26Oca
Is there a foundational threat model for families/domestic users?
I am aware through hearsay of the threats exposed by certain digital assets. For example, not only should a password be kept secret, but it should not be re-used. Having the scenario unpacked for me, I now understand that password re-use is risky.
But I would suggest that this is somewhat unintuitive, and may not have occurred to me if I was asked Who are you protecting it from?
Given the plethora of digital assets used in domestic life (email accounts, service accounts, IoT devices, IMEI), rather than a commercial scenario, how can I reliably start threat modelling?
To be specific rather than broad, is there a foundational threat model for families/domestic users? One specific example would answer the question.
