Re:Threat Modeling Manifesto
by contingencies on Sunday February 07, 2021 @07:01PM
(#26059386)
A threat model is just a cognitive tool whose primary value is in creating an alternative perspective on a design problem to broaden thinking and improve outcomes. Like any tool, there are people who carry the hammer too far and suddenly everything is a nail.
As soon as they start harping on about a "journey of understanding" and "multiple deliveries" your bubbling instinct of disgust is correct and you should run and hide.
I don't trust security people to do sane things. - Linus Torvalds (2017)
As soon as they start harping on about a "journey of understanding" and "multiple deliveries" your bubbling instinct of disgust is correct and you should run and hide.
I don't trust security people to do sane things. - Linus Torvalds (2017)