Framapiaf

2 messages2 participants0 message aujourd’hui

Paco Hope #resistLooking at some <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> generated <a href="https://infosec.exchange/tags/threatmodel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatmodel</a> output and it listed stealing a user's credentials and using them in the "Spoofing" category. I was uncertain. Is that spoofing or elevation of privilege. So I wander over to a <a href="https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats" rel="nofollow noopener noreferrer" target="_blank">#microsoft page on #stride</a>.They say it's spoofing, which is fine. It's reasonable. I don't care as long as we all agree.But in that table, that's literally the only example of spoofing. There are a LOT of other kinds of things that could be called spoofing. If you're gonna have only one example of spoofing, I don't think stealing credentials is the best example.

c_th1Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann 🔐Teilen erbeten ! :BoostOK: als PDF Datei:<a href="https://cryptpad.digitalcourage.de/file/#/2/file/kRgZ+fsPATHElnUKYE8ziTgT/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cryptpad.digitalcourage.de/file/#/2/file/kRgZ+fsPATHElnUKYE8ziTgT/</a> <a href="https://digitalcourage.social/tags/DSGVO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DSGVO</a> <a href="https://digitalcourage.social/tags/TDDDG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TDDDG</a> ( <a href="https://digitalcourage.social/tags/unplugtrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugtrump</a> ) <a href="https://digitalcourage.social/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datenschutz</a> <a href="https://digitalcourage.social/tags/Privatsph%C3%A4re" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privatsphäre</a> <a href="https://digitalcourage.social/tags/sicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicherheit</a> <a href="https://digitalcourage.social/tags/Verschl%C3%BCsselung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Verschlüsselung</a> <a href="https://digitalcourage.social/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> <a href="https://digitalcourage.social/tags/WEtell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WEtell</a> <a href="https://digitalcourage.social/tags/SoloKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKey</a> <a href="https://digitalcourage.social/tags/NitroKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NitroKey</a> <a href="https://digitalcourage.social/tags/Email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://digitalcourage.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://digitalcourage.social/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixelfed</a> <a href="https://digitalcourage.social/tags/Massen%C5%B1berwachung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Massenűberwachung</a> <a href="https://digitalcourage.social/tags/Leta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Leta</a> <a href="https://digitalcourage.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://digitalcourage.social/tags/Metadaten" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Metadaten</a> <a href="https://digitalcourage.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a> <a href="https://digitalcourage.social/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> <a href="https://digitalcourage.social/tags/Cryptpad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptpad</a> <a href="https://digitalcourage.social/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> <a href="https://digitalcourage.social/tags/Hateaid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hateaid</a> <a href="https://digitalcourage.social/tags/Cyberstalking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyberstalking</a> <a href="https://digitalcourage.social/tags/Messenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Messenger</a> <a href="https://digitalcourage.social/tags/Browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Browser</a> <a href="https://digitalcourage.social/tags/Youtube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Youtube</a> <a href="https://digitalcourage.social/tags/NewPipe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NewPipe</a> <a href="https://digitalcourage.social/tags/Chatkontrolle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chatkontrolle</a> <a href="https://digitalcourage.social/tags/nichtszuverbergen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nichtszuverbergen</a> <a href="https://digitalcourage.social/tags/%C3%9CberwachungsKapitalismus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ÜberwachungsKapitalismus</a> <a href="https://digitalcourage.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://digitalcourage.social/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://digitalcourage.social/tags/Windows10" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows10</a> <a href="https://digitalcourage.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://digitalcourage.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Matrix</a> <a href="https://digitalcourage.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodon</a> <a href="https://digitalcourage.social/tags/Friendica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Friendica</a> <a href="https://digitalcourage.social/tags/Fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediverse</a> <a href="https://digitalcourage.social/tags/Mastodir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodir</a> <a href="https://digitalcourage.social/tags/Loops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Loops</a> <a href="https://digitalcourage.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://digitalcourage.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://digitalcourage.social/tags/Foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Foss</a> <a href="https://digitalcourage.social/tags/VeraCrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VeraCrypt</a> <a href="https://digitalcourage.social/tags/HateAid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HateAid</a> <a href="https://digitalcourage.social/tags/Coreboot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Coreboot</a> <a href="https://digitalcourage.social/tags/Volksverpetzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Volksverpetzer</a> <a href="https://digitalcourage.social/tags/Netzpolitik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Netzpolitik</a> <a href="https://digitalcourage.social/tags/OpenAndroidInstaller" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenAndroidInstaller</a> <a href="https://digitalcourage.social/tags/Digitalisierung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Digitalisierung</a> <a href="https://digitalcourage.social/tags/FragdenStaat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FragdenStaat</a> <a href="https://digitalcourage.social/tags/Shiftphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shiftphone</a>  <a href="https://digitalcourage.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://digitalcourage.social/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GrapheneOS</a> <a href="https://digitalcourage.social/tags/CCC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCC</a> <a href="https://digitalcourage.social/tags/Mail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mail</a> <a href="https://digitalcourage.social/tags/Mullvad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mullvad</a> <a href="https://digitalcourage.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> <a href="https://digitalcourage.social/tags/GnuPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuPG</a> <a href="https://digitalcourage.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://digitalcourage.social/tags/Gaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gaming</a> <a href="https://digitalcourage.social/tags/linuxgaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxgaming</a> <a href="https://digitalcourage.social/tags/Lutris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lutris</a> <a href="https://digitalcourage.social/tags/Protondb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Protondb</a> <a href="https://digitalcourage.social/tags/eOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eOS</a> <a href="https://digitalcourage.social/tags/Enshittification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Enshittification</a> <a href="https://digitalcourage.social/tags/Bloatware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bloatware</a> <a href="https://digitalcourage.social/tags/TPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TPM</a> <a href="https://digitalcourage.social/tags/Murena" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Murena</a>  <a href="https://digitalcourage.social/tags/LiberaPay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LiberaPay</a> <a href="https://digitalcourage.social/tags/GnuTaler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuTaler</a> <a href="https://digitalcourage.social/tags/Taler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Taler</a> <a href="https://digitalcourage.social/tags/PreppingforFuture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PreppingforFuture</a> <a href="https://digitalcourage.social/tags/FediLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FediLZ</a> <a href="https://digitalcourage.social/tags/BlueLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlueLZ</a> <a href="https://digitalcourage.social/tags/InstaLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InstaLZ</a> <a href="https://digitalcourage.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> <a href="https://digitalcourage.social/tags/FLOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FLOSS</a> <a href="https://digitalcourage.social/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UEFI</a> <a href="https://digitalcourage.social/tags/Medienkompetenz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Medienkompetenz</a>

Paco Hope #resistLastly, there's the training data. I work for <a href="https://infosec.exchange/tags/AWS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AWS</a> (so these are strictly my personal opinions). We are opinionated about the platform. We think that there are things you should do and things you shouldn't. If you have deep knowledge of anything (Microsoft, Google, NodeJS, SAP, whatever) you will have informed opinions. The threat models that I have seen, that use general purpose models like Claude Sonnet, include advice that I think is stupid because I am opinionated about the platform. There's training data about AWS in the model that was authored by not-AWS. And there's training data in the model that was authored by AWS. The former massively outweighs the latter in a general-purpose, trained-on-the-Internet model.So internal users (who are expected to do things the AWS way) are getting threats that (a) don't match our way of working, and (b) they can't mitigate anyway. Like I saw an AI-generated threat of brute-forcing a cognito token. While the possiblity of that happening (much like buying a winning lottery ticket) is non-zero, that is not a threat that a software developer can mitigate. There's nothing you can do in your application stack to prevent, detect, or respond to that. You're accepting that risk, like it or not, and I think we're wasting brain cells and disk sectors thinking about it and writing it down.The other one I hate is when it tells you to encrypt your data at rest in S3. Try not to. There's no action for you to take. The thing you control is which key does it and who can use that key.So if you have an area of expertise, the majority of the training data in any consumer model is worse than your knowledge. It is going to generate threats and risks that will irritate you.4/fin<a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>

Paco Hope #resistThreat models evolve over time, the same as your software does. Nobody is building a save/load feature into their AI powered threat model. Getting deterministic output from consumer-grade LLMs is not a given. So even if you DO create save/reload capability, it's imperfect.All the tools I've seen start every session from a blank sheet of paper. So If you're revisiting an app that you threat modeled before, because you want to update your model, you're going to start from scratch.3/n<a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>

