Threats on Stepperbox

Adversaries

Mon, 01 Jan 0001 00:00:00 +0000

Who the threats come from — nation-states, corporations, criminal organizations, and local actors. Understanding adversary capabilities, motivations, and resources as the basis for any threat model.

Surveillance

Mon, 01 Jan 0001 00:00:00 +0000

State and corporate surveillance — network monitoring, metadata collection, device tracking, IMSI catchers, and the infrastructure of mass observation. Understanding what is collected and how.

Forensics

Mon, 01 Jan 0001 00:00:00 +0000

Digital forensics techniques — disk imaging, file recovery, memory analysis, network traffic reconstruction, and mobile device extraction. What investigators can find and how to understand the threat model.

Firewalls

Mon, 01 Jan 0001 00:00:00 +0000

State-level firewalls and deep packet inspection — the Great Firewall, Iran’s filtering infrastructure, and how nation-states block, throttle, and inspect internet traffic at scale.

Moderation

Mon, 01 Jan 0001 00:00:00 +0000

Platform content moderation — automated filtering, hash matching, AI classifiers, deplatforming, and the mechanisms by which speech and content are controlled on centralized services.

Censorship

Mon, 01 Jan 0001 00:00:00 +0000

Censorship beyond the firewall — DNS poisoning, search delisting, app store removal, payment processor bans, domain seizures, and the many layers at which information can be suppressed.

Supply Chain

Mon, 01 Jan 0001 00:00:00 +0000

Supply chain compromise — backdoored hardware, tampered firmware, malicious dependencies, and interdiction of components in transit. How adversaries insert themselves between manufacturer and end user.

Software Attacks

Mon, 01 Jan 0001 00:00:00 +0000

Software exploitation — malware, zero-days, phishing, side-channel attacks, and remote code execution. The attack surface of operating systems, browsers, and networked applications.

Hardware Attacks

Mon, 01 Jan 0001 00:00:00 +0000

Physical and electrical attacks on hardware — JTAG extraction, bus sniffing, fault injection, chip decapping, and side-channel analysis. What an adversary with physical access can do to your devices.