Main Page/Crash Courses/Systems and Policies/Week two

Week 2: Threat modeling and privacy basics

• Real time lecture: July 30th 9 - 11 Pacific/12 - 2 Eastern on Zoom https://zoom.us/j/9129428892

Overview

This week we'll cover one of the building blocks of privacy advocacy and a major theme for this course: threat modeling. Threat modeling is a method for figuring out a privacy strategy that works for someone based on their unique needs, their material conditions, and their community network. Alison will teach us how to threat model, and how we can use this methodology in thinking about privacy in big and small ways. We'll discuss some example threat models, and the ways that different threat models should impact our decision-making when it comes to library privacy. We'll also be getting into some basic privacy strategies, terminology, and practices.

Readings

• Bruce Schneier on "The Security Mindset" https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html
• Read EFF's threat modeling one-pager: https://www.eff.org/files/2015/11/24/3mod_threat-modeling-ssd_9-3-15.pdf
• Privacy glossary TBD

Discussion prompt

• What threat models do you know exist in your community? Which ones resonate with you the most?

Tasks

• Lecture, readings, post to discussion board