Operations Security (OPSEC)
241 readers
1 users here now
Welcome to the first operations security (OPSEC) community on Lemmy!
This is a space dedicated to discussing, sharing, and learning about operational security practices. Whether you are a business owner, a cybersecurity expert, or just a regular person, you can always benefit from a little extra OPSEC in your life.
Community Guidelines
As we belong to Lemmy.zip all of their guidelines apply on top of ours.
-
Stay on topic:
- Keep discussions related to OPSEC only
- If your post is about this community instead of OPSEC, prepend the prefix [META] to the title
- For the sake of organization, please label your posts with prefixes such as [NEWS], [GUIDE], [QUESTION], [MEME], and so on. While this isn't standardized nor enforced, it helps keep everything nice and neat
-
No illegal content:
- Do not discuss, promote, or engage in illegal activities
- While OPSEC can be used for criminal activity, we will not offer assistance to anyone planning to use it for such
-
Quality Content:
- Provide only good, factual and credible advice
- Avoid spreading misinformation or unverified claims
- Avoid low-effort posts, spam and sensationalism
- Copypastas are allowed only as comments and if related to the post or parent comment.
- Do not post AI-generated content; anyone can ask ChatGPT for assistance so do what you do best: be a human
- Anyone giving blatantly false advice will be permanently banned
-
No Self-Promotion:
- Refrain from excessive self-promotion or advertising
- Occasional sharing of personal projects is allowed if it benefits the community
-
Threat Models:
- Do not ask for advice without mentioning your threat model
- Do not provide advice ridiculously outside the asker's threat model
- Do not provide advice without knowing the asker's threat model (except when providing general advice to the community)
What is OPSEC?
Operations security (OPSEC) is a process that identifies critical information to determine whether friendly actions can be observed by enemy intelligence, determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate or reduce adversary exploitation of friendly critical information.
In simpler terms, it is the process of finding vulnerabilities that an adversary could exploit and patching them, thereby reducing your attack surface.
OPSEC is NOT a synonym for cybersecurity. It can encompass it; however, it also revolves around physical security.
Useful resources
founded 7 months ago
MODERATORS
1
2
5
[NEWS] PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack
(thehackernews.com)
3
4
27
[ARTICLE] Europol chief calls on tech giants to unlock encrypted messages
(www.belganewsagency.eu)
5
6
This post contains a canary message that's cryptographically signed by the official BusKill PGP release key
 |
|---|
| The BusKill project just published their Warrant Canary #009 |
For more information about BusKill canaries, see:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Status: All good
Release: 2025-01-14
Period: 2025-01-01 to 2025-06-01
Expiry: 2025-06-30
Statements
==========
The BusKill Team who have digitally signed this file [1]
state the following:
1. The date of issue of this canary is January 14, 2025.
2. The current BusKill Signing Key (2020.07) is
E0AF FF57 DC00 FBE0 5635 8761 4AE2 1E19 36CE 786A
3. We positively confirm, to the best of our knowledge, that the
integrity of our systems are sound: all our infrastructure is in our
control, we have not been compromised or suffered a data breach, we
have not disclosed any private keys, we have not introduced any
backdoors, and we have not been forced to modify our system to allow
access or information leakage to a third party in any way.
4. We plan to publish the next of these canary statements before the
Expiry date listed above. Special note should be taken if no new
canary is published by that time or if the list of statements changes
without plausible explanation.
Special announcements
=====================
None.
Disclaimers and notes
=====================
This canary scheme is not infallible. Although signing the
declaration makes it very difficult for a third party to produce
arbitrary declarations, it does not prevent them from using force or
other means, like blackmail or compromising the signers' laptops, to
coerce us to produce false declarations.
The news feeds quoted below (Proof of freshness) serves to
demonstrate that this canary could not have been created prior to the
date stated. It shows that a series of canaries was not created in
advance.
This declaration is merely a best effort and is provided without any
guarantee or warranty. It is not legally binding in any way to
anybody. None of the signers should be ever held legally responsible
for any of the statements made here.
