-management">ID management</a></p> 192 193 194 <p><a href="/blog/category/nsa-wiretaps">NSA wiretaps</a></p> 195 196 197 <p><a href="/blog/category/the-new-school">The New School</a></p> 198 199 200 <p><a href="/blog/category/threat-modeling-book">Threat Modeling book</a></p> 201 202 203 <p><a href="/blog/category/threats-book">Threats book</a></p> 204 205 206 <p><a href="/blog/category/accessibility">accessibility</a></p> 207 208 209 <p><a href="/blog/category/adversaries">adversaries</a></p> 210 211 212 <p><a href="/blog/category/advisory-boards">advisory boards</a></p> 213 214 215 <p><a href="/blog/category/ai">ai</a></p> 216 217 218 <p><a href="/blog/category/air-travel">air travel</a></p> 219 220 221 <p><a href="/blog/category/amusements">amusements</a></p> 222 223 224 <p><a href="/blog/category/application-security">application security</a></p> 225 226 227 <p><a href="/blog/category/argument">argument</a></p> 228 229 230 <p><a href="/blog/category/art">art</a></p> 231 232 233 <p><a href="/blog/category/awareness">awareness</a></p> 234 235 236 <p><a href="/blog/category/awesomeness">awesomeness</a></p> 237 238 239 <p><a href="/blog/category/best-practice">best practice</a></p> 240 241 242 <p><a href="/blog/category/best-practices">best practices</a></p> 243 244 245 <p><a href="/blog/category/blogging">blogging</a></p> 246 247 248 <p><a href="/blog/category/blogs">blogs</a></p> 249 250 251 <p><a href="/blog/category/book-reviews">book reviews</a></p> 252 253 254 <p><a href="/blog/category/books">books</a></p> 255 256 257 <p><a href="/blog/category/breach-analysis">breach analysis</a></p> 258 259 260 <p><a href="/blog/category/breach-laws">breach laws</a></p> 261 262 263 <p><a href="/blog/category/breaches">breaches</a></p> 264 265 266 <p><a href="/blog/category/careers">careers</a></p> 267 268 269 <p><a href="/blog/category/chatgpt">chatgpt</a></p> 270 271 272 <p><a href="/blog/category/choicepoint">choicepoint</a></p> 273 274 275 <p><a href="/blog/category/cloud-security">cloud security</a></p> 276 277 278 <p><a href="/blog/category/compliance">compliance</a></p> 279 280 281 <p><a href="/blog/category/conferences">conferences</a></p> 282 283 284 <p><a href="/blog/category/csrb">csrb</a></p> 285 286 287 <p><a href="/blog/category/current-events">current events</a></p> 288 289 290 <p><a href="/blog/category/cyber-portfolio-management">cyber portfolio management</a></p> 291 292 293 <p><a href="/blog/category/cyber-public-health">cyber public health</a></p> 294 295 296 <p><a href="/blog/category/data-analysis">data analysis</a></p> 297 298 299 <p><a href="/blog/category/disaster-preparedness">disaster preparedness</a></p> 300 301 302 <p><a href="/blog/category/disclosure">disclosure</a></p> 303 304 305 <p><a href="/blog/category/doing-it-differently">doing it differently</a></p> 306 307 308 <p><a href="/blog/category/economics">economics</a></p> 309 310 311 <p><a href="/blog/category/education">education</a></p> 312 313 314 <p><a href="/blog/category/election2024">election2024</a></p> 315 316 317 <p><a href="/blog/category/emergent-chaos">emergent chaos</a></p> 318 319 320 <p><a href="/blog/category/encryption">encryption</a></p> 321 322 323 <p><a href="/blog/category/engineering">engineering</a></p> 324 325 326 <p><a href="/blog/category/fail">fail</a></p> 327 328 329 <p><a href="/blog/category/food-and-cooking">food and cooking</a></p> 330 331 332 <p><a href="/blog/category/game-theory">game theory</a></p> 333 334 335 <p><a href="/blog/category/games">games</a></p> 336 337 338 <p><a href="/blog/category/government">government</a></p> 339 340 341 <p><a href="/blog/category/governments">governments</a></p> 342 343 344 <p><a href="/blog/category/harrassment">harrassment</a></p> 345 346 347 <p><a href="/blog/category/history">history</a></p> 348 349 350 <p><a