# Groundrules on Complaining About Security

DevFeed: [Groundrules on Complaining About Security](<https://devfeed.tech/articles/groundrules-on-complaining-about-security-36816.md>)

Original publisher: [Read original article](<https://shostack.org/blog/groundrules-on-complaining-about-security/>)

Author: mordaxus

Published: 2017-02-18T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The article establishes ground rules for discussing and criticizing security systems. It argues that a threat model--what is being done, what could go wrong, and what is being done about it--is necessary for evaluating whether a security system meets someone's needs and whether criticisms are relevant.

## Source excerpt

Everyone complains about security, but no one ever... sets boundaries