Explore operational security (OPSEC) measures for hacktivists in this comprehensive conference talk from the Hack In The Box Security Conference. Learn practical techniques to maintain online anonymity and avoid detection by law enforcement. Delve into OPSEC goals, methodologies, and technologies, enabling you to devise and implement robust security measures. Discover how to combine strong technology solutions with disciplined actions to minimize exposure of protected information. Gain insights from recent hacker indictments and research on surveillance, espionage, and counter-intelligence. Cover topics such as setting up secure environments, creating personas, using Tor and VPNs, handling cryptocurrencies, and implementing hardware security measures. Equip yourself with the knowledge to conduct online operations while minimizing the risk of capture.
Overview
Syllabus
Intro
Overview
Keep your mouth shut
Setup your environment
Ten Crack Commandments
Why do you need it
Hammond
Avoid contamination
Dont operate from your own home
Dont reveal your operational details
He was insufficiently paranoid
He did good
Never contaminate
Wormer
Plumbing
Plumbing is boring
Put in place first
Personas
Butterfly
Persona
Tor
Profiling Information
Cover Identity
OPSEC Rules
Anti Profiling Guidelines
Geographic Profiling
Buffer Overflows
NSA
LEO
VPNs vs Tor
VPN to Tor
VPNs which dont keep logs
Bitcoins are anonymous
InfoSock cartoon
Portal
ASCII Skills
Operation Laptop
Operation Phone
Additional Tricks
Hardware
USB
Average cost per persona
Prepaid credit cards
Taught by
Hack In The Box Security Conference
