Author Archives: Loretta George

How to Evaluate Your Personal Threat Model: A Practical Guide for Open-Society Defenders

Personal threat modeling is a structured way to figure out what you need to protect, who might want to compromise it, and how they could pull it off. It sits at the messy intersection of operational security, digital self-defense, and … Continue reading →

Posted in General | Comments Off on How to Evaluate Your Personal Threat Model: A Practical Guide for Open-Society Defenders

How to Build a Personal Threat Model: A Practical Guide for Open Societies

What Is a Personal Threat Model and Why Does It Matter? In an open society, security isn’t about living in fear. It’s about seeing clearly. A personal threat model is simply a way to figure out what you’re protecting, who … Continue reading →

Posted in General | Comments Off on How to Build a Personal Threat Model: A Practical Guide for Open Societies

Why Security Documentation Is a Narrative Problem — and What That Means for Public Accountability

Security incident reports, vulnerability disclosures, and threat intelligence briefs have something in common with investigative journalism and court testimony. They are narratives. Actors, timelines, causality, stakes. Yet most security documentation reads as disconnected technical fragments — tables of indicators, lists … Continue reading →

Posted in General | Comments Off on Why Security Documentation Is a Narrative Problem — and What That Means for Public Accountability

Why We Need Better Security Education for Non-Technical Users

Security Is Not a Feature—It’s a Shared Practice Open security means exactly that: security that is transparent, participatory, and designed for everyone, not just the people who configure firewalls or read threat reports. In democratic societies, digital safety is a … Continue reading →

Posted in General | Comments Off on Why We Need Better Security Education for Non-Technical Users

Why Security Documentation Is an Editorial Problem, Not Just a Technical One

In March 2024, CISA published an advisory about an actively exploited vulnerability in a widely used VPN appliance. The advisory had what security teams needed on paper—CVE number, affected versions, CVSS score, proof-of-concept references. But the remediation guidance? Buried on … Continue reading →

Posted in General | Comments Off on Why Security Documentation Is an Editorial Problem, Not Just a Technical One

The Password Is Not the Problem: Why Non-Technical Users Are Being Left Behind in Security

Kira Mikkonen has spent fifteen years watching people click on things they shouldn’t. She’s seen a finance director forward a phishing email to the entire company with a cheerful note asking, “Is this real?” She’s watched a senior surgeon plug … Continue reading →

Posted in General | Comments Off on The Password Is Not the Problem: Why Non-Technical Users Are Being Left Behind in Security