# Authentic Thoughts About What Can Go Wrong

DevFeed: [Authentic Thoughts About What Can Go Wrong](<https://devfeed.tech/articles/authentic-thoughts-about-what-can-go-wrong-37117.md>)

Original publisher: [Read original article](<https://shostack.org/blog/what-can-go-wrong-authentic-thoughts/>)

Author: Adam

Published: 2022-06-09T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [systems](<https://devfeed.tech/topics/systems.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Framework](<https://devfeed.tech/topics/framework.md>), [account](<https://devfeed.tech/topics/account.md>)

Tags: [account](<https://devfeed.tech/tags/account.md>), [framework](<https://devfeed.tech/tags/framework.md>), [password](<https://devfeed.tech/tags/password.md>), [systems](<https://devfeed.tech/tags/systems.md>)

## AI overview

The article uses a printed backup code to show how a simple threat-modeling question--what can go wrong?--can reveal practical usability and security failures. It explains that backup-code instructions should identify the site, describe the next steps, and be tested, and it briefly mentions the NEAT framework and related training courses.

## Source excerpt

Threat modeling doesn't need to be big and complex