Embed Notice

@SteveBellovin @hpk

Not to #bikeshed but...

In my experience asking "whom?" only works if the person you ask have a competent(-ish) threat-model, which no normal people do.

The implicit focus on intentionality also downplays the much more frequent accidental loss of control.

At least for me, it works better to ask what outcomes we are trying to avoid, and work through both the intentional, incidental and accidental scenarios that lead there.