Threat modelling case study: bicycles

Nice.

What about the random vandal, who may not be interested in stealing your bike, but will damage or destroy it? Do they fit in your threat model or is that a different risk pool?

Wild tangent: Phone companies used to be very stingy with their tools; locked up at all times and such; but the materiel would often be left out and they wouldn't care if an entire spool of wire vanished. The Power company was exactly the opposite: the wire and transformers and consumables would be guarded but the toolboxes on the trucks would be unlocked and full of goodies.

Between the two, there wasn't much you couldn't pick up at a total discount.

Both these companies thought through their threat models, and somehow arrived at a situation that had all other construction in the city less worried about theft: i've always wondered how that came about.