Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Two security dilemmas: a researcher whose vendor won't patch, and an engineer told to delete subpoenaed emails. Four questions (Policy, Legal, Universal, Self) show where the right call comes from.
STRIDE turns cybersecurity's defensive principles into six threat categories: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Developed at Microsoft in 1999, it gives teams a systematic way to ask what can go wrong and build fixes from the start.
