Hacker OPSEC

STFU is the best policy.

Security Rules

A collection of rules for secure operations gathered from oral traditions, and other sources.

Samizdat

  • don’t tell anyone what books are at home
  • don’t tell anyone what is discussed at home
  • don’t discuss politics with strangers
  • don’t discuss politics loudly when strangers are around

Berber

  • don’t talk over the phone
  • always tell people business is “ok” or “bad” but never “great” to avoid attracting attention
  • when someone is asking you a question, always reply with a lie or the truth, but never refuse to reply
  • never criticise or do anything against the government of the country you live in

Anti-Apartheid

  • if you attend a cell meeting, know that there is always an informer; they may be the loudest, they may be the quietest; watch what you say
  • if there is a bomb, run away. they use a small bomb to attract people, and a second larger bomb to target them
  • don’t discuss politics with strangers
  • don’t talk about meetings (i.e. lots of visitors) at home
  • don’t talk about what was said at home

Central European Gypsy

  • if anyone asks about your finances, always say youre broke or just getting by. Never ever brag about having money / making a good investment / etc, because then someone knows it exists to beg, borrow or steal it.

UK :: Scouser

  • never open the door for anyone, even a friend, unless they’ve notified you in advance

US :: DSS

  • The way to survive a leak investigation is to have a reputation for being tight lipped

US :: CIA (Moscow Rules)

  • Assume nothing.
  • Never go against your gut.
  • Everyone is potentially under opposition control.
  • Don’t look back; you are never completely alone.
  • Go with the flow, blend in.
  • Vary your pattern and stay within your cover.
  • Lull them into a sense of complacency.
  • Don’t harass the opposition.
  • Pick the time and place for action.
  • Keep your options open.

Others