• Tuesday, October 15, 2019

OPSEC & PERSEC - How to Remain Safe Online.

Discussion in 'Pakistan's Internal Security' started by RescueRanger, Sep 24, 2018.

  1. RescueRanger

    RescueRanger PDF THINK TANK: CONSULTANT

    Messages:
    7,648
    Joined:
    Sep 20, 2008
    Ratings:
    +70 / 12,629 / -0
    Country:
    Pakistan
    Location:
    Pakistan
    Okay guys I am leaving this as an advisory and warning. I have always warned posters not to share pictures, videos etc showing ranks, names, locations, posting, easily identifiable geographic landmarks of operational security personnel. But more and more I have been seeing selfie style photo's being posted on PDF where this fundamental rule is flouted.

    I appreciate that some here may be serving military or have family/friends in the military they are proud of and want to share their details such as photo's in action etc, but please I would like to ask you to calm down and approach with caution.

    This is a long post so if you don't value the safety and security of our armed forces and internal security establishment then feel free to skip it, however if you are risk-averse and want to know how to limit threats to operational and personal security then feel free to read on.

    Prior to the mushrooming of social media and the selfie generation terrorists as part of the their planning and prep stage had to heavily rely on human intelligence, this normally included great exposure and the high likelihood of getting caught or being fed misinformation.

    As technology has evolved so has the the TTP: Tactics, Techniques and procedures that terrorists deploy and use to obtain information about potential sources of information and remember that the weakest link in all security systems is always the human element.

    It has been seen previously that elements internally and externally hostile to the safety and security of Pakistan are actively targeting serving and former members of the Pakistan armed forces and security establishment, the case of Gen (R) Alvi and Col (R) Habib Zahir are good case studies to read in your own time, although in the case of the late Gen. (R) Alvi most of the matters behind his death cannot be disclosed on a public forum anyway.

    Okay so lets get to the basis, terrorists, external agencies, criminals, hackers, media and basically anyway can use open information to try and find information about their target or person of interest. This is called OSINT:

    What is OSINT:

    Open Source Intelligence(OSINT) refers to a collection of data from public sources to be used in an intelligence context, and this type of information is often missed by link crawling search engines such as Google. Also, as per the U.S. DoD, OSINT is “produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for addressing a specific intelligence requirement.”

    OSINT information can and has compromised operations and risked the lives of many soldiers and innocent people throughout history, remember the saying "LOOSE LIPS SINK SHIPