oxeo0/blog-contributions
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git synced 2025-07-02 06:46:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

formatting fix

Browse source
This commit is contained in:
urist 2025-01-31 11:28:23 +01:00
parent 4ae8e808c1
commit dd1cbcf790
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
opsec/cloud_provider_adversary/index.html
View file

@ -72,7 +72,7 @@ If clandestinity is a requirement, there also are cryptocurrency-based options i
<br><br>
But, <b>what if the adversary is already inside?<b><br>
But, <b>what if the adversary is already inside?</b><br>
in this post we are going to do a threat modelling exercise:<br><br>
@ -139,13 +139,13 @@ in this post we are going to do a threat modelling exercise:<br><br>
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
# <div class="col-lg-8 col-lg-offset-2">
<h1><b>Alice's threat model</b></h1>
Alice is very happy with her new deployment. The platform runs great and her team has started using it in earnest. Still, the bond of implicit trust that now exists between her and Bob bothers here. She decides to do a quick threat modelling exercise to calm her mind: instead of wondering about whatifs, she is going to identify the risks associated with her current setup and find ways to mitigate them.
<h2><b>Threats to Confidentiality</b></h2>
If Bob was dishonest (or compelled into acting dishonestly), he would be able to harvest information directly from her server's memory! (She doesn't know Leo is already hard at work)<br><br>
<b>Impacted assets<b><br>
<b>Impacted assets</b><br>
<ul>
<li>decryption keys (eg: her https private key, allowing for complete decryption of her team's traffic)</li>
<li>sensitive data (ephemeral private messages on her forum that arer only kepy in RAM in an unencrypted form)</li>