Paco Hope #resistRelated to this, nobody seems to account for the fact that LLMs bullshit sometimes. If you pin someone down and say "the user of your AI-powered threat modeller: do they know how to do a threat model without AI?" Many people will say "yes." Because to say "no" is to admit that the people will be blindly following LLM output that might be total bullshit.The goal, however, of many of these systems is to make threat modeling more accessible to people who don't know how to do it. To do that, though, you'd have to be more skeptical about your user, and spend some time educating them. Otherwise, they leave the process no smarter than they began.Honestly, I think a lot of people think the threat model is going to be done entirely by the AI and they want to build a system where the human just consumes and uses it.2/n <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>

Paco Hope #resistI have seen a lot of efforts to use an <a href="https://infosec.exchange/tags/LLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLM</a> to create a <a href="https://infosec.exchange/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>. I have some insights. Attempts at <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> tend to do 3 things wrong:<ol><li>They assume that the user's input is both complete and correct. The LLM (in the implementations I've seen) never questions "are you sure?" and it never prompts the user like "you haven't told me X, what about X?"</li><li>Lots of teams treat a threat model as a deliverable. Like we go build our code, get ready to ship, and then "oh, shit! Security wants a threat model. Quick, go make one." So it's not this thing that informs any development choices during development. It's an afterthought that gets built just prior to <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> review.</li><li>Lots of people think you can do an adequate threat model with only technical artifacts (code, architectuer, data flow, documentation, etc.). There's business context that needs to be part of every decision, and teams are just ignoring that.</li></ol>1/n

Emorybut seriously would <a href="https://soc.kvet.ch/tags/Crowdstrike" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Crowdstrike</a>'s lawyers come after me if i publish findings from a public threat model where i might write up findings for airlines and hotels for lacking vendor diversity and failing open on connected systems (e.g. you could book and pay for hotels that were offline, but Bookings.com and some others didn't give a fuck and sent people to hotels not expecting them for days?)another finding for not having a plan or procedure. etc.<a href="https://soc.kvet.ch/tags/threatmodel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatmodel</a> <a href="https://soc.kvet.ch/tags/ideas" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ideas</a> <a href="https://soc.kvet.ch/tags/publicService" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#publicService</a> <a href="https://soc.kvet.ch/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

