Security training: Targeted Activists versus Assholes with Resources

Wiki ▸ Security culture ▸ Persona-based training matrix ▸ Security training: Targeted Activists versus Assholes with Resources

How to use this persona-based threat modeling matrix:

1. You are a "defender" (a given row). Find yourself there.
2. Your concern(s) map to a given "attacker" (a given column). Find your attacker.
3. Find the cell at which these two personas intersect. Everything listed in the cells above and to the left of your cell applies to you, too.
4. Start at the top-left cell and read the advice from left-to-right, top-to-bottom, until you reach your cell. Then stop worrying. :)

		Attackers
		Random Assholes	Assholes with Resources	The State
Defenders	Individuals	Individuals vs Random Assholes	Individuals vs Assholes with Resources	Individuals vs The State
	Organizers and Journalists	Organizers & Journalists vs Random Assholes	Organizers & Journalists vs Assholes with Resources	Organizers & Journalists vs The State
	Targeted Activists	Targeted Activists vs Random Assholes	Targeted Activists vs Assholes with Resources	Targeted Activists vs The State

Targeted Activists versus Assholes with Resources

Prerequisites

Before you dive too deeply into this practice material, you should first explore the following lower-hanging fruit in the following order:

1. Security training: Individuals versus Random Assholes
2. Security training: Individuals versus Assholes with Resources
3. Security training: Organizers and Journalists versus Random Assholes
4. Security training: Organizers and Journalists versus Assholes with Resources
5. Security training: Targeted Activists versus Random Assholes

Practices

• Use the "High" security level in your TorBrowser (disables JavaScript, HTML5 Web Fonts, etc.)
• Use dedicated virtual machines for specific purposes to open documents you don't trust, and take other specialized tasks
• Clean/audit your device's root TLS certificate stores (for instance, with Sigcheck or RootCertificateCheck)
• Place your hand over a PIN pad (at an ATM, supermarket checkout, etc.) to warm the buttons before entering your pin