href="/blog/category/human-factors">human factors</a></p> 351 352 353 <p><a href="/blog/category/information-security">information security</a></p> 354 355 356 <p><a href="/blog/category/jobs">jobs</a></p> 357 358 359 <p><a href="/blog/category/kickstarter">kickstarter</a></p> 360 361 362 <p><a href="/blog/category/legal">legal</a></p> 363 364 365 <p><a href="/blog/category/legislation">legislation</a></p> 366 367 368 <p><a href="/blog/category/lessons-learned">lessons learned</a></p> 369 370 371 <p><a href="/blog/category/liberty">liberty</a></p> 372 373 374 <p><a href="/blog/category/markets">markets</a></p> 375 376 377 <p><a href="/blog/category/measurement">measurement</a></p> 378 379 380 <p><a href="/blog/category/metrics">metrics</a></p> 381 382 383 <p><a href="/blog/category/microsoft">microsoft</a></p> 384 385 386 <p><a href="/blog/category/national-id">national ID</a></p> 387 388 389 <p><a href="/blog/category/national-security">national security</a></p> 390 391 392 <p><a href="/blog/category/news">news</a></p> 393 394 395 <p><a href="/blog/category/orientations">orientations</a></p> 396 397 398 <p>
398<a href="/blog/category/other-disciplines">other disciplines</a></p> 399 400 401 <p><a href="/blog/category/papers">papers</a></p> 402 403 404 <p><a href="/blog/category/personal-security">personal security</a></p> 405 406 407 <p><a href="/blog/category/photography">photography</a></p> 408 409 410 <p><a href="/blog/category/podcasts">podcasts</a></p> 411 412 413 <p><a href="/blog/category/policy">policy</a></p> 414 415 416 <p><a href="/blog/category/politics">politics</a></p> 417 418 419 <p><a href="/blog/category/presentations">presentations</a></p> 420 421 422 <p><a href="/blog/category/privacy">privacy</a></p> 423 424 425 <p><a href="/blog/category/product-management">product management</a></p> 426 427 428 <p><a href="/blog/category/regulation">regulation</a></p> 429 430 431 <p><a href="/blog/category/remote-work">remote work</a></p> 432 433 434 <p><a href="/blog/category/reports-and-data">reports and data</a></p> 435 436 437 <p><a href="/blog/category/research-papers">research papers</a></p> 438 439 440 <p><a href="/blog/category/risk">risk</a></p> 441 442 443 <p><a href="/blog/category/science-of-risk-management">science of risk management</a></p> 444 445 446 <p><a href="/blog/category/science">science</a></p> 447 448 449 <p><a href="/blog/category/security">security</a></p> 450 451 452 <p><a href="/blog/category/serious-games">serious games</a></p> 453 454 455 <p><a href="/blog/category/software-engineering">software engineering</a></p> 456 457 458 <p><a href="/blog/category/software">software</a></p> 459 460 461 <p><a href="/blog/category/space-exploration">space exploration</a></p> 462 463 464 <p><a href="/blog/category/space">space</a></p> 465 466 467 <p><a href="/blog/category/star-wars">star wars</a></p> 468 469 470 <p><a href="/blog/category/startups">startups</a></p> 471 472 473 <p><a href="/blog/category/stone-soup">stone soup</a></p> 474 475 476 <p><a href="/blog/category/supply-chain-security">supply chain security</a></p> 477 478 479 <p><a href="/blog/category/surveillance">surveillance</a></p> 480 481 482 <p><a href="/blog/category/taxonomies">taxonomies</a></p> 483 484 485 <p><a href="/blog/category/teaching-and-learning">teaching and learning</a></p> 486 487 488 <p><a href="/blog/category/threat-model-thursday">threat model thursday</a></p> 489 490 491 <p><a href="/blog/category/threat-model">threat model</a></p> 492 493 494 <p><a href="/blog/category/threat-modeling-2nd-edition">threat modeling 2nd edition</a></p> 495 496 497 <p><a href="/blog/category/threat-modeling">threat modeling</a></p> 498 499 500 <p><a href="/blog/category/toolbox">toolbox</a></p> 501 502 503 <p><a href="/blog/category/training">training</a></p> 504 505 506 <p><a