c_th1Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann 🔐Teilen erbeten ‼️ :BoostOK: als PDF:<a href="https://cryptpad.digitalcourage.de/file/#/2/file/fQoTfTZJu7LScr1Jus5csQn2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cryptpad.digitalcourage.de/file/#/2/file/fQoTfTZJu7LScr1Jus5csQn2/</a> <a href="https://digitalcourage.social/tags/DSGVO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DSGVO</a> <a href="https://digitalcourage.social/tags/TDDDG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TDDDG</a> ( <a href="https://digitalcourage.social/tags/unplugtrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugtrump</a> ) <a href="https://digitalcourage.social/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datenschutz</a> <a href="https://digitalcourage.social/tags/Privatsph%C3%A4re" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privatsphäre</a> <a href="https://digitalcourage.social/tags/sicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicherheit</a> <a href="https://digitalcourage.social/tags/Verschl%C3%BCsselung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Verschlüsselung</a> <a href="https://digitalcourage.social/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> <a href="https://digitalcourage.social/tags/WEtell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WEtell</a> <a href="https://digitalcourage.social/tags/SoloKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKey</a> <a href="https://digitalcourage.social/tags/NitroKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NitroKey</a> <a href="https://digitalcourage.social/tags/Email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://digitalcourage.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://digitalcourage.social/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixelfed</a> <a href="https://digitalcourage.social/tags/Massen%C5%B1berwachung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Massenűberwachung</a> <a href="https://digitalcourage.social/tags/Leta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Leta</a> <a href="https://digitalcourage.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://digitalcourage.social/tags/Metadaten" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Metadaten</a> <a href="https://digitalcourage.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a> <a href="https://digitalcourage.social/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> <a href="https://digitalcourage.social/tags/Cryptpad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptpad</a> <a href="https://digitalcourage.social/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> <a href="https://digitalcourage.social/tags/Hateaid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hateaid</a> <a href="https://digitalcourage.social/tags/Cyberstalking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyberstalking</a> <a href="https://digitalcourage.social/tags/Messenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Messenger</a> <a href="https://digitalcourage.social/tags/Browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Browser</a> <a href="https://digitalcourage.social/tags/Youtube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Youtube</a> <a href="https://digitalcourage.social/tags/NewPipe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NewPipe</a> <a href="https://digitalcourage.social/tags/Chatkontrolle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chatkontrolle</a> <a href="https://digitalcourage.social/tags/nichtszuverbergen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nichtszuverbergen</a> <a href="https://digitalcourage.social/tags/%C3%9CberwachungsKapitalismus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ÜberwachungsKapitalismus</a> <a href="https://digitalcourage.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://digitalcourage.social/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://digitalcourage.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://digitalcourage.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://digitalcourage.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Matrix</a> <a href="https://digitalcourage.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodon</a> <a href="https://digitalcourage.social/tags/Friendica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Friendica</a> <a href="https://digitalcourage.social/tags/Fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediverse</a> <a href="https://digitalcourage.social/tags/Mastodir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodir</a> <a href="https://digitalcourage.social/tags/Loops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Loops</a> <a href="https://digitalcourage.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://digitalcourage.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://digitalcourage.social/tags/Foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Foss</a> <a href="https://digitalcourage.social/tags/VeraCrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VeraCrypt</a> <a href="https://digitalcourage.social/tags/HateAid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HateAid</a> <a href="https://digitalcourage.social/tags/Coreboot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Coreboot</a> <a href="https://digitalcourage.social/tags/Volksverpetzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Volksverpetzer</a> <a href="https://digitalcourage.social/tags/Netzpolitik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Netzpolitik</a> <a href="https://digitalcourage.social/tags/Digitalisierung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Digitalisierung</a> <a href="https://digitalcourage.social/tags/FragdenStaat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FragdenStaat</a> <a href="https://digitalcourage.social/tags/Shiftphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shiftphone</a>  <a href="https://digitalcourage.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://digitalcourage.social/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GrapheneOS</a> <a href="https://digitalcourage.social/tags/CCC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCC</a> <a href="https://digitalcourage.social/tags/Mail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mail</a> <a href="https://digitalcourage.social/tags/Mullvad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mullvad</a> <a href="https://digitalcourage.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> <a href="https://digitalcourage.social/tags/GnuPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuPG</a> <a href="https://digitalcourage.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://digitalcourage.social/tags/Gaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gaming</a> <a href="https://digitalcourage.social/tags/linuxgaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxgaming</a> <a href="https://digitalcourage.social/tags/Lutris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lutris</a> <a href="https://digitalcourage.social/tags/Protondb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Protondb</a> <a href="https://digitalcourage.social/tags/eOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eOS</a> <a href="https://digitalcourage.social/tags/Enshittification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Enshittification</a> <a href="https://digitalcourage.social/tags/Bloatware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bloatware</a> <a href="https://digitalcourage.social/tags/TPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TPM</a> <a href="https://digitalcourage.social/tags/Murena" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Murena</a>  <a href="https://digitalcourage.social/tags/LiberaPay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LiberaPay</a> <a href="https://digitalcourage.social/tags/GnuTaler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuTaler</a> <a href="https://digitalcourage.social/tags/Taler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Taler</a> <a href="https://digitalcourage.social/tags/PreppingforFuture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PreppingforFuture</a> <a href="https://digitalcourage.social/tags/FediLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FediLZ</a> <a href="https://digitalcourage.social/tags/BlueLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlueLZ</a> <a href="https://digitalcourage.social/tags/InstaLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InstaLZ</a> <a href="https://digitalcourage.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> <a href="https://digitalcourage.social/tags/FLOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FLOSS</a> <a href="https://digitalcourage.social/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UEFI</a> <a href="https://digitalcourage.social/tags/Medienkompetenz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Medienkompetenz</a>

