When everyone is part of your threat model

found on eBaum's World

I'm not sure we would have much of a civilization if we couldn't trust each other most of the time, but if this is how much you trust people then I suppose you should act accordingly. 

When chocoholics attack

found on Izismile

Normally I think we would all question whether this was a reasonable use of a security measure. Such devices are usually reserved for items that have a high value, but value can be subjective, and candy bars may be much more valuable to someone with a compulsion to eat chocolate. So if that's a real threat model in this store then the security measure makes sense.

For those with advanced persistent toes

from here and here (image source)

I'm not sure what these are supposed to protect the wearer from, but just because I don't know doesn't mean it isn't a valid part of someone's threat model.

What's in YOUR threat model?

found on Funny Junk

Are limbo dancers likely? I suppose that depends on what part of the world this is from. I think we all recognize that someone peeking under the door or over the stall or through the crack in the door are at least somewhat realistic privacy threats. Maybe you've even made eye contact with someone that way before (I know I have).

Good thing you didn't forget which finger to use

found on Acid Cow

There are a variety of reasons why unlocking a phone with just a fingerprint might not be a good idea (such as the fact that it can be entered without your consent by an intimate contact or compelled from you by the authorities) but if those kinds of adversaries aren't part of your threat model then forgetfulness is certainly an argument in favour of fingerprint unlock.

Threat modeling gone wrong

from here and here

It's amazing that the US has tighter restrictions on Kinder Surprise Eggs (not to be confused with Kinder Joy Eggs) than they do on assault rifles. I wonder how the deliberations for that went. Do you think if there was a chocolate lobby as powerful as the gun lobby that there would be a constitutional amendment guaranteeing the right to bare treats? 

Lock up your landmarks

from here and here (source article)

I actually don't know what kind of theft prevention measures you can use here. What are you going to do, chain it to a tree? Anyone with the capability to move a bridge also has the capability to eliminate any restraining mechanism you might employ like a lock or chain. This kind of threat is beyond traditional preventative measures, but detective measures like motion sensors or surveillance cameras might do the trick. The only issue is that who anticipates this kind of threat in the first place when they formulate their threat model?

Beware of tacti-camel

from here and here (image source)

I think it may be time to update our threat models about camels. Some of them may be capable of more than we anticipated (even if it's only inadvertently when the gun gets knocked around).

Threat Modeling: These guys get it

found on Izismile

Be smart. If Vladimir Putin offers you tea, politely decline. I'm sure it's perfectly safe most of the time, but who wants to find out the hard way that it was Putin's special tea?

Don't sniff the glue while building threat models

from here and here (image source)

Not all threat models are created equal. Some are just plain useless. What's pictured above is not a realistic threat, it's not something you have to plan for. More likely it's an eccentric war museum or an attempt to help a coral reef grow. But people who aren't good at evaluating threat models could certainly look at it and think it represents an actual military force instead of a military farce.

Turtle vs. Cows

Watch on YouTube

That's not how I would have imagined a fight between a turtle and a herd of cows would play out. As tough as the turtle's shell may be, I bet a single cow could crack it and a whole herd could do some major damage if they decided to trample that little moving rock. But I guess they aren't any better at judging risks than we are, and with all that armour the turtle has learned that nothing is in it's threat model, not even even a beast 20x it's size.

Security theatre in a theatre

found on Izismile

I'm having a tough time imagining what the big deal about tortillas is. What's the threat model here? This seems way over the top for a food item.

Now that's a weird threat model

found on eBaum's World

I don't know what happened in there in the past that the establishment wants to avoid repeating, but it seems like it must be one heck of a story.

They hog more than just the ground

found on Izismile

If you've got apples, you better add this guy to your threat model if you want to protect them.

How threat models have changed

found on Izismile

I know we're terrible at estimating risk, but when I see it presented like this I'm not sure if we're getting better over time or worse.