I’m currently in the middle of building one at the moment precisely because of how limited I found canary tokens. I also have a lot of security knowledge (most

I’m currently in the middle of building one at the moment precisely because of how limited I found canary tokens. I also have a lot of security knowledge (mostly from books rather than practical experience) from non infosec case studies like intel agency operations, insurgent groups, law enforcement, military, organised crime and other scenarios where the consequences of making bad decisions is incredibly high and probably involves some level of violence at a minimum. I always thought that this XKCD comic (https://xkcd.com/538/ https://xkcd.com/538/) summed it up nicely precisely how that factor can actually change your threat model fairly significantly in a way that I don’t generally see turn up in the field of cyber security specifically. But more than that I just generally found that to be an invaluable resource for when it comes to how to think about what actually makes these things work in the real world and what you can actually do in order to really make life very miserable for an adversary long before they even realise what’s going on. It’s probably been the most fun thing I’ve built in 20 years.