Main Page/Crash Courses/Programs and training/Week 2

Week 2: Threat modeling and privacy terms

• Real time lecture: October 11th, 12 - 2 pm Pacific/3 - 5 pm Eastern on Zoom https://zoom.us/j/9129428892
• Recording:
• Slides:

Overview

This week we'll cover one of the building blocks of privacy advocacy and a major theme for this course: threat modeling. Threat modeling is a method for figuring out a privacy strategy that works for someone based on their unique needs, their material conditions, and their community network. Alison will teach us how to threat model, and how we can use this methodology in thinking about privacy in big and small ways. We'll discuss some example threat models, and the ways that different threat models should impact our decision-making when it comes to library privacy. We'll also introduce and discuss basic privacy terminology.

Readings

• Bruce Schneier on "The Security Mindset" https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html
• Read EFF's threat modeling one-pager: https://www.eff.org/files/2015/11/24/3mod_threat-modeling-ssd_9-3-15.pdf
• Read through this privacy glossary. We'll go over some key terms during our conversation.

Discussion board prompt

• What threat models do you know exist in your community? Which ones resonate with you the most? How could you use threat modeling to make arguments in favor of privacy in your library? In what ways is the library an adversary or a potential adversary?
• What takeaways do you have from the week one readings?
• Chat link: https://libraryfreedom.chat/t/cc-2-week-2-threat-modeling/876

Tasks

• Lecture, readings, post to discussion board