#opsec

christophs@diaspora.glasswings.com

Hot-Launch Yoga: Cobra Pose Reveals Nuke Repose - Federation of American Scientists

In particular, yoga-related social media posts and satellite imagery now indicate that one of India’s oldest naval missiles capable of launching nuclear weapons has likely been retired as the country continues to develop its sea-based nuclear deterrent.

Oops
#opsec

https://fas.org/publication/hot-launch-yoga-cobra-pose-reveals-nuke-repose/

diane_a@diasp.org

I did a thing today. Removed the Brave browser from both Android and desktop. I'm using the Mull browser, which is a fork of Firefox and on F-Droid. I have uBlock Origin and NoScript installed and set up with the annoyances filters enabled, which makes things nice and fast. I was able to import everything into my Mozilla account from Brave on the desktop and it flashed over here on Android. I like this enough that I may take security to the next level on another ungoogled phone and do local password management. The rationale is what security steps I would take if my devices were checked, copied, and modified by state security of governments like our own that might make being gay or the medicines that keep me alive highly illegal. It could likely happen in 2025 and starting to protect myself could protect my friends too.

On my to-do list is compiling everything from source, auditing I/O and packets, minimalizing, and getting serious about it. I know a fire in the house could take out everything in a minute and software security is just as important. Being prepared is getting serious about security, because capitalism shows no mercy.

I have experience building embedded computers and devices. Using these skills to secure an Android phone will be a fun project that will take up my free time 😀

#Brave
#security
#privacy
#opsec

dredmorbius@joindiaspora.com

OpSec is overrated. What you want is impunity

This is inference based on years of observation.

I also didn't lay OpSec is mostly useless. I'm not convinced that's true, though it may be.

OpSec alone is useful but brittle. If it's all you've got, you'll probably eventually have a bad day. Looking at entities considered "masterminds", what I often find is ... some intelligence, yes, but a lot of shielding from, or disregard of, risk. Impunity is actual or belief of freedom from consequence.

There are a few categories:

  • The proficient: extremely good at their game. Effective, so long as it works. Covert.

  • The well-protected -- friends in high places. State actors and their contractors, generally. Often under diplomatic covered. "Too big to jail" and politically-conneccted (Brock "Stanford Rapist" Turner). The Mossad team assassinating Mahmoud Al-Mabhouh (though most of the team were effectively burnt). May include some non-state actors: warlords, terrorists, narcotics gangs, though most of these fall into categories below. Covert, but can retreat quickly to safety, or are at low risk if caught.

  • The brazen. Operations with overwhelming force, whether shown or used. Military campaigns, many criminal organisations, warlords, militias. Overt.

  • The uncaring: those who have no care whether they live or die. Most suicide attacks, 9/11 bombers, the original "hashīshīn", etc. 2008 Mumbai attacks Overt or covert.

  • The ignorant: Simply unaware of the risks. Child soldiers, the Boxers (China), "wrong way 'round" Pan Am flight 18602 landing at Surabaya, Dutch East Indies, unknown to the pilot, in a heavily-mined harbour.

  • The expendable: Assets who need only be used once, whether burnt (retired) or killed afterwards. This includes a segment of the consulting or management workforce, who have a certain ablative funtion. Martin "Pharma Bro" Shkrel.

The relatively recently disclosed Crypto AG case, where the Swiss manufacturer of a widely-used manufacturer of communications encoding equipment was shown to be a CIA-owned front is a case in point. Signals intelligence relied not so much on exceptional decryption capabilities, but on the widespread use of a backdoored technology. The strong focus of US intelligence policy on similarly backdooring networking hardware (Cisco), telecoms switches (Greece), computing hardware, operating systems, and software, speaks to the probable usefulness of this method.

It's not OpSec but influence and immunity that enables this.

#OpSec #immunity #impunity

tiptopshop@diasp.org

OnionShare


OnionShare is a great tool that makes it easy for families or anyone who needs or would like to send important files or documents directly between persons, securely and anonymously with no third-party services or servers in between.


OnionShare is available as a package in #Debian stretch-backports as well as #MacOS, #Windows, and other #Linux versions.


#security #opsec #onionservice #tor #torbrowser #anonymity #communications #privacy #fedora #ubuntu #onionshare #infosec