Proof of freshness
==================
14 Jan 25 01:01:33 UTC
Source: DER SPIEGEL - International (https://www.spiegel.de/international/index.rss)
A Miracle? Pope Francis Helps Transsexual Prostitutes in Rome
Boost for the Right Wing: Why Did a German Newspaper Help Elon Musk Interfere in German Politics?
Source: NYT > World News (https://rss.nytimes.com/services/xml/rss/nyt/World.xml)
What an Upended Mideast Means for Trump and U.S. Gulf Allies
Russia and Ukraine Battle Inside Kursk, With Waves of Tanks, Drones and North Koreans
Source: BBC News - World (https://feeds.bbci.co.uk/news/world/rss.xml)
Gaza ceasefire deal being finalised, Palestinian official tells BBC
Watch: Moment man is saved from burning LA home
Source: Bitcoin Blockchain (https://blockchain.info/q/latesthash)
0000000000000000000042db9e17f012dcd01f3425aa403e29c28c0dc1d16470
Footnotes
=========
[1] https://docs.buskill.in/buskill-app/en/stable/security/pgpkeys.html
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEeY3BEB897EKK3hJNaLi8sMUCOQUFAmeFuPcACgkQaLi8sMUC
OQXctQ//Zv7RZXPKMMyjMjfE2LjrL6RVESIZMT2tUO/y0wx8XTXKBpgOA7fTh2eC
BHkLajpU/S3LOb+wBniuo29tpGJHG5MBWDwyNUAWXqZfJ/A9YNikNYq9lOn6nKSH
oHyLB8h2nP9rfQ2wXUtN6lFJVKWU5Ef5pjMQb8flJO2kbou7QpgcOzxvRqrXOUcN
UumjSlDTtwIOYOX+Ee8SamI4LyApOlwxIGMbFcbRMcJNhtioS4qCGNGw1pqhvqmF
pi1kIaqd79I8y1U9ufncvC+pbCEvRdo+wb7ZsXA9ZYpYfJSQJzSkdCGgkbe0b1Tx
6CNlcgoXIVaEH6/W+C2DFlyG1u4JuH22eXIrloYnjOxlqSJCd0Dw1EeO33tg3xg3
tfeO9pGOcZPOwlBL509VlE9z6W3czyKJk7Z4RwYXCFYWWi8vlHvRQg0LNu0C4Jyw
fRV2LlMSeUgBz9xyE62jh/BUNZzXsD0ntprR1eRTkeW4kOGEc6Wql4lBKE08sajT
YdgTi4ojrcfTdS7Sgzh1Onh5h/nF7hoyCX0lINgyTrJFMynC6qadTZtiJ2yO8GT+
Ovk9ZJMggBMNr4Vbw6CyrU/4yYMyrEd5dzXYZLZ41lMMpjwM8OBJ/yp1pcGo9vk4
NTAjUQUvOj6nrA/r3j2ywFMDZtFR/jBjXULWE77ca3iJmc/FUdg=
=xahN
-----END PGP SIGNATURE-----
To view all past canaries, see:
What is BusKill?
BusKill is a laptop kill-cord. It's a USB cable with a magnetic breakaway that you attach to your body and connect to your computer.
 |
|---|
| Watch the BusKill Explainer Video for more info youtube.com/v/qPwyoD_cQR4 |
If the connection between you to your computer is severed, then your device will lock, shutdown, or shred its encryption keys -- thus keeping your encrypted data safe from thieves that steal your device.
7
Even though Bluetooth is designed to be secure, vulnerabilities can sneak in. We saw an example of that with the Flipper Zero being able to spam Apple devices, and while that was relatively harmless, that doesn't mean the next vulnerability will be.
8
54
[MEME] Even if you boot into the USB, there could still be low-level or hardware keyloggers
(lemmy.zip)
9
10
186
[MEME] While most platforms remove it automatically, you shouldn't rely on it. Don't do a McAfee
(lemmy.zip)
11
121
[MEME] Friendly reminder to be careful about what you say (especially online). Loose lips sink ships.
(lemmy.zip)
12
