Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated: 1 00:00:00,380 --> 00:00:05,460 In the section I'm going to teach you about OPSEC or operational security. 2 00:00:05,460 --> 00:00:11,430 This refers to the habits and behaviors you perform to enforce good security. 3 00:00:11,430 --> 00:00:18,150 This is probably the most underrated security control and if done poorly is the most likely to destroy 4 00:00:18,150 --> 00:00:21,840 your security privacy and anonymity. 5 00:00:21,840 --> 00:00:29,400 So let's again define privacy and ultimately and pseudo anonymity again so privacy is nobody's seeing 6 00:00:29,610 --> 00:00:33,330 what you do but potentially knowing who you are. 7 00:00:33,330 --> 00:00:35,170 Privacy is about content. 8 00:00:35,190 --> 00:00:42,870 Privacy is about maintaining confidentiality and keeping secrets anonymity is nobody knowing who you 9 00:00:42,870 --> 00:00:49,560 are but potentially seeing what you do and amity is keeping your actions and activities separate from 10 00:00:49,560 --> 00:00:53,440 your true identity anonymity concerns your identity. 11 00:00:53,560 --> 00:01:01,050 NMT is when out of a set of all possible people there is an equal chance it could be anyone you may 12 00:01:01,050 --> 00:01:05,510 desire this for viewing content but not for making it. 13 00:01:05,550 --> 00:01:06,540 It depends. 14 00:01:06,540 --> 00:01:16,320 Anonymity means non attribution to your actions to be nameless to be faceless and finally pseudo anonymity 15 00:01:16,620 --> 00:01:21,100 is when you wish to retain a reputation against an identity. 16 00:01:21,180 --> 00:01:27,480 A common example is having an alias for social media or for a forum online. 17 00:01:27,510 --> 00:01:29,750 And this picture sums it up. 18 00:01:29,760 --> 00:01:38,100 An adversary may not know who the blue bag user is but they can attribute posts and activities to him 19 00:01:38,190 --> 00:01:39,320 or her. 20 00:01:39,330 --> 00:01:44,910 This is an alias Kovar a false identity. 21 00:01:44,910 --> 00:01:51,530 This action is aimed more for those who want anonymity and non-attribute to their actions. 22 00:01:51,720 --> 00:01:58,980 OPSEC is as important as your adversary is well-resourced and the consequences of your actions are high 23 00:01:59,070 --> 00:02:03,510 if not sure Butuan really matters then OPSEC must not be skipped. 24 00:02:03,660 --> 00:02:09,390 If your adversary is a law enforcement agency or nation state this section is particularly relevant 25 00:02:09,390 --> 00:02:10,140 to you. 26 00:02:10,260 --> 00:02:16,080 This section is aimed at Freedom Fighters journalists whistleblower's the repressed and others without 27 00:02:16,110 --> 00:02:20,370 justice needing serious privacy and non attribution. 28 00:02:20,400 --> 00:02:26,300 So here's a quote from The Wall Street Journal from a gentleman called James Kilpatrick. 29 00:02:26,370 --> 00:02:27,140 One of the hate. 30 00:02:27,180 --> 00:02:27,930 As I. 31 00:02:27,930 --> 00:02:31,540 Agents who is or was part of Operation Rountree. 32 00:02:31,560 --> 00:02:35,270 This emphasizes the need for OPSEC. 33 00:02:35,280 --> 00:02:36,160 This is what he said. 34 00:02:36,240 --> 00:02:38,790 There's not a magic way to trace people. 35 00:02:38,850 --> 00:02:45,210 He's talking in this example through Tor but it applies generally to attribution online so we typically 36 00:02:45,270 --> 00:02:50,940 capitalize on human error looking for whatever clues people leave in their wake. 37 00:02:50,940 --> 00:02:52,530 Capsulize on human error. 38 00:02:52,650 --> 00:02:54,130 Another quote for you. 39 00:02:54,150 --> 00:02:57,870 Most people don't have the discipline to not make a mistake. 40 00:02:57,870 --> 00:02:59,330 Kilpatrick continues. 41 00:02:59,340 --> 00:03:04,180 The average person is too worried about doing their business to never make a mistake. 42 00:03:04,230 --> 00:03:07,790 Waiting for mistakes is part of good old fashion. 43 00:03:07,830 --> 00:03:14,190 Standard police work law enforcement investigations traditionally rely on people making mistakes. 44 00:03:14,190 --> 00:03:22,020 Basic OPSEC failures is not about decrypting your encryption or finding you through tunnels and anonymity 45 00:03:22,040 --> 00:03:22,090 . 46 00:03:22,110 --> 00:03:24,920 It's about basic OPSEC failures. 47 00:03:24,930 --> 00:03:27,040 That's what's more likely to get you. 48 00:03:27,060 --> 00:03:33,420 People are usually caught because of activities they performed in the early stages that were non anonymous 49 00:03:33,480 --> 00:03:38,760 and tie back to their real identity not realizing the Internet never forgets. 50 00:03:38,790 --> 00:03:45,480 And you are being watched sound OPSEC is required from the beginning to counter any serious adversary 5210