<![CDATA[Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you]]>Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you

Thesis: "Asset-based modelling in particular has been shown to be advantageous in a number of respects (Shostack (2014)), including its capacity for conducting automated reasoning over a threat knowledge base."

In fact, I say something on the order of: "This is presented to explain why you shouldn't do it."

]]>https://board.circlewithadot.net/topic/95e18407-d655-45cf-be84-09462b896f60/academic-friends-if-a-phd-thesis-starts-with-a-factually-wrong-representation-of-your-work-do-youRSS for NodeFri, 17 Apr 2026 06:22:49 GMTSun, 05 Apr 2026 17:27:35 GMT60<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Mon, 06 Apr 2026 03:20:14 GMT]]>@adamshostack a subset of the population seems always determined to interpret cautionary tales as instruction manuals πŸ˜•

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/itgrrl/statuses/116355603797485385https://board.circlewithadot.net/post/https://infosec.exchange/users/itgrrl/statuses/116355603797485385Mon, 06 Apr 2026 03:20:14 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 21:48:53 GMT]]>@adamshostack @darthnull write the name down, put it in your phone's contacts, and 10 years from now when a special someone tries to interview for Shostack & Associates, have the thesis paper ready.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/xabean/statuses/116354300902616849https://board.circlewithadot.net/post/https://infosec.exchange/users/xabean/statuses/116354300902616849Sun, 05 Apr 2026 21:48:53 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 21:29:41 GMT]]>@adamshostack No reason you can’t do both. Better β€” phrase the subtweet as a poll for maximum engagement! πŸ™‚

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/darthnull/statuses/116354225346969629https://board.circlewithadot.net/post/https://infosec.exchange/users/darthnull/statuses/116354225346969629Sun, 05 Apr 2026 21:29:41 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 19:16:07 GMT]]>@adamshostack +1 on letting the author know first. I’d be honored by the contact and grateful for the correction.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/0xd0ug/statuses/116353700177702289https://board.circlewithadot.net/post/https://infosec.exchange/users/0xd0ug/statuses/116353700177702289Sun, 05 Apr 2026 19:16:07 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 18:31:49 GMT]]>@adamshostack

i'd say leave this to their thesis advisors. one of the advidor's jobs is to point out flawed starting assumptions and guide the PhD candidate into more solid footing.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/paul_ipv6/statuses/116353525948347150https://board.circlewithadot.net/post/https://infosec.exchange/users/paul_ipv6/statuses/116353525948347150Sun, 05 Apr 2026 18:31:49 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:59:10 GMT]]>@adamshostack The dissertation, silly, not your magnum opus πŸ˜‚

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/wendynather/statuses/116353397572208548https://board.circlewithadot.net/post/https://infosec.exchange/users/wendynather/statuses/116353397572208548Sun, 05 Apr 2026 17:59:10 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:56:25 GMT]]>@wendynather πŸ˜‰

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353386797948710https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353386797948710Sun, 05 Apr 2026 17:56:25 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:56:06 GMT]]>@wendynather Couldn't be! My books predate LLMs!

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353385545523523https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353385545523523Sun, 05 Apr 2026 17:56:06 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:55:12 GMT]]>@adamshostack Sounds kinda, idk, like an LLM wrote it

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/wendynather/statuses/116353382017888145https://board.circlewithadot.net/post/https://infosec.exchange/users/wendynather/statuses/116353382017888145Sun, 05 Apr 2026 17:55:12 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:44:40 GMT]]>@walshman23 right. It's both out of the bag, and represents a failure of the supervision process...

It's not subtle either. What I say:

Focusing on Assets
It seems very natural to center your approach on assets, or things of value.
After all, if a thing has no value, why worry about how someone might attack it? It turns out that focusing on assets is less useful than you may hope, and is therefore not the best approach to threat modeling.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353340580085368https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353340580085368Sun, 05 Apr 2026 17:44:40 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:40:54 GMT]]>@adamshostack If the dissertation has been accepted, the cow is out of the barn. At MOST, I would collegially reach out to the author and inform them of the misinterpretation. If, as is often the case, they extend their research, they may have an opportunity to correct . Contacting anyone on their committee is the last thing I would do - the onus was on them to know whether the work they are supervising is correct in this regard. (I am NOT a Ph.D-haver, so...)

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/walshman23/statuses/116353325769419922https://board.circlewithadot.net/post/https://mastodon.social/users/walshman23/statuses/116353325769419922Sun, 05 Apr 2026 17:40:54 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:38:17 GMT]]>@petrillic @adamshostack +1 on the author. Then again, this is something the professor should have definitely catched ...

]]>https://board.circlewithadot.net/post/https://chaos.social/users/brahms/statuses/116353315453315602https://board.circlewithadot.net/post/https://chaos.social/users/brahms/statuses/116353315453315602Sun, 05 Apr 2026 17:38:17 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:32:45 GMT]]>@adamshostack it seems an indication of a fundamental mistake in research. Which seems fundamental to the purpose of a dissertation. I might try and reach out to the author rather than the professor.

And definitely subtoot

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/petrillic/statuses/116353293703934026https://board.circlewithadot.net/post/https://hachyderm.io/users/petrillic/statuses/116353293703934026Sun, 05 Apr 2026 17:32:45 GMT<![CDATA[Reply to Academic friends, if a PhD thesis starts with a factually wrong representation of your work, do you on Sun, 05 Apr 2026 17:29:46 GMT]]>Generally I just ignore misunderstandings of my work, but here it's mis-used at the very start of section 1 to frame a research problem in a way that's the opposite of what I say.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353281988615275https://board.circlewithadot.net/post/https://infosec.exchange/users/adamshostack/statuses/116353281988615275Sun, 05 Apr 2026 17:29:46 GMT