href="/blog/category/usability">usability</a></p> 507 508 509 <p><a href="/blog/category/verification">verification</a></p> 510 511 512 <p><a href="/blog/category/videos">videos</a></p> 513 514 515 <p><a href="/blog/category/visualization">visualization</a></p> 516 517 518 <p><a href="/blog/category/voting">voting</a></p> 519 520 521 <p><a href="/blog/category/webinars">webinars</a></p> 522 523 524 <p><a href="/blog/category/website">website</a></p> 525 526 527 <p><a href="/blog/category/whiteboard">whiteboard</a></p> 528 529</div> 530 531 532 533 </aside> 534</main> 535 536 537 <noscript><p style="text-align:center;font-family:'Sarabun',sans-serif;font-weight:600;font-style:italic;">Our site works best with Javascript enabled, however we have done our best to minimize any negative impacts to your experience without it.</p></noscript> 538 539 <footer> 540 <ul> 541 <li> 542 <a href="https://www.linkedin.com/company/shostack-associates/?viewAsMember=true" target="_blank" rel="noopener" class="icon"> 543 <i class="fab fa-linkedin fa-lg" aria-hidden="true"></i> 544 <span class="sr-only">Shostack + Associates on LinkedIn</span> 545 </a> 546 </li> 547 <li> 548 <a href="https://infosec.exchange/@shostackassociates" target="_blank" rel="noopener" class="icon"> 549 <i class="fab fa-mastodon fa-lg" aria-hidden="true"></i> 550 <span class="sr-only">Shostack + Associates on Infosec.Exchange</span> 551 </a> 552 </li> 553 <li> 554 <a href="https://bsky.app/profile/shostackassociates.bsky.social" target="_blank" rel="noopener" class="icon"> 555 <i class="fab fa-bluesky fa-lg" aria-hidden="true"></i> 556 <span class="sr-only">Stostack + Associates on YouTube</span> 557 </a> 558 </li> 559 <li> 560 <a href="https://github.com/adamshostack/" target="_blank" rel="noopener" class="icon"> 561 <i class="fab fa-github fa-lg" aria-hidden="true"></i> 562 <span class="sr-only">Shostack on Github</span> 563 </a> 564 </li> 565 <li class="center">© 2021-2026 Shostack + Associates | <a href="/privacy-policy">Privacy Policy</a></li> 566 <li> 567 <a href="https://youtube.com/c/shostack" target="_blank" rel="noopener" class="icon"> 568 <i class="fab fa-youtube fa-lg" aria-hidden="true"></i> 569 <span class="sr-only">Stostack Videos on YouTube</span> 570 </a> 571 </li> 572 <li> 573 <a href="/contact" class="icon"> 574 <i class="fas fa-envelope fa-lg" aria-hidden="true"></i> 575 <span class="sr-only">Contact Shostack and Associates</span> 576 </a> 577 </li> 578 <li> 579 <a href="tel:+1-866-277-7328" class="icon"> 580 <i class="fas fa-phone-alt fa-lg" aria-hidden="true"></i> 581 <span class="sr-only">Call +1 866-APP-SECURE</span> 582 </a> 583 </li> 584 <li> 585 <a href="/sitemap" class="icon"> 586 <i class="fas fa-sitemap fa-lg" aria-hidden="true"></i> 587 <span class="sr-only">Sitemap</span> 588 </a> 589 </li> 590 </ul> 591 </footer> 592 593
593<script src="/js/style.js"></script>
593 594 595 <!-- HubSpot Embed Code --> 596
596<script type="text/javascript" id="hs-script-loader" async defer src="//js.hs-scripts.com/23580113.js"></script>
596 597 598 <!-- Website built with 11ty by Connie "Sunfire" Hill, 2021; https://sunfire.hitsaru.com | https://linkedin.com/in/sunfireweb | https://upwork.com/fl/chillsunfire --> 599
600<script async id="netlify-rum-container" src="/.netlify/scripts/rum" data-netlify-rum-site-id="f8790c11-b99c-49b8-addc-6d15cac34c4f" data-netlify-deploy-branch="main" data-netlify-deploy-context="production" data-netlify-cwv-token="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzaXRlX2lkIjoiZjg3OTBjMTEtYjk5Yy00OWI4LWFkZGMtNmQxNWNhYzM0YzRmIiwiYWNjb3VudF9pZCI6IjYwZTYxYjUwNmIxMjgxMDA5MDcxMmI0ZCIsImRlcGxveV9pZCI6IjZhYmViOTRhNTAzZTJhMDAwOGZiYmNhOCIsImlzc3VlciI6Im5mc2VydmVyIn0.eTTwB5SMzfy-LlpJm0y793jq-JXgwp0d0jCONsUGGwM"></script>
600 601</body> 602</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.