Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Threat modelling case study: bicycles

calpaterson.com

Post reply on HN
Print view View original

1–10 of 13 posts

Re: Threat modelling case study: bicycles

#2

Post by paultopia »

Just on bikes in particular, I also can't say enough good stuff about folding bikes, especially if you have a private office. My commuter bike is a Brompton: it's stupid expensive (around $1,500), but I literally can just fold it up, carry it up a flight of stairs, and stick it next to my desk in my office, and it's basically thief-proof. At home, it lives in a closet.

Re: Threat modelling case study: bicycles

#3

Post by laurieg »

paultopia wrote: post #2

Just on bikes in particular, I also can't say enough good stuff about folding bikes, especially if you have a private office. My commuter bike is a Brompton: it's stupid expensive (around $1,500), but I literally can just fold it up, carry it up a flight of stairs, and stick it next to my desk in my office, and it's basically thief-proof. At home, it lives in a closet.

I came in here to say the same thing. I've been riding my brompton for a year and a half. I don't even own a bicycle lock. It is either in my apartment, under my desk at work or being carried by me.

Re: Threat modelling case study: bicycles

#4

Post by MarkusWandel »

There's a dig at Sheldon Brown's bike lock strategy, that I think shows technology creep. At the time SB (who passed away quite a while ago) developed his strategy, small, battery powered angle grinders weren't a thing. Now they are so the threat model has evolved. Luckily I live in a relatively low-crime area and ride relatively worthless bikes. Of course the one bike I ever had that was worth something was... stolen.

Re: Threat modelling case study: bicycles

#5

Post by frabbit »

Good stuff.

Needs to add another persona though: Smashing Sam who will knock you off your expensive bike in order to steal it: https://road.cc/content/news/e-bike-stolen-after-rider-ramme...

Having had to cut through my own U lock with a portable angle grinder I can verify that it is not too difficult. The cables are only for the snatch-and-grab prevention.

Only minor nitpick is that Campagnolo make wheels and groupsets, not bicycles themselves.

Re: Threat modelling case study: bicycles

#7

Post by upofadown »

MarkusWandel wrote: post #4

There's a dig at Sheldon Brown's bike lock strategy, that I think shows technology creep. At the time SB (who passed away quite a while ago) developed his strategy, small, battery powered angle grinders weren't a thing. Now they are so the threat model has evolved. Luckily I live in a relatively low-crime area and ride relatively worthless bikes. Of course the one bike I ever had that was worth something was... stole…

The idea behind the SB strategy is that the small U lock prevents the bike from being ridden. So if you can cut just the cable you need a way to transport it somewhere else other than by riding or ghost riding it. "Rucksack Rupert" is not going to carry off the bike on his back and it is unlikely he would add in the risk of a vehicle with recordable plates without upgrading to an angle grinder.

So I think that the article is failing to entirely understand the threat model in this particular case (or simply disagrees with it).

Re: Threat modelling case study: bicycles

#8

Post by frobozz »

Finnucane wrote: post #6

I always figured it was a matter of relative security rather than absolute security: having a good enough lock that it was easier to take the other guy's bike. Sorry, guy with cheap lock.

Pretty much all security is relative.

However, it's not just about the better lock, but the apparent value of what can be stolen.

You can have the best lock in the park, but if you have a brand new top-of-the-market ebike and all the other bikes are rusty shitheaps with mismatched pedals and tape hanging off the handlebars, yours is still going to be a prime target.

Post reply on HN