LFM

Build your threat model

You cannot harden against everything, so you decide what you protect and who from, then put your effort there. The model here is built for the person who crosses borders and operates where the network, the carrier, and the checkpoint are not friendly. When you answer the five questions, the tool returns a plan that ranks each step by how much it closes your threats and shows its cost and its limit.

Privacy Guides frames threat modeling as five questions: what you protect, from whom, how likely it is, how bad it would be, and how much effort you will spend. The Hitchhiker's Guide to Online Anonymity adds the honest ceiling: no set of measures defeats a highly resourceful, motivated global adversary. These measures close everything below that ceiling, so you name the real threats in your life, not the worst case.

Question 1

What do you want to protect?

You pick the things that would actually hurt to lose or expose.
Question 2

Who do you want to protect it from?

You name the adversaries that are real for you.
Question 3

How likely is it that you will be targeted?

You judge how likely the threat is for you, not in general.
Question 4

How bad are the consequences if you fail?

Question 5

How much trouble are you willing to go through?

A no-measures answer is allowed if the cost outweighs the risk.

You must answer all five to build your plan.