Yup. I've been quiet of recent, but that's in part because I've been working on this piece:http://lcamtuf.coredump.cx/prep/It's a fairly systematic and level-headed approach to threat modeling and risk management, except not for computer systems - and instead, for real life. There's not much I can add...