Social 📸 Photography

꧁ᐊ𰻞ᵕ̣̣̣̣̣̣́́♛ᵕ̣̣̣̣̣̣́́𰻞ᐅ꧂<a href="https://mastodon.gamedev.place/tags/4d" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4d</a> cartesian product of 2 of ðese fancy pentagonal tilings + 🔄2d✝️sections = 🤔🤔🤔<a href="https://mastodon.gamedev.place/tags/TilingTuesday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TilingTuesday</a> <a href="https://mastodon.gamedev.place/tags/geometry" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#geometry</a> <a href="https://mastodon.gamedev.place/tags/tiling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tiling</a> <a href="https://mastodon.gamedev.place/tags/mathart" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mathart</a> <a href="https://mastodon.gamedev.place/tags/mastoart" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mastoart</a> <a href="https://mastodon.gamedev.place/tags/abstract" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#abstract</a> <a href="https://mastodon.gamedev.place/tags/monochrome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monochrome</a> <a href="https://mastodon.gamedev.place/tags/animation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#animation</a> <a href="https://mastodon.gamedev.place/tags/creativecoding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#creativecoding</a>

Jose Luis Bueno🔻Hoy es <a href="https://mastodon.social/tags/28F" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#28F</a>, el día en las andaluzas y los andaluces conmemoramos el referéndum con el que accedimos a la autonomía. Pero para muchas personas, entre las que me incluyo, el verdadero Día Nacional de Andalucía es el 4 de Diciembre. En aquella fecha de 1977 dos millones de personas salieron a las calles de las ocho capitales de Andalucía para reclamar nuestros derechos como pueblo. Sin <a href="https://mastodon.social/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a> ni hay 28F ni se entiende el actual modelo autonómico español.En cualquier caso ¡Viva Andalucía Libre! 😊

꧁ᐊ𰻞ᵕ̣̣̣̣̣̣́́♛ᵕ̣̣̣̣̣̣́́𰻞ᐅ꧂<a href="https://mastodon.gamedev.place/tags/wip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wip</a> main menu / saving / loading / random seeds(& about too many random parameters💀)<a href="https://mastodon.gamedev.place/tags/screenshotsaturday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#screenshotsaturday</a> <a href="https://mastodon.gamedev.place/tags/MessageLost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MessageLost</a> <a href="https://mastodon.gamedev.place/tags/indiedev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#indiedev</a> <a href="https://mastodon.gamedev.place/tags/4d" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4d</a> <a href="https://mastodon.gamedev.place/tags/UI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UI</a> <a href="https://mastodon.gamedev.place/tags/survival" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#survival</a> <a href="https://mastodon.gamedev.place/tags/roguelike" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#roguelike</a>

tuxwise(23/N) Our fifth, and last, asset classification option:PublicAssets accessible to, or controlled by, anybody who is aware of them. The existence of such assets is usually easily detectable, or even widely known. Note: "public" refers to potential access or control by the general public, regardless whether there is a legal basis for it.Public makes a bad default class. Pick Intimate instead.Start classifying assetsIf you haven't done so yet, add a "Classification" column to your asset spreadsheet, and assign each asset to a specific class.Pick "Intimate" as the default class. Assume that you will act according to the respective classifications, starting today, instead of pondering whether it's "too late", for certain assets.Some classification suggestions that may look appropriate to you (or not):<ul><li>For Your Eyes Only (FYEO): Diaries and journals? Private notes?</li><li>Intimate: Family photographs? Bank accounts? ToDo lists?</li><li>None Of Your Business (NOYB): Your smartphones, tablets, desktops? Medical records? Financial assets? Documents related to legal proceedings?</li><li>Shared: Some Personally Identifiable Information <a href="https://mastodon.de/tags/PII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PII</a> (birthdays; place of residence; diploma)? Insurance-related data (lists of valuables; car make and model; flat size)? Travel bookings? Streaming package subscriptions?</li><li>Public: Social media or forum posts? Published articles, zines, or books?</li></ul>When you're finished, consider splitting the spreadsheet in two, and handling the part containing FYEO assets like a FYEO asset, in itself.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(22/N) Our fourth asset classification option:SharedAssets that are accessible to, or controlled by others for a specific purpose, usually under a specific agreement that may also be implicit. Preferably, these assets are kept publicly undetectable and unknown.Typically, access is granted to persons or entities that are only selectively or partially trusted: coworkers, support groups, suppliers, providers, insurances, payment providers, or communities you belong to.It is common to minimize sharing of critical assets by having multiple, restricted aliases or proxies stand in for the asset to be protected, e.g., email aliases, or aliased credit cards.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(21/N) Our third asset classification option:None Of Your Business (NOYB)Assets that by default aren’t shared, but can be accessed, controlled, or managed by others, with your permission. You grant such permissions mostly for practical reasons, to agents bound by formal agreements (like service or maintenance staff), and usually not reluctantly, like with assets classified as "Intimate".Preferably, NOYB assets are still kept publicly undetectable and unknown. The <a href="https://mastodon.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> principle can be fully applied here, often using available access control mechanisms, and automation.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

