Main Page/Crash Courses/Programs and training/Week 2

Week 2: Threat modeling and privacy terms

• Real time lecture: October 24th, 10am - 12pm Pacific/1pm - 3pm Eastern on Zoom https://zoom.us/j/9129428892
• Recording: https://vimeo.com/763516152
• Slides: https://docs.google.com/presentation/d/1l5_I4CqIkHYPyBrM9LZW6P2L1qvknUsw1XvbdMjKcAI/edit?usp=sharing

Overview

This week we'll cover one of the building blocks of privacy advocacy and a major theme for this course: threat modeling. Threat modeling is a method for figuring out a privacy strategy that works for someone based on their unique needs, their material conditions, and their community network. Alison will teach us how to threat model, and how we can use this methodology in thinking about privacy in big and small ways. We'll discuss some example threat models, and the ways that different threat models should impact our decision-making when it comes to library privacy. We'll also introduce and discuss basic privacy terminology.

Readings

• Bruce Schneier on "The Security Mindset" https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html
• Read EFF's threat modeling one-pager: https://www.eff.org/files/2015/11/24/3mod_threat-modeling-ssd_9-3-15.pdf
• Read through this privacy glossary. We'll go over some key terms during our conversation.

Discussion board prompt

• What threat models do you know exist in your community? Which ones resonate with you the most? How could you use threat modeling to make arguments in favor of privacy in your library? In what ways is the library an adversary or a potential adversary?
• Chat links: https://libraryfreedom.chat/t/cc-4-threat-modeling/979

Tasks

• Lecture, readings, post to discussion board