OPSEC

Who has the best methods

what do you mean? like PGP should be a go to for everyone. but like there is a lot to talk about in this field.

This is a cool idea for a thread but we probably need to break it down a bit. Opsec for communications, for purchasing, for receiving, from client's perspective, from vendor's perspective, etc.

Also, some of the details are best left for more discreet channels. If a vendor has a genius method of sending, for instance, it's probably not the best idea to put it onto a public forum

Sure, "methods of sending" are probably best not posted (I understand why and feel stupid for being less-than-prudent about such things before), but I'm noticing a slightly excessive level of paranoia nowadays overall on here. My understanding was always that they're not looking so much for the "little fish", so much, and don't have the resources/ability to firmly enough prove things in this realm from the end-reader-side and this may be wishful thinking but I don't see solid evidence that that's changed all that much.

Also, I think people don't want to hear this but IMHO the reality is that if they really want to nab you they can and will, there really isn't all that much past certain common-sense measures in this dystopian surv3!ll@nc3 state that one can take to subvert that. Other than just "0ps3c via obscurity", trying to just stay under the radar, off the radar completely as much as possible. (And wouldn't too much of a cl0ak-and-dagger approach seem suspect in itself, stick out?) A lot of this 0p53c obsession is just a psychological thing IMO, people wanting to think that they have more control over matters than they really do. But I could be wrong. *shrug*

Halif said:

This is a cool idea for a thread but we probably need to break it down a bit. Opsec for communications, for purchasing, for receiving, from client's perspective, from vendor's perspective, etc.

Also, some of the details are best left for more discreet channels. If a vendor has a genius method of sending, for instance, it's probably not the best idea to put it onto a public forum

Click to expand...

You’re absolutely correct it should not be public. I’m just trying to create conversation. I’d like to get to my 500 Post account so I can get into the special group laugh out loud

Pharmia said:

Sure, "methods of sending" are probably best not posted (I understand why and feel stupid for being less-than-prudent about such things before), but I'm noticing a slightly excessive level of paranoia nowadays overall on here. My understanding was always that they're not looking so much for the "little fish", so much, and don't have the resources/ability to firmly enough prove things in this realm from the end-reader-side and this may be wishful thinking but I don't see solid evidence that that's changed all that much.

Also, I think people don't want to hear this but IMHO the reality is that if they really want to nab you they can and will, there really isn't all that much past certain common-sense measures in this dystopian surv3!ll@nc3 state that one can take to subvert that. Other than just "0ps3c via obscurity", trying to just stay under the radar, off the radar completely as much as possible. (And wouldn't too much of a cl0ak-and-dagger approach seem suspect in itself, stick out?) A lot of this 0p53c obsession is just a psychological thing IMO, people wanting to think that they have more control over matters than they really do. But I could be wrong. *shrug*

Click to expand...

You're right and wrong. Paranoia sure is a thing and can become unnecessary obsession. But when the authorities do a sweep, usually for political or social engineering reasons, they usually go after the low hanging fruit. Unmasked IP addresses for instance, amazing how many don't use a VPN still, or use insecure email providers (if you use gmail and have Smart Features turned on Google AI can read everything in the account), or putting delivery details in the email thread body - best to use a temp/self destructing app for that, if the vendor is organized for it. And so on, habits.

0rg&n1sed cr1m3 is another matter, once on their radar it's only a matter of time. As you say, they can nab anyone they want, they have the tech and the resources. Just don't get in the way of their wanting.

So the question is, can I stay higher up the tree for when the sweep comes around without becoming paranoid. I think so, but you'd have to build habits into daily life to match the level of illicit activity. It's a balancing act, and not for everyone to manage.

A lot of what we call opsec is standard practice in security conscious hi turnover business, apart from the naming practice we do of course - some of that is way over the top I think.

Opsec. There is layers to it. Some of it is normal behavior. Some of it it obsessive. A lot of it sociological and psychological. If anything else it’s fun.

pyro396 said:

Opsec. There is layers to it. Some of it is normal behavior. Some of it it obsessive. A lot of it sociological and psychological. If anything else it’s fun.

Click to expand...

I've never really analyzed it, I just think if I'm more secure in my ops I'll see the low hanging fruit being picked and the chain of connections is more secure. Something like that.