As nationwide stay-at-home orders extend further into the spring, we’ve all had the extent of our creativity and adaptability tested. We’ve attended virtual happy hours (let’s be honest, not as fun as they were in March), whipped our coffee (tastes fine; worth the Instagram post), and baked bread (both sourdough and banana, not bragging). At this point, it’s clear that there are few...
Bitcoin could actually put you at risk of exposing your alias. But with the proper precautions and rigorous OPSEC, your mission objectives remain feasible, even while manipulating bitcoin.
Facebook's Off-Facebook privacy tool will allow users to clear their browsing history and “disconnect” their profile from the information Facebook gathers while they browse online. But what does this really mean, and is Facebook really shut out from all your data?
The Ntrepid Nsight Series is a new product line from Ntrepid Academy. Each Nsight paper will examine real world case studies to highlight the managed attribution (MA) and operational security (OPSEC) lessons learned that you need to consider as you operate online.
This blog highlights the FireFox Lightbeam tool that shows how many third party sites that are viewing your activity when you visit a given website. I also discuss the only way to mitigate this ubiquitous monitoring—perfecting your OPSEC and managing your online fingerprint.
In this episode of the series, I apply our threat model to a scenario with significantly higher vulnerability than the last. In this example, the client is conducting active engagement with an overseas illegal marketplace operated by the target.
Part 2 of this 3-part series, Lance applies the managed attribution threat model to an OSINT scenario. The MA requirement here is for the operator to blend in with a highly paranoid group while avoiding detection as an alias by the social media platform they are using.
Threat modeling for managed attribution systems requires a different methodology. We have developed a new framework that combats threats that are specific to managed attribution.
The most effective way to expose online identities and aliases is a technique called the Canary Trap or the Barium Meal Test. None of the standard managed attribution practices are effective in thwarting it because it attacks the human operator, rendering most tools ineffective.
When conducting intelligence operations, it is important to avoid attention.We have all heard the advice, “When in Rome, do as the Romans do,” but how do we achieve that when we are in Rome.com? What different factors will make us stand out from the crowd and attract unwanted attention during online operations? ...