c_th1Meine Datenschutz und Privatsphäre Übersicht 2025, für Jedermann :02smug: Teilen erbeten ‼️ :BoostOK: als PDF:<a href="https://cryptpad.digitalcourage.de/file/#/2/file/iLDoTt03wkGUL3dA39ScX6hV/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cryptpad.digitalcourage.de/file/#/2/file/iLDoTt03wkGUL3dA39ScX6hV/</a> <a href="https://digitalcourage.social/tags/DSGVO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DSGVO</a> <a href="https://digitalcourage.social/tags/TDDDG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TDDDG</a> ( <a href="https://digitalcourage.social/tags/unplugtrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugtrump</a> ) <a href="https://digitalcourage.social/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datenschutz</a> <a href="https://digitalcourage.social/tags/Privatsph%C3%A4re" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privatsphäre</a> <a href="https://digitalcourage.social/tags/sicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicherheit</a> <a href="https://digitalcourage.social/tags/Verschl%C3%BCsselung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Verschlüsselung</a> <a href="https://digitalcourage.social/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> <a href="https://digitalcourage.social/tags/WEtell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WEtell</a> <a href="https://digitalcourage.social/tags/SoloKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKey</a> <a href="https://digitalcourage.social/tags/NitroKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NitroKey</a> <a href="https://digitalcourage.social/tags/Email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://digitalcourage.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://digitalcourage.social/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixelfed</a> <a href="https://digitalcourage.social/tags/Massen%C5%B1berwachung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Massenűberwachung</a> <a href="https://digitalcourage.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://digitalcourage.social/tags/Metadaten" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Metadaten</a> <a href="https://digitalcourage.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a> <a href="https://digitalcourage.social/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> <a href="https://digitalcourage.social/tags/Cryptpad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptpad</a> <a href="https://digitalcourage.social/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> <a href="https://digitalcourage.social/tags/Hateaid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hateaid</a> <a href="https://digitalcourage.social/tags/Cyberstalking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyberstalking</a> <a href="https://digitalcourage.social/tags/Messenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Messenger</a> <a href="https://digitalcourage.social/tags/Browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Browser</a> <a href="https://digitalcourage.social/tags/Youtube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Youtube</a> <a href="https://digitalcourage.social/tags/NewPipe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NewPipe</a> <a href="https://digitalcourage.social/tags/Chatkontrolle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chatkontrolle</a> <a href="https://digitalcourage.social/tags/nichtszuverbergen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nichtszuverbergen</a> <a href="https://digitalcourage.social/tags/%C3%9CberwachungsKapitalismus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ÜberwachungsKapitalismus</a> <a href="https://digitalcourage.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://digitalcourage.social/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://digitalcourage.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://digitalcourage.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://digitalcourage.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Matrix</a> <a href="https://digitalcourage.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodon</a> <a href="https://digitalcourage.social/tags/Friendica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Friendica</a> <a href="https://digitalcourage.social/tags/Fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediverse</a> <a href="https://digitalcourage.social/tags/Mastodir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodir</a> <a href="https://digitalcourage.social/tags/Loops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Loops</a> <a href="https://digitalcourage.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://digitalcourage.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://digitalcourage.social/tags/Foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Foss</a> <a href="https://digitalcourage.social/tags/VeraCrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VeraCrypt</a> <a href="https://digitalcourage.social/tags/HateAid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HateAid</a> <a href="https://digitalcourage.social/tags/Coreboot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Coreboot</a> <a href="https://digitalcourage.social/tags/Volksverpetzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Volksverpetzer</a> <a href="https://digitalcourage.social/tags/Netzpolitik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Netzpolitik</a> <a href="https://digitalcourage.social/tags/Digitalisierung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Digitalisierung</a> <a href="https://digitalcourage.social/tags/FragdenStaat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FragdenStaat</a> <a href="https://digitalcourage.social/tags/Shiftphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shiftphone</a>  <a href="https://digitalcourage.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://digitalcourage.social/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GrapheneOS</a> <a href="https://digitalcourage.social/tags/CCC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCC</a> <a href="https://digitalcourage.social/tags/Mail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mail</a> <a href="https://digitalcourage.social/tags/Mullvad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mullvad</a> <a href="https://digitalcourage.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> <a href="https://digitalcourage.social/tags/GnuPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuPG</a> <a href="https://digitalcourage.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://digitalcourage.social/tags/Gaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gaming</a> <a href="https://digitalcourage.social/tags/linuxgaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxgaming</a> <a href="https://digitalcourage.social/tags/Lutris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lutris</a> <a href="https://digitalcourage.social/tags/Protondb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Protondb</a> <a href="https://digitalcourage.social/tags/eOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eOS</a> <a href="https://digitalcourage.social/tags/Enshittification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Enshittification</a> <a href="https://digitalcourage.social/tags/Bloatware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bloatware</a> <a href="https://digitalcourage.social/tags/TPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TPM</a> <a href="https://digitalcourage.social/tags/Murena" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Murena</a>  <a href="https://digitalcourage.social/tags/LiberaPay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LiberaPay</a> <a href="https://digitalcourage.social/tags/GnuTaler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuTaler</a> <a href="https://digitalcourage.social/tags/Taler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Taler</a> <a href="https://digitalcourage.social/tags/PreppingforFuture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PreppingforFuture</a> <a href="https://digitalcourage.social/tags/FediLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FediLZ</a> <a href="https://digitalcourage.social/tags/BlueLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlueLZ</a> <a href="https://digitalcourage.social/tags/InstaLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InstaLZ</a> <a href="https://digitalcourage.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> <a href="https://digitalcourage.social/tags/FLOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FLOSS</a> <a href="https://digitalcourage.social/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UEFI</a> <a href="https://digitalcourage.social/tags/Medienkompetenz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Medienkompetenz</a>

