Top all-time · #6336
Shostack & Friends Blog
Personal blog · emergentchaos.com/blogsecurityeconomics
Shostack & Friends Blog is a personal blog at emergentchaos.com about security and economics. Since 2008, 13 different Hacker News readers have linked it 13 times, most often “The Security Principles of Saltzer and Schroeder”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link Shostack & Friends mainly when discussing security engineering, such as OpenBSD exploit mitigations and what developers learn about security, and one lists it among useful tech blogs.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Security, privacy, economics & unrelated topics, since 2005.
Most-linked posts?
- The Security Principles of Saltzer and Schroeder3 people · 3 mentions · first linked 2010-10-08
- Quantum Computing Not an Imminent Threat To Public Key Encryption2 people · 2 mentions · first linked 2008-03-23
What Hacker News says?
Of tactical approaches, the OpenBSD team has clearly done the best job. I still advocate fixing root causes or high-confidence mechanisms wherever possible. They merit praise for what they pull off on the other side of the fence with UNIX apps I'd have little confidence in protecting outside of costly, isolation architectures and obfuscation schemes. This is my favorite, though, as it's a high-assurance principle in…
Comment linking /the-security-principles-of-saltzer-and-schroeder
on “Exploit Mitigation Techniques in OpenBSD (2005)”Submitted Secure Code Is Hard, Let’s Make It Harder as a story · 21 points
HN discussionUgh, this article is full of misconceptions about quantum mechanics. Particle wave duality: Particles are not either particles or waves depending on how you measure them. A more accurate description might be quantized waves, but really calling an electron a particle or a wave is applying a faulty analogy to them. This experiment will prove something new about entanglement: Scientists have already sent entangled phot…
Comment linking /archives/2008/03/quantum_progress.html
on “Signals from space to Earth could confirm Einstein's worst fear”Submitted Why Aren't there More Paul Grahams? as a story · 3 points
HN discussionI don't think anyone gets taught security in CS (seems relegated to informatics or computer engineering programs). Outside of a handful of security researchers and those directly working on security products, I don't even know very many senior software engineers that really understand security outside the trivial rules of thumbs. Two books largely on the MS way: "Writing Secure Code: Practical Strategies and Proven…
Comment linking /the-security-principles-of-saltzer-and-schroeder
on “What can Diaspora learn about security from Microsoft?”Submitted Quantum Computing Not an Imminent Threat To Public Key Encryption as a story · 3 points
HN discussionRedeye VC: http://redeye.firstround.com/ Jetplane Journal: http://www.jetplanejournal.com/ Emergent Chaos: http://www.emergentchaos.com/
Comment linking /
on “Ask HN: Best 'Unknown' Tech/Web blogs”Submitted What does the MS Secure Boot Issue teach us about key escrow? as a story · 2 points
HN discussionSubmitted Does 1Password Store Passwords Securely? as a story · 2 points
HN discussionSubmitted The Security Principles of Saltzer and Schroeder as a story · 1 points
HN discussionSubmitted The Psychology of Password Managers as a story · 1 points
HN discussionSubmitted How to get my vote for the ACM Board as a story · 1 points
HN discussionSubmitted Google+ Failed Because of Real Names as a story · 1 points
HN discussion
