Ryan Castellucci :nonbinary_flag:
Developers should make "abuser stories" a thing.
"As an stalker,
I want to track my ex's every move,
so that I can 'coincidentally' run into them at any time."
"As a thief,
I want to be able to reset passwords using SMS verification,
so that I can compromise any account by bribing a telco employee."
Aris Adamantiadis :verified:💲Paid
@ryanc isn't that basically how we do threat modeling? Except we use third person, it's weird otherwise
Ryan Castellucci :nonbinary_flag:
@aris It is, but this distills it down to something that is easy to understand by most people.
Who is the threat actor?
What do they want?
Why do they want it?
Jan D
@ryanc seems similar to https://simplysecure.org/designunderpressure/#methods !
Ryan Castellucci :nonbinary_flag:
@simulo Oh, I like these. "Miscreant" is a term of art used in some circles to cover basically the same sorts that "persona non grata" is being used describe.
David Chisnall (*Now with 50% more sarcasm!*)
@ryanc Are there developers that don’t do this already? I suppose that explains the poor security of a lot of products.
Ryan Castellucci :nonbinary_flag:
@david_chisnall It's not just security - I included the stalker for a reason.
People have a "how would my partner's creepy ex use this" conversation for major features.
Ryan Castellucci :nonbinary_flag:
@gsuberland This is why I get paid enough to pick fights in court with entities which have thirteen figure annual budgets.
Graham Sutherland / Polynomial
@ryanc decent way to distill threat models down to the bare minimum needed to convey the idea. I like it.
David Chisnall (*Now with 50% more sarcasm!*)
@ryanc I'd include that under the heading of security. It's closely related to the 'can an attacker leak information from my smart device that tells them when my house is unoccupied' threat.
I'm still waiting for an organised crime syndicate to provide a service that aggregates a load of data from Facebook and similar to tell petty criminals which houses near them are unoccupied.
Daniel Fisher(lennybacon)
@ryanc Uhhh, I really like that. Few years ago I coined the term Breakstorming, where ppl sit together and verbally discuss how to break a piece of software. Abuser Stories complement them very well!
PaleManBates
@SteveClough @ryanc @aris this framing is an excellent conversation starter with the product team though, especially when it's the ironic flipside to a feature request.
PM: let's add location tracking!
You: so, "As a stalker I..."
Schroedinger
@ryanc @aris But if you do threat modelling properly, you do that. You identify the sort of people who might want to gain access.and why.
I see your point about making them easier to understand, but I worry that they can be too simple.
Also so often, a threat model identifies areas of threat. The threat actors can and will change. Security dev always needs to be flexible and changeable - in weeks/months, not years.
Ryan Castellucci :nonbinary_flag:
@7heo I probably stole it from somewhere, go wild.
7heo
@ryanc actually more a tool for defensive security. But definitely a great idea. Can I steal?
Mathaetaes
@ryanc we do this. We just call them misuse cases, and we have a team of assholes we call offensive engineers to come up with them.
Ryan Castellucci :nonbinary_flag:
@ulf Of a sort, yes. I posted a more fleshed out version that said as much on linkedin a few minutes after I posted here.
Ulf
@ryanc that is called threat modeling #threatmodeling
Ryan Castellucci :nonbinary_flag:
@worldwidewerner Yeah, it's threat modeling, but it's a very limited form of threat modeling, and it's also other things.
Werner
@ryanc
I see people in the comments here talk about using this as threat modeling, but as a developer who think philosophy class was my most valuable subject, I see this as a useful tool for ethics in sysdev.
Less can I do this and more should I do this.
Thomas Reed
@ryanc @PwnieFan I now desperately want to use that for any user story I disagree with! 😄
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.