Travis F WIf <a href="https://fosstodon.org/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a> <a href="https://fosstodon.org/tags/geometry" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#geometry</a> can rotate around a plane, could it rotate to the other side of the plane? It's hard to imagine one plane orthogonal to another.

tuxwise(20/N) Our second asset classification option:IntimateAssets that unfortunately can’t stay FYEO, because under certain circumstances, they need to be accessible to, or controlled by, fully trusted persons or entities. Preferably, these assets are kept publicly undetectable and unknown.Handling of such assets by others requires a considerable amount of <a href="https://mastodon.de/tags/carefulness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#carefulness</a>, <a href="https://mastodon.de/tags/diligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#diligence</a>, and <a href="https://mastodon.de/tags/loyalty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#loyalty</a> that exceeds anything that could be pinned down with enough precision in formal documents. Typically, only significant others, some family members, trustees or close friends are entrusted with handling this class of assets.For most individuals, this class is most likely the best default. Once you have sorted out which assets are actually not Intimate, but FYEO, consider moving them to a separate spreadsheet that is, in itself, classified as FYEO.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(19/N) Let's now turn to the third question of the <a href="https://mastodon.de/tags/ThreatModelingManifesto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModelingManifesto</a>: 3. What are you going to do about it?It pays to first establish a few contraints for what you can do, in theory, by <a href="https://mastodon.de/tags/classifying" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#classifying</a> your <a href="https://mastodon.de/tags/assets" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#assets</a>. Again, for an individual human being, opposed to organizations or companies, it's nearly impossible to impose principles like <a href="https://mastodon.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> or <a href="https://mastodon.de/tags/NeedToKnow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NeedToKnow</a> on personal relationships, the closer they get.So, avoid recycling terms from popular, but less intuitive schemes: Fanciful intelligence labels like “top secret”, “confidential”, or “unclassified” do not tell you what goes into the respective box, and how to handle access to it.Add another column to your assets spreadsheet, label it "Classification", and pick a more human-centered approach for its values, like:<ul><li>For Your Eyes Only (FYEO)</li><li>Intimate</li><li>None Of Your Business (NOYB)</li><li>Shared</li><li>Public</li></ul>Let's briefly go through these suggestions:For Your Eyes Only (FYEO)Assets that are only accessible to, and controlled by nobody but you, because they need to be resilient, even in the face of the closest of your close people misbehaving. Preferably, these assets are kept publicly undetectable and unknown. When you are gone, these assets will be gone, too. FYEO does not make a good default class, though.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(18/N) Revisit your spreadsheet of assets now, specifically the "Consequences" column we had added in (7/N).<ul><li>Expanding the simplified approach to threats from "disclosed, destroyed, deanonymized" to the full set of threat types; and</li><li>Taking into account all categories of adversaries:</li></ul>How does your assessment of potential consequences change? Walk through your list of assets, and change the values in the "Consequences" column where needed.Categories of adversaries:<ul><li>You, and people like you</li><li>Criminals</li><li>Ideologues</li><li>Intruders</li><li>Business(i)es</li><li>“They”</li></ul>Threat types:<ul><li>Linking</li><li>Identifiying</li><li>Undesirable non-repudiation or repudiation</li><li>Detecting</li><li>Data disclosure</li><li>Manufacturing cooperation</li><li>Non-compliance</li><li>Obstructing</li><li>Interfering</li></ul>Consequences… when threats by adversaries become reality (feel free to change and rename):<ul><li>🤷 So what?</li><li>😟 Oh…</li><li>😳 Ouch.</li><li>😭 Hurts badly.</li><li>😱 Life-changing disaster.</li></ul>Consequences (7/N): <a href="https://mastodon.de/@tuxwise/113548439494399874" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113548439494399874</a>Categories of adversaries (8/N): <a href="https://mastodon.de/@tuxwise/113560309025649046" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113560309025649046</a>Types of threats (14/N): <a href="https://mastodon.de/@tuxwise/113622961370958693" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113622961370958693</a>Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(17/N) Finally, two threat types that refer to security more than privacy:<a href="https://mastodon.de/tags/Obstructing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Obstructing</a>An adversary destroys, withdraws, steals or misappropriates information, access, or resources. The obstruction can be temporary or permanent, partial or total. Obstructing can also occur unintentionally, with the “adversary” being deterioration, malfunction, or disaster.<a href="https://mastodon.de/tags/Interfering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Interfering</a>An adversary deliberately corrupts the integrity or authenticity of information, resources, processes, or interactions. The respective information, resources, processes, or interactions aren’t necessarily controlled or owned by the persons that are affected, and may also be fabricated. Interfering can also occur unintentionally, with the “adversary” being deterioration, malfunction, or disaster.