threat modeling
7 posts
I reverse-engineered a 2002 GameCube before doing it legally
Decomp Academy turns matching decompilation into a teachable, verifiable skill, which exposes why compiled opacity was never a real security control.
They knocked on his door, not his firewall
Danish police raided privacy activist Lars Andersen with no technical breach. The boundary moved to physical custody, where remote controls were never positioned.
2023 mistakes an IP address for a passport
Forcing real ID on all internet traffic relocates an unsolved identity problem to a layer that cannot verify the subject and creates a higher value target.
Researchers silently exfiltrate files from Claude sessions
A live demo shows files inside Claude AI chats can be silently exfiltrated. Operator briefing on what failed, what it exposes, and what must change.
Dutch police seized the provider
Dutch authorities seized 800 servers from a hosting firm for enabling cyberattacks. The provider tier is no longer treated as neutral.
Discord's E2EE doesn't make your calls private
Discord rolled out E2EE on voice and video calls. What the control covers, what it does not, and where attackers will redirect effort.
The disassembler is now a free download
An open source disassembler and decompiler release removes the cost filter defenders implicitly priced into attacker capability. The model needs correction.