How I learned to stop worrying (mostly) and love my threat model https://arstechnica.com/security/2017/07/how-i-learned-to-stop-worrying-mostly-and-love-my-threat-model/