Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

Shostack + Associates

@shostackassociates@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

Shostack + Associates helps customers deliver better products, faster and with less churn or internal conflict. Our approach focuses on threat modeling as a way to “measure twice, cut once.”

18 Followers
4 Following
9 Posts
Joined February 25, 2026
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 5mo ago

May the Fourth: Darth Maul's training is a useful reminder that punishment-based learning is not actually how people get good at things. We have a blog post about that, and a 25% off coupon (maythe4th) for our self-paced courses.

The Force is optional. The four questions are not.

https://shostack.org/blog/may-the-fourth-be-with-you/

May the Fourth Be With You!
shostack.org

May the Fourth Be With You!

Celebrating Star Wars Day with a look at what Darth Maul’s training can teach you.

4
0
1
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 6mo ago

First Contact Day falls on a Sunday this year. We did not plan that. What we did plan is the second post in our Star Trek series. Picard. Worf. Troi. Data. It turns out the Enterprise senior staff has a lot to teach security engineers about diplomacy, risk communication, empathy, and the quiet power of consistency.
Join us back at https://shostack.org/blog on Sunday!

Shostack + Friends Blog | Shostack + Associates
shostack.org

Shostack + Friends Blog | Shostack + Associates

Security, privacy, economics & unrelated topics, since 2005.

2
0
3
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 6mo ago
Replying to
@Dany Thanks! Part two is coming on First Contact Day, so watch out for that. Kymberlee will be looking at what we can learn from members of the crew.
1
0
0
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 3mo ago
The S+A team had a blast in Vienna at OWASP Global AppSec EU 2026 🇦🇹 From leading our Threat Modeling Intensive to meeting fellow members of the AppSec community, we loved the turnout and the lively discussions. Thanks to everyone who showed up with intention, dove deep, and learned by doing! We shared some reflections on the training in our blog post 👇 https://shostack.org/blog/owasp-to-blackhat-recap/#ThreatModeling #AppSec #OWASP
OWASP Global AppSec EU 2026 Recap (Next up, BlackHat!)
shostack.org

OWASP Global AppSec EU 2026 Recap (Next up, BlackHat!)

Reflecting on the S+A team's adventures in Vienna and excitement for BlackHat 2026

0
1
0
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 2mo ago
👻 @adamshostack@infosec.exchange is releasing a white paper on PHANTOM-B this week. While the OWASP LLM Top 10 lists what tends to go wrong in LLMs generally, PHANTOM-B is a threat elicitation tool, built to answer "what can go wrong in this system" with a structured approach. Adam will also be speaking on PHANTOM-B at Black Hat this year. The paper and talk complement each other, so catch both if you can 😉 More details soon. Stay informed by signing up on our website: https://shostack.org/contact#AppSec
Contact Shostack + Associates
shostack.org

Contact Shostack + Associates

Contact information for Shostack + Associates

0
0
0
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 2mo ago
AI won't replace threat modeling fundamentals, but it will change how you work. Join Adam Shostack for our 4-day Threat Modeling Intensive with Complete AI at Black Hat USA 2026, Aug 1-4 in Las Vegas. See where LLMs help, where they fail, and where human judgment still wins. Regular pricing ends July 17. 🔗 https://shorturl.at/CmBtW Read more: https://shorturl.at/aPqVP #ThreatModeling #BlackHat2026 #InfoSec #AI
Black Hat
shorturl.at

Black Hat

Black Hat

0
0
0
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 2mo ago
Three takeaways from the OpenAI/HuggingFace incident: volume overwhelms judgment when you're running too many evaluations to read the output. Anthropomorphization gets in the way of clear analysis. And stealing benchmark answers is Goodhart's Law made literal and the logical extreme of benchmark overreliance. Two of these are already in PHANTOM-B, which Adam is presenting next Wednesday at Black Hat. New post: https://shostack.org/blog/lessons-from-openai-huggingface-ai-security/
Lessons from the OpenAI/HuggingFace AI Security Incident
shostack.org

Lessons from the OpenAI/HuggingFace AI Security Incident

The big takeaways from the OpenAI incident are over-reliance on benchmarks, anthropomorphization and volume.

0
0
0
0
Open post
Shostack + Associates @shostackassociates@infosec.exchange
· 2mo ago
Grab the slide deck for @adamshostack@infosec.exchange's Black Hat USA talk introducing the PHANTOM-B model, now available on the Shostack + Friends blog. The talk starts at Wednesday at 11:05am in Oceanside C, Level 2. https://shostack.org/blog/phantom-b-talk-summary/
Threat Modeling LLMs: Adam’s talk at Black Hat USA
shostack.org

Threat Modeling LLMs: Adam’s talk at Black Hat USA

PHANTOM-B is a practical tool built for threat modeling AI systems

0
0
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Pricing
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 03:38:20 UTC