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(16/N) Three more threat types defined:Data <a href="https://mastodon.de/tags/disclosure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disclosure</a>An adversary makes somebody’s confidential data available to unauthorized parties.Manufacturing cooperationAn adversary hides from somebody the potentially harmful consequences of their own decisions and actions, or denies them the option of avoiding such consequences, even when they are aware of them.<a href="https://mastodon.de/tags/NonCompliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NonCompliance</a>Contrary to what somebody expects and trusts in, an adversary does not follow laws, documented policies or contractual obligations; or does not abide by what is perceived as conventions, or unwritten rules, in the respective context.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(15/N) Two more threat types defined:Undesirable non-repudiation or repudiation<a href="https://mastodon.de/tags/Repudiation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Repudiation</a> (plausible denial) of what somebody has said / done / known / possessed becomes impossible because an adversary has managed to collect enough evidence to establish undesirable non-repudiation. In other words: the adversary can prove beyond reasonable doubt that "it" happened.Alternatively, <a href="https://mastodon.de/tags/NonRepudiation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NonRepudiation</a> (proof beyond reasonable doubt) cannot be established because an adversary has managed to suppress or destroy enough evidence to gain the option of repudiation (plausible denial). In other words: the adversary can plausibly deny "it" happened.DetectingAn adversary can check for the presence or absence of specific data items, which are tell-tale indicators for something else.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(14/N) Having familiarized ourselves with categories of adversaries, their main goals and their respective, overall "modus operandi", let's look at the types of threats posed by them.Again, it pays to focus on types of threats: We don't want to become mainly alert-triggered, but proactive. There are several frameworks we can borrow ideas from, most notably the LINDDUN framework that is geared toward threats to privacy, and can be extended a bit to cover more ground.First, our list of threat types:<ul><li><a href="https://mastodon.de/tags/Linking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linking</a> (spotting connections and relationships)</li><li><a href="https://mastodon.de/tags/Identifying" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Identifying</a> (mapping to identities)</li><li>Undesirable <a href="https://mastodon.de/tags/NonRepudiation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NonRepudiation</a> or <a href="https://mastodon.de/tags/repudiation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#repudiation</a></li><li><a href="https://mastodon.de/tags/Detecting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Detecting</a> (absence or presence of indicators)</li><li>Data <a href="https://mastodon.de/tags/disclosure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#disclosure</a> (to the unauthorized)</li><li>Manufacturing cooperation (disguised or imposed bad consequences)</li><li><a href="https://mastodon.de/tags/Obstructing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Obstructing</a> (access, information, resources)</li><li><a href="https://mastodon.de/tags/NonCompliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NonCompliance</a></li><li><a href="https://mastodon.de/tags/Interfering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Interfering</a> (with information, resources, processes, interactions)</li></ul>Our definitions of these, for our context:LinkingAn adversary can figure out connections and relationships between formerly isolated items of interest.IdentifiyingAn adversary can link items of interest directly to a natural person.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a>LINDDUN: <a href="https://linddun.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://linddun.org/</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(13/N) The sixth, and last, category of adversaries:“They”“They” want to define boundaries and acceptable behavior for the masses, as well as monitor compliance on a large scale, and enforce it on an individual level.As a consequence, permanent mass <a href="https://mastodon.de/tags/surveillance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#surveillance</a> of all types of assets is a means of monitoring the compliance of the majority, and of detecting deviant behavior. Legalizing more and more monitoring options becomes a goal, including international partnerships on information exchange. Depriving you of your assets, temporarily or permanently, is a means of enforcing your compliance or obedience. The mere threat of this can be sufficient to create a <a href="https://mastodon.de/tags/ChillingEffect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChillingEffect</a>.State-sponsored actors (such as hacker groups) and nation-state threat actors (in the form of intelligence services, law enforcement, censorship offices, and other <a href="https://mastodon.de/tags/government" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#government</a> agencies) fall into this category. It also includes <a href="https://mastodon.de/tags/companies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#companies</a> that have either a monopoly, or a significant share of an oligopolistic market, or portfolio of services specifically targeted at the public sector.While the entities in this category may seem wildly heterogeneous at first, remember that there are <a href="https://mastodon.de/tags/RevolvingDoors" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RevolvingDoors</a> between them, for swapping their respective “ex” members. Beyond lobbying, there is also a complex, ongoing collaboration between many of them, which has been described as “grey intelligence”, “grey policing”, “public-private partnership”, etc.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(12/N) A fifth category of adversaries:🦕 Business(i)es<a href="https://mastodon.de/tags/Business" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Business</a>(i)es want to extract <a href="https://mastodon.de/tags/profit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#profit</a> from you. Preferably, but not necessarily in legal, sustainable, and the cheapest possible ways.Your assets are seen as levers to generate more profit, because they betray what is meaningful to you, and worth investing into, in your eyes.Businessies disguise their factual indifference towards your specific assets by enthusiastically pretending to "care" as much for them as you do, to achieve the "Nessie effect": on the surface, always appear likeable, despite your size, and in spite of what you are actually pursuing under the surface.This category is the widest of all. Nearly all businessies participate in <a href="https://mastodon.de/tags/SurveillanceCapitalism" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SurveillanceCapitalism</a>, either by directly aggregating every tidbit of your data in a <a href="https://mastodon.de/tags/profile" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#profile</a>, in return for a service that is allegedly "free" – and later selling targeted access to you; or by paying <a href="https://mastodon.de/tags/DataBrokers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataBrokers</a> for access to potential customers that fit very specific criteria.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreadModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreadModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(11/N) A fourth category of adversaries:🫳 Intruders<a href="https://mastodon.de/tags/Intruders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intruders</a> want to ignore your <a href="https://mastodon.de/tags/boundaries" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#boundaries</a> at will, and their related actions to be unrestricted and without repercussions, for as long as possible. Additionally, satisfaction might be derived from any ineffective responses to their actions.Controlling your assets at will, and having unrestricted access to them is their goal. Some are fantasizing about a relationship with you that would somehow entitle them to it. Sometimes, their actions include damaging, or destruction of, your assets, to inflict suffering upon you, or for revenge, or to gain notoriety.This is a wide category that includes attention-getters; <a href="https://mastodon.de/tags/narcissists" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#narcissists</a> and <a href="https://mastodon.de/tags/stalkers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#stalkers</a>; abusive, vengeful and jealous people; starstruck individuals seeking <a href="https://mastodon.de/tags/parasocial" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#parasocial</a> interaction; thrill seekers; script kiddies; "OSINT" wannabees; swatters; vandals; and sometimes even potential employers.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreadModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreadModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(10/N) A third category of adversaries:☝️ Ideologues<a href="https://mastodon.de/tags/Ideologues" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ideologues</a> want to push you to do the right thing, or to punish you for doing the wrong thing. They may also want to eliminate you, physically or metaphorically, when they can't achieve their goal: Maybe you just won't learn, or are incorrigible, as such.The assets that you are "entitled" to are considered a reward, for conforming to the respective ideology. The portion of your assets that you aren't "entitled" to is usually the target of relentless denial, even destruction.Entitlement is always conditional, and temporary: In case you seem to be going astray, and appeals to your conscience do not seem to have enough effect, your assets may be withdrawn or destroyed.Hacktivists, campaigners, protagonists or minions of gender-based violence, lobbyists, racists, and terrorists fall into this category.Note: I am not judging how "just" the respective "causes" are, I'm talking about behaviors.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreadModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreadModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(9/N) A second category of adversaries:💰 CriminalsCriminals want valuable resources that you happen to possess, at the moment.From that point of view, seemingly valuable assets are to be pried from your hands, while your “junk” assets may be ignored, at best. At worst, they’ll be carelessly destroyed in the process, or the threat of their destruction will be weaponized against you.Typical activities of criminals are scams, ransomware attacks, or identity theft. There's a dedicated "eCrime ecosystem" with crime infrastructure providers; marketplaces for stolen, private information; illegal access brokers selling credentials; and even “big game hunters” executing targeted attacks on large corporations, as a paid service.BTW, calling these adversaries "cybercriminals" instead is just a dumb court curtsy.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreadModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreadModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

