David Chisnall (*Now with 50% more sarcasm!*) on Nostr: > Vendor -> me: "That's not in our threat model" And then ask them to articulate ...
> Vendor -> me: "That's not in our threat model"
And then ask them to articulate their threat model, and it turns out that they don't actually have one, they just declare things out of scope if they're broken.
{
"id":"b661e9ff75590737dc10aca92cee2acc15358d07af12bd54e40971ef4b5dbd61",
"pubkey":"8a30e1f5176e1c530ac88aec455539e3fe2b5d7f5d3ce0b674392bbaac83281b",
"created_at":1715873751,
"kind":1,
"tags": [
[
"e",
"e0ed14bc9b438221e78e234dedf0d71321b51661759766b41eab57da1260e6a2",
"",
"root"
],
[
"p",
"7242fe8980b966af4bc244f32a570329a50a19594896e1707268651ae7b4638a"
],
[
"p",
"a240b20a50f9a16ed810d5086ccf885fc01798150dfbbb446b78aebd6925231c"
],
[
"e",
"0ff26b2e9bb097272906aba89ed6d641f47b65dc16def514f2ad12ba71d531b9",
"",
"reply"
],
[
"proxy",
"https://infosec.exchange/@david_chisnall/112451502198400811",
"web"
],
[
"proxy",
"https://infosec.exchange/users/david_chisnall/statuses/112451502198400811",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/david_chisnall/statuses/112451502198400811",
"pink.momostr"
]
],
"content":"\u003e Vendor -\u003e me: \"That's not in our threat model\"\n\nAnd then ask them to articulate their threat model, and it turns out that they don't actually have one, they just declare things out of scope if they're broken.",
"sig":"5e0cf252cbf3c3f89ae93d2fc13b4fd715e04a491a69209d31a0800691ebe663a3279eff4db09af0aa597e715a9746c47c3740308b9070511ac5a4e8aec5e18e"
}
