New posts in Threat Modeling

Should the average user with no special access rights be worried about SMS-based 2FA being theoretically interceptable?

Is public Wi-Fi a threat nowadays?

What is the threat model for AWS EBS volumes encryption?

Evaluating the security of home security cameras

Dataflow diagram - how far do I need to drill down?