froxThe <a href="https://tooting.ch/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> topic in <a href="https://tooting.ch/tags/InstantMesaging" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InstantMesaging</a> is popular again recently. As usual there's a lot of misunderstanding and little discussion of a <a href="https://tooting.ch/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> when giving recommendations. If the private key is backed up with Apple or Google from your phone, then your messages may as well not be encrypted 🙈 I've again seen this indirectly with contacts changing phones and their keys are the same as on their old device. Due to automatic backups I guess. Doesn't matter if it's <a href="https://tooting.ch/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a>, <a href="https://tooting.ch/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> or <a href="https://tooting.ch/tags/XMPP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#XMPP</a>

c_th1Meine Datenschutz und Privatsphäre Übersicht 2025, für die Allgemeinheit 🕵️‍♂️ Teilen erbeten ‼️ :BoostOK: als PDF:<a href="https://cryptpad.digitalcourage.de/file/#/2/file/NdmBgSYkRCto8B+JmJkE9mQ4/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cryptpad.digitalcourage.de/file/#/2/file/NdmBgSYkRCto8B+JmJkE9mQ4/</a> <a href="https://digitalcourage.social/tags/DSGVO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DSGVO</a> <a href="https://digitalcourage.social/tags/TDDDG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TDDDG</a> ( <a href="https://digitalcourage.social/tags/unplugtrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugtrump</a> ) <a href="https://digitalcourage.social/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datenschutz</a> <a href="https://digitalcourage.social/tags/Privatsph%C3%A4re" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privatsphäre</a> <a href="https://digitalcourage.social/tags/sicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sicherheit</a> <a href="https://digitalcourage.social/tags/Verschl%C3%BCsselung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Verschlüsselung</a> <a href="https://digitalcourage.social/tags/encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#encryption</a> <a href="https://digitalcourage.social/tags/WEtell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WEtell</a> <a href="https://digitalcourage.social/tags/SoloKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKey</a> <a href="https://digitalcourage.social/tags/NitroKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NitroKey</a> <a href="https://digitalcourage.social/tags/Email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Email</a> <a href="https://digitalcourage.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://digitalcourage.social/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixelfed</a> <a href="https://digitalcourage.social/tags/Massen%C5%B1berwachung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Massenűberwachung</a> <a href="https://digitalcourage.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://digitalcourage.social/tags/Metadaten" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Metadaten</a> <a href="https://digitalcourage.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a> <a href="https://digitalcourage.social/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> <a href="https://digitalcourage.social/tags/Cryptpad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptpad</a> <a href="https://digitalcourage.social/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a> <a href="https://digitalcourage.social/tags/Hateaid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hateaid</a> <a href="https://digitalcourage.social/tags/Cyberstalking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyberstalking</a> <a href="https://digitalcourage.social/tags/Messenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Messenger</a> <a href="https://digitalcourage.social/tags/Browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Browser</a> <a href="https://digitalcourage.social/tags/Youtube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Youtube</a> <a href="https://digitalcourage.social/tags/NewPipe" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NewPipe</a> <a href="https://digitalcourage.social/tags/Chatkontrolle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chatkontrolle</a> <a href="https://digitalcourage.social/tags/nichtszuverbergen" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nichtszuverbergen</a> <a href="https://digitalcourage.social/tags/%C3%9CberwachungsKapitalismus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ÜberwachungsKapitalismus</a> <a href="https://digitalcourage.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://digitalcourage.social/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://digitalcourage.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://digitalcourage.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://digitalcourage.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Matrix</a> <a href="https://digitalcourage.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodon</a> <a href="https://digitalcourage.social/tags/Friendica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Friendica</a> <a href="https://digitalcourage.social/tags/Fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fediverse</a> <a href="https://digitalcourage.social/tags/Mastodir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mastodir</a> <a href="https://digitalcourage.social/tags/Loops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Loops</a> <a href="https://digitalcourage.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://digitalcourage.