idk who needs to hear this, but your threat model / opsec precautions shouldn't... - opsec

xyhhx, 3 months ago

idk who needs to hear this, but your threat model / opsec precautions shouldn't just be based on your current situation. you need to consider anything and everything that could happen in the foreseeable future

that includes a change of political climate, a change of your own skill sets and undertakings, etc

please boost this shit

#opsec

reply

report

activity

copy /kbin url

copy original url

open original url

Loading...

+ sonny

Image

Image alternative text

Federation

Status:

On | Off

Instances:

/m/opsec

Threads (0)

Microblog (37)

All Content

People

Magazines

Collections

Thread

xyhhx

@xyhhx@438punk.house

Added: 3 months ago
Online: -
Boosts: 1

Magazine

opsec

@opsec@kbin.social

What is OPSEC?

/m/opsec is dedicated to Operations Security (OPSEC), a strategic methodology geared towards minimizing vulnerabilities and reducing risk.

Initially stemming from military practices, OPSEC's scope has widened substantially, now playing a crucial role in a broad spectrum of areas such as law enforcement, digital security, residential safety, travel precautions, and beyond.

Remember, OPSEC is far from a simple checklist or a matter of using a VPN and maintaining discretion.

It encompasses various elements of security: INFOSEC (information security), APPSEC (application security), NETSEC (network security), COMSEC, TRANSEC, SIGSEC, EMSEC (communication, transmission, signals, and emission security), PHYSEC, PERSEC (physical and personal security), and even (CO)INTEL (counterintelligence).

Our objective in this community is to instill the OPSEC mindset: an objective view towards security that can be applied to any mission or plan.

The OPSEC Process

Identify the information you need to protect
Analyze the threats
Analyze your vulnerabilities
Assess the risk
Apply countermeasures

Understand your own risk/threat model: Who is your adversary? What needs protecting?

The OPSEC Two-Step: Know what to protect and know how to protect it.

Rules

Magazine Rules

Don't post without reading the rules thread or your post will be removed, and you may be banned.
Don't give advice without knowing the user's threat model first. If you proceed to give advice when the OP has not explained their threat model, you will be banned.
Don't offer single tool solutions (e.g. VPN, bitcoin, Signal) when the threat model isn't clear
Don't give bad, ridiculous, or misleading advice (e.g. "you can't get arrested if you use Tor")
Don't ask for help or help others in illicit and unlawful activities (e.g. "I want to buy drugs on the internet").
Don't post without mentioning your threat model, unless it's a post about how to threat model.

Created: 11 months ago
Owner: operator
Subscribers: 34
Online: -