January 2026 Link dump


A collection of links and posts that I found interesting.

This month: on “Bitlocker, the FBI, and Risk”; threat models to address hacklore; software bloat; and software update release quality.

Threat modeling

Opinions on risk perspective responding to Adam Shostack’s “Bitlocker, the FBI, and Risk” post.

I suggest adding threat models to the list of ways to address folklore.

Software

Some opinions of On Software Bloat which I heartily agree with.

How do bugs like this get released by major software companies?

================================================================

For elaboration or questions ask me; find me on Mastodon.