Amazon’s “Alexa Built-in” Threat Model

Amazon has released a set of documents, “Updates to Device Security Requirements for Alexa Built-in Products.” I want to look at these as a specific way to express a threat model, which is threat modeling along the supply chain, talk about the proliferation of this different kind of model, and what it means for engineering.…
Read More Amazon’s “Alexa Built-in” Threat Model