Too many people avoid threat modeling because they think it’ll take too much time. It doesn’t have to!

Two Scenario Threat Modeling - Jacob Kaplan-Moss

<p>A trap that many people fall into when trying to threat modeling or risk planning is a fear of being incomplete that leads them to not even try....

Tech books, free to a good home. Email or DM me your address and what book(s) you want and I’ll get them in the mail early next week.

How much of a pain is setting up some sort of TSDB (Influx? Grafana?) for my Home Assistant install? Mostly I want better long-term data visualization and analysis of things like temp, water and electricity usage, etc. HA has rudimentary charts, but I’m looking for something better. Metrics-based alerting would be nice too. But I don’t want to spend more than a couple hours AT MOST setting this up. Any pointers?

It’s common to say that “people suck at thinking about risk” — certainly it’s something that I’ve said often. And there are tons of examples of how our intuitive sense of risk goes wrong. But… what if we thought differently? What if, instead, we started from an assumption that people’s risk assessments are accurate _for them_? What are the implications of thinking this way?

What if We Thought About Risk Decisions Differently? - Jacob Kaplan-Moss

Risk professionals often operate from the assumption that people are inherently bad at assessing risk, especially when it comes to low-probability...