Threat Modeling: Developing Personal Threat Profiles
Identify your adversaries to customize security settings without destroying usability. STRIDE, PASTA, and attack tree methodologies adapted for individuals.
Threat modeling, OSINT, and digital footprint defense
Identify your adversaries to customize security settings without destroying usability. STRIDE, PASTA, and attack tree methodologies adapted for individuals.
Username enumeration, email breach checks, Google dorks, Archive.org recovery, and data broker opt-outs — with worked command output.
Migrate Gmail, Google Maps, Search, Chrome, and Drive to privacy-respecting alternatives. Service-by-service replacement matrix.
Defeat automated facial recognition with adversarial makeup (CV Dazzle), image cloaking (Fawkes), IR LEDs, and legal/technical countermeasures.
Randomize or set static MAC addresses per interface. NetworkManager, systemd-link, Windows registry, and persistent OpenWrt configs.
Step-by-step installation and hardening of GrapheneOS on Pixel hardware, including sandboxed services and verified boot.
Side-by-side: verified boot, sandboxed Play, microG, update cadence, device support, and threat model fit. September 2026 update.
Protect against SIM swap attacks: carrier port freeze, Efani secure mobile, TOTP/FIDO2 over SMS, and recovery procedures.
Disable Siri analytics, iCloud link tags, Location Services, and hardware logs. MDM profile hardening and Little Snitch rules.
Tweak registry keys, group policies, and services to stop Windows telemetry. O&O ShutUp10++, Chris Titus Tech utilities, and verification.
Encrypted communication comparison: Signal, Session, Matrix/Element, Briar, and Jami with setup tutorials and threat model analysis.
Run your own Mastodon instance or use Nostr relays. Identity portability, algorithmic feed control, and cross-protocol bridging.
SecureDrop, OnionShare, Signal disappearing messages, metadata minimization, and legal shield laws for source communication.
Printable 10-item checklist: passwords, updates, firewalls, backups, 2FA, disk encryption, and browser hardening. No special hardware required.
View all categories: