Episode 41 – Do you see what attackers see? Threat modeling done right