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://digitalcourage.social/tags/Foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Foss</a> <a href="https://digitalcourage.social/tags/VeraCrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VeraCrypt</a> <a href="https://digitalcourage.social/tags/HateAid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HateAid</a> <a href="https://digitalcourage.social/tags/Coreboot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Coreboot</a> <a href="https://digitalcourage.social/tags/Volksverpetzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Volksverpetzer</a> <a href="https://digitalcourage.social/tags/Netzpolitik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Netzpolitik</a> <a href="https://digitalcourage.social/tags/Digitalisierung" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Digitalisierung</a> <a href="https://digitalcourage.social/tags/FragdenStaat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FragdenStaat</a> <a href="https://digitalcourage.social/tags/Shiftphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shiftphone</a>  <a href="https://digitalcourage.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://digitalcourage.social/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GrapheneOS</a> <a href="https://digitalcourage.social/tags/CCC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCC</a> <a href="https://digitalcourage.social/tags/Mail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mail</a> <a href="https://digitalcourage.social/tags/Mullvad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mullvad</a> <a href="https://digitalcourage.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> <a href="https://digitalcourage.social/tags/GnuPG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuPG</a> <a href="https://digitalcourage.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://digitalcourage.social/tags/Gaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gaming</a> <a href="https://digitalcourage.social/tags/linuxgaming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxgaming</a> <a href="https://digitalcourage.social/tags/Lutris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lutris</a> <a href="https://digitalcourage.social/tags/Protondb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Protondb</a> <a href="https://digitalcourage.social/tags/eOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#eOS</a> <a href="https://digitalcourage.social/tags/Enshittification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Enshittification</a> <a href="https://digitalcourage.social/tags/Bloatware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bloatware</a> <a href="https://digitalcourage.social/tags/TPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TPM</a> <a href="https://digitalcourage.social/tags/Murena" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Murena</a>  <a href="https://digitalcourage.social/tags/LiberaPay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LiberaPay</a> <a href="https://digitalcourage.social/tags/GnuTaler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GnuTaler</a> <a href="https://digitalcourage.social/tags/Taler" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Taler</a> <a href="https://digitalcourage.social/tags/PreppingforFuture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PreppingforFuture</a> <a href="https://digitalcourage.social/tags/FediLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FediLZ</a> <a href="https://digitalcourage.social/tags/BlueLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlueLZ</a> <a href="https://digitalcourage.social/tags/InstaLZ" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InstaLZ</a> <a href="https://digitalcourage.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> <a href="https://digitalcourage.social/tags/FLOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FLOSS</a> <a href="https://digitalcourage.social/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UEFI</a> <a href="https://digitalcourage.social/tags/Medienkompetenz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Medienkompetenz</a>

Paco Hope #resistSome of my colleagues at <a href="https://infosec.exchange/tags/AWS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AWS</a> have created an open-source <a href="https://github.com/awslabs/threat-designer" rel="nofollow noopener noreferrer" target="_blank">serverless #AI assisted #threatmodel solution</a>. You upload architecture diagrams to it, and it uses Claude Sonnet via Amazon Bedrock to analyze it.I'm not too impressed with the threats it comes up with. But I am very impressed with the amount of typing it saves. Given nothing more than a picture and about 2 minutes of computation, it spits out a very good list of what is depicted in the diagram and the flows between them. To the extent that the diagram is accurate/well-labeled, this solution seems to do a very good job writing out what is depicted.I deployed this "Threat Designer" app. Then I took the architecture image from <a href="https://medium.com/serverless-transformation/what-a-typical-100-serverless-architecture-looks-like-in-aws-40f252cd0ecb" rel="nofollow noopener noreferrer" target="_blank">this blog post</a> and dropped that picture into it. The image analysis produced some of the list of things you see attached.This is a specialized, context-aware kind of OCR. I was impressed at boundaries, flows, and assets pulled from a graphic. Could save a lot of typing time. I was not impressed with the threats it identifies. Having said that, it did identify a handful of things I hadn't thought of before, like EventBridge event injection. But the majority of the threats are low value.I suspect this app is not cheap to run. So caveat deployor. <a href="https://infosec.exchange/tags/cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloud</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsecurity</a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#appsec</a> <a href="https://infosec.exchange/tags/threatmodeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatmodeling</a>

