Hacker News new | past | comments | ask | show | jobs | submit
They define their threat model in "Anticipating Attacks"