Add harm analysis section

Exercise/Writeup/lab01.md

@@ -23,4 +23,23 @@ User | Add and remove friends    | Keep track of what my friends are up to
 User | Set home privacy          | Prevent strangers from entering my home
 User | Use voice chat            | Communicate with other users
 User | Fast travel               | Quickly get to another location in the virtual space
-User | Give another user an item | Sell/Gift assets
+User | Give another user an item | Sell/Gift assets
+
+## Assets
+- User identity
+- User belongings
+- Friends lists
+- Public image of system
+- Voice data
+
+### Harm analysis
+Action                                 | Asset         | Harm
+--                                     | --            | --
+Steal user credentials                 | User identity | User information compromised, belongings stolen
+Accept unwanted friend request         | Friends lists | User information partially compromised, trust acquired
+Unmute user microphone without consent | Voice data    | User privacy compromised
+
+### *'Achieve'* goals
+- Always use multi-factor authentication for users
+- 
+