Emory> When doing threat modeling from here on out, it is now unfortunately important to consider the question "Am I a moron?"derisking morons is something i do for a living if anyone is hiring for that. i also turn software engineers into security and privacy resources. triple multiplier right here 🖐️ <a href="https://soc.kvet.ch/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://soc.kvet.ch/tags/threatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatModel</a> <a href="https://soc.kvet.ch/tags/morons" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#morons</a> <a href="https://apple.news/Ay6s_pSlzRrGicmqMVSr65w" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://apple.news/Ay6s_pSlzRrGicmqMVSr65w</a>

9x0rg> You and your team should incrementally update your threat model as your system changes, integrating threat modeling into each phase of your SDLC to create a Threat and Risk Analysis Informed Lifecycle (TRAIL). Here, we cover how to do that: how to further tailor the threat model we built, how to maintain it, when to update it as development continues, and how to make use of it.**Continuous TRAIL - The Trail of Bits Blog**<a href="https://blog.trailofbits.com/2025/03/03/continuous-trail/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.trailofbits.com/2025/03/03/continuous-trail/</a><a href="https://mamot.fr/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mamot.fr/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>

Emoryi have debilitating <a href="https://soc.kvet.ch/tags/imposterSyndrome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#imposterSyndrome</a> 😆 25y experience in <a href="https://soc.kvet.ch/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>, but i know for a fact that i am unusually good at facilitating a <a href="https://soc.kvet.ch/tags/threatmodel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatmodel</a>. you have to get people to trust you enough to tell you things they don't feel great about or would do differently after we meet but that's the thing— together we create remediation plans that let people do their best work & they weave security and privacy into their work and when you meet again you can see how much better things are, it's parade time

Emoryit's lucky for some team out there that i find few things are as satisfying as transmogrifying a team of 3 into a team of 9. or 90 into 270.even i know that's good math! they start spotting problems before they get in front of me for their second and third <a href="https://soc.kvet.ch/tags/threatmodel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatmodel</a>.i have experience in managed services, vuln management, IR, forensics, cloud architectures, saas vendors, HPC, docsis/fiber/firewalls/ids/ips/MFA/u2f/pki🤷 🤓 <a href="https://soc.kvet.ch/tags/jobsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobsearch</a> <a href="https://soc.kvet.ch/tags/threatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatModeling</a> <a href="https://soc.kvet.ch/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://soc.kvet.ch/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://soc.kvet.ch/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://soc.kvet.ch/tags/fedihired" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fedihired</a>

QuixoticgeekFediverse. I need your magic. Please tell me your most amusing and wtf <a href="https://social.v.st/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a> fails.

Anti. 🐘<a href="https://chaos.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModel</a>: January 16, 2025 by <a href="https://mastodon.social/@violetblue" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@violetblue</a> (formerly known as <a href="https://chaos.social/tags/PandemicRoundup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PandemicRoundup</a>)"· Surges in US, Canada, Bolivia, Peru · <a href="https://chaos.social/tags/MaskBloc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MaskBloc</a> LA: 43,000 masks · Study: Multiple <a href="https://chaos.social/tags/COVID19" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#COVID19</a> infections associated with <a href="https://chaos.social/tags/LongCOVID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LongCOVID</a> · COVID-19 triggers ME/CFS [duh!] · Study: Covid survivors twice as likely to develop Alzheimer’s · Oncologists warn mild Covid can cause Leukemia patients in remission to relapse & much more. Stay apart, stand together, mask up, & stay strong."

Recherches récentes

Options de recherche

Administré par :

Statistiques du serveur :

#threatmodel