What parts of your threat model should/would you avoid sharing with others?

gk7ncklxlts99w1

Here's some examples:

Your OS and versions
Your device model (phone, PC, router)
Whether you use WiFi or ethernet
What brand of hardware keys you use
(If the other person knows your number): What services you use
What mobile network you use

What would you avoid sharing?

dhhdjbd

none, i mean this fully depends on who you think is targeting you

(ofc i understand it as a security question, if it is about beeing anonym online, it is always as little info as possible^^)

nandohyphen1

gk7ncklxlts99w1 What would you avoid sharing?

If I was going to avoid sharing it, I wouldn't share it here!

gk7ncklxlts99w1

dhhdjbd
Eirikr70

Hence "would" in my title. What would YOU avoid sharing?

Any response with "It depends on your threat model" is a cliche and practically spam at this point, along with other pointless phrases like "Security and privacy are not the same thing" and "If you're not paying for the product, you are the product." (which by the way is not really true any more - you're the product even if you pay). You're not contributing anything to the discussion, you're not smart for saying it, you're not saying anything unique that hasn't been said a million times by countless others before. Sorry, minor rant, it irks me.

The items you mention are not items of your threat model but items that can be used to identify you or possibly to attack you.

They are threat vectors, and they do belong in a threat model, technically speaking.

Eirikr70

The items you mention are not items of your threat model but items that can be used to identify you or possibly to attack you.
The risk generated by sharing them depends on your threat model. But it probably also involves sharing other data together with them.

dhhdjbd

gk7ncklxlts99w1

Well, maybe offer a better discussion, if you want to discuss something?
If you asked "when would you not share/ for which threat.." there might have been something to discuss

or alternatively nit provide a list with things that are not dangrouse at all to share for any normal user, from a security perspective

(not to mention that i answered your question even btw)

gk7ncklxlts99w1

nandohyphen1

That's silly. You can share the fact that you wouldn't share the name of your operating system, without telling people what operating system you actually use.

I can openly say that I am not willing to share my password to the account that I am posting on on this forum...without actually exposing said password.

Sharing whether or not I have a reddit account? And what my username is? That's closer to what I'm talking about.

To simplify my post a bit, not that it is incredibly difficult to understand in the first place...imagine you are talking to a stranger, or a friend. What things would you NOT tell them? No need to say "my passwords" because that is a given.

Here's more scenarios:

a stranger in real life
a stranger on the internet
your friend
a family member
you can think of more

This is basically how threat modelling works, not just figuring out what you want hidden, but from whom you want to hide it from. I'm basically asking about that.

nandohyphen1

gk7ncklxlts99w1 yeah just joking around. I really don't think I'd have anything I wouldn't share here.

gk7ncklxlts99w1 To simplify my post a bit, not that it is incredibly difficult to understand in the first place...imagine you are talking to a stranger, or a friend. What things would you NOT tell them

The obvious things I wouldn't tell;
My password or usernames
My IMEI or serial number
Phone identifier's

But stuff I wouldn't mind telling/ wouldn't really care if someone knew;
My phone OS
My phone model, if they asked
Apps I have installed

Yeah I think just the basic stuff like that

gk7ncklxlts99w1

dhhdjbd

"when would you not share/ for which threat.." is pretty much what I asked. I think my question is plenty worthy enough for a discussion. I think about it all the time actually, deciding what is safe to reveal and what isn't.

dhhdjbd

gk7ncklxlts99w1

sry i guess this is just a misunderstanding then for the semantics and language ^^