Blog

Google's BeyondCorp paper introduced zero trust to enterprise security in 2014. The same framework, identity over location, authentication as perimeter, least privilege, assume breach, ports directly to personal life and produces a better result than the ad-hoc alternative.

Bruce Schneier, Edward Snowden, and Cory Doctorow have spent careers writing about personal threat modeling against state surveillance and platform power. Their principles apply more cleanly to digital estate planning than most estate-planning advice does. A walk-through.

Microsoft's STRIDE framework was built for application security. It works just as well on personal OPSEC and estate planning, spoofing your identity, tampering with beneficiary designations, denial of service on your own life. A walk-through.