Kits (2)
Discussions

Notes from last Friday’s flood-themed threat modeling session: = threats = floodssurprise you’re in flood zone and don’t know itinsufficient drainagedips in road floodedstanding water floodrunning water flood / mudflowmold = assets = basement homelife (drowning)house in low lying neighborhoodhouse damagehouse contents damagepetsaccess to hospitalaccess to storeaccess to gassanityneighbors = protections = higher foundationhouse on stiltssandbagsquick dam – quick deploy inflatable sandbagsplastic liner around sandbagspruning treesbuy home with fewer risksno large trees near housemove horses to high spotssump pump – maybe multiple – battery backupdrainage for water to flow around houseparks that soak up waterfrench drainageevacuation planstay with friend in safer home during stormsignup for local/county alertswatch local newsdon’t drive during stormdon’t drive through high waterknow the low spots in roads and avoid themknow how to evac car safely if car caught in floodplastic (waterproof) containers for items in garagekeep garage items off the groundfansdehumidifiersroof tightdownspouts lead away from houseclean roof gutterswindows have no leaksdoors securemove important stuff to high spotsbackup copy of documents to cloudlist of plumbers/handymen/etc for emergency contractor helpcats in carrier upstairsriskfactorreview topographic mapbioswale – pit for collecting waterHOA monitors and improves drainagemonitor nearby storm grates for trash buildupgreen space to absorb waterwiden river channels to allow more swell before homes/businesses impactedalternate routes to clinic/store/evac/hospital for when lowlying roads floodedget to know your area – topography/resourcesdon’t build/buy/rent on edge of riverchecklist for storm prepacclimate to discomfortphysical fitnesswaderslife jacketcheck in on neighbors before/during/after storm and exchange numbers

At yesterday’s chat night we this article on threat modeling and tried sketching our own threat model. https://arstechnica.com/information-technology/2017/07/how-i-learned-to-stop-worrying-mostly-and-love-my-threat-model/ We started with a handful of threats that we wanted to be well prepared for: hackers, a disgruntled ex, mice… Then for each we got specific about how each of them could hurt us. Were we concerned about survival, property, health… preserving the cotton candy in the walls… For each combination of threat and asset, we talked about options for protecting that asset from that threat. And occasionally decided that some of those risks could just be accepted without protection. = Threats (source of problems) = hackersdisgruntled ex – newbie hackerhurricanewildfirehousefiremousefloodwater heater damage = Assets (what could actually go wrong) = moneydebit cardcredit cardidentity – name, ssn, address – use to file for unemploymentaccess to food/waterpossessions in apartment: carpet, furniture, suppliesaccess to shelteraccess to toiletimmune healthlifecotton candy in walls = Protection (how to mitigate threats to assets) = Say no when purse company asks if ordering purse for someone in Texas.Be careful who you piss off.Up-to-date contact infoLifeLock– gave alert of info used for other state unemployment– alerts on any usage of information– invasive! credit card company blocked cardno upload to lifelock.– but locked out of account– and they keep warning via email anyway– alternative: credit karma shows what loans you have openHomeTitleLock – like LifeLock but for homechange passwords quarterlyemail account reminds password change every 3 months2fa on all financial accounts – any accountcredit card notifies via text on each usagestash of pemmicanfire extinguisherplan to bug out and related equipmentred cross contact infocar bug out kitbug out kit buried in front yardBB gunsanitize house with BAK benzyle chloratesandbagspumpdon’t play in flood waterboatflood evac plan to higher elevationflood panwater sensor in water heater flood panmaintenance/plumber contact infoshop vacfans to dehumidify


Load more...

Notes from last Friday’s flood-themed threat modeling session: = threats = floodssurprise you’re in flood zone and don’t know itinsufficient drainagedips in road floodedstanding water floodrunning water flood / mudflowmold = assets = basement homelife (drowning)house in low lying neighborhoodhouse damagehouse contents damagepetsaccess to hospitalaccess to storeaccess to gassanityneighbors = protections = higher foundationhouse on stiltssandbagsquick dam – quick deploy inflatable sandbagsplastic liner around sandbagspruning treesbuy home with fewer risksno large trees near housemove horses to high spotssump pump – maybe multiple – battery backupdrainage for water to flow around houseparks that soak up waterfrench drainageevacuation planstay with friend in safer home during stormsignup for local/county alertswatch local newsdon’t drive during stormdon’t drive through high waterknow the low spots in roads and avoid themknow how to evac car safely if car caught in floodplastic (waterproof) containers for items in garagekeep garage items off the groundfansdehumidifiersroof tightdownspouts lead away from houseclean roof gutterswindows have no leaksdoors securemove important stuff to high spotsbackup copy of documents to cloudlist of plumbers/handymen/etc for emergency contractor helpcats in carrier upstairsriskfactorreview topographic mapbioswale – pit for collecting waterHOA monitors and improves drainagemonitor nearby storm grates for trash buildupgreen space to absorb waterwiden river channels to allow more swell before homes/businesses impactedalternate routes to clinic/store/evac/hospital for when lowlying roads floodedget to know your area – topography/resourcesdon’t build/buy/rent on edge of riverchecklist for storm prepacclimate to discomfortphysical fitnesswaderslife jacketcheck in on neighbors before/during/after storm and exchange numbers

At yesterday’s chat night we this article on threat modeling and tried sketching our own threat model. https://arstechnica.com/information-technology/2017/07/how-i-learned-to-stop-worrying-mostly-and-love-my-threat-model/ We started with a handful of threats that we wanted to be well prepared for: hackers, a disgruntled ex, mice… Then for each we got specific about how each of them could hurt us. Were we concerned about survival, property, health… preserving the cotton candy in the walls… For each combination of threat and asset, we talked about options for protecting that asset from that threat. And occasionally decided that some of those risks could just be accepted without protection. = Threats (source of problems) = hackersdisgruntled ex – newbie hackerhurricanewildfirehousefiremousefloodwater heater damage = Assets (what could actually go wrong) = moneydebit cardcredit cardidentity – name, ssn, address – use to file for unemploymentaccess to food/waterpossessions in apartment: carpet, furniture, suppliesaccess to shelteraccess to toiletimmune healthlifecotton candy in walls = Protection (how to mitigate threats to assets) = Say no when purse company asks if ordering purse for someone in Texas.Be careful who you piss off.Up-to-date contact infoLifeLock– gave alert of info used for other state unemployment– alerts on any usage of information– invasive! credit card company blocked cardno upload to lifelock.– but locked out of account– and they keep warning via email anyway– alternative: credit karma shows what loans you have openHomeTitleLock – like LifeLock but for homechange passwords quarterlyemail account reminds password change every 3 months2fa on all financial accounts – any accountcredit card notifies via text on each usagestash of pemmicanfire extinguisherplan to bug out and related equipmentred cross contact infocar bug out kitbug out kit buried in front yardBB gunsanitize house with BAK benzyle chloratesandbagspumpdon’t play in flood waterboatflood evac plan to higher elevationflood panwater sensor in water heater flood panmaintenance/plumber contact infoshop vacfans to dehumidify


Load more...