3 ms·
My threat model is someone that would have full access to my computer without me knowing. So they could over time get access to passwords, modify my OS to MITM
by ta988 6y ago
My threat model is someone that would have full access to my computer without me knowing. So they could over time get access to passwords, modify my OS to MITM yubikeys... Over cautious really likely, but that doesnt cost me much more
- cutemonster 6y ago> someone that would have full access to my computer without me knowing What's most relevant, in your case, would you say? Evil maiden attack, or browser zero day, or spear phishing? An insider? Or something else? (And how did you arrive at that threat model, if i may ask)
- ta988 6y agoBrowser zero day or some kind of malicious linux package that gets distributed mostly. Don't think i've a profile that would make people bother to do physical attacks.
- cutemonster 6y agoOk. Me too, plus malicious software dependences