A long time ago, I was on a Gamergate target list. Nothing happened, but it was scary and it made me think very concretely about two threats: people getting into my accounts, and people turning up in person.
The second one is why, for years, my travel newsletter only ever said where I'd been, never where I was going.
I didn't call any of that threat modelling at the time. I was thinking the way engineers think, working out who I was worried about and what they might do.
That's a threat model though, and it's where @halle and I start in Breaking Into the Security Mindset: the same thinking, pointed at your product instead of your life.
There's something a bit radical about two women building a course about security, which I love. Security has a specific idea of who belongs in it, and plenty of engineers rule themselves out.
Our take is that we do security all the time. We just usually call it "bug fixing" or "UX". Turns out, for all the FUD, it's not rocket science. It's a systematic way of looking at things, and engineers are trained for this.
Our first cohort starts TOMORROW, October 12. We'd really love it if you joined us.