tuxwise(8/N) For now, leave your spreadsheet of assets alone and turn to the second question of the <a href="https://mastodon.de/tags/ThreatModelingManifesto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModelingManifesto</a>:2. What can go wrong?The answer usually includes a list of adversaries, so you can later consider which ones you stand a chance fighting, if you think it's worth it.Again, this may be helpful for corporations, but not that much for individuals, since damage done to individuals can be much deeper, and last for much longer, even for life.So, lets rather consider abstract categories of adversaries from a perspective of what their primary goals are, and what they usually do to achieve them. We don't bother with specific bad actors here, nor are we considering how to "help them" via psychotherapy, legislation, imprisonment or campaigning, at this point in time.First, the list:<ul><li>🤷 You, and people like you</li><li>💰 <a href="https://mastodon.de/tags/Criminals" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Criminals</a></li><li>☝️ <a href="https://mastodon.de/tags/Ideologues" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ideologues</a></li><li>🫳 <a href="https://mastodon.de/tags/Intruders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intruders</a></li><li>🦕 <a href="https://mastodon.de/tags/Business" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Business</a>(i)es</li><li>🏢 “<a href="https://mastodon.de/tags/They" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#They</a>”</li></ul>A few thoughts, on each category:🤷 You, and people like youYou and others prefer to keep asset protection efforts to a minimum. You tend to take the integrity of your assets for granted, hoping that others will respect your boundaries, either out of respect for you or because of legal regulations and repercussions. Your attitude towards handling the assets of others is equally shortsighted and careless.As a result, your digital assets stay exposed, and you're putting others at risk, too.(to be continued)Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreadModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreadModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

Recent searches

Search options

Administered by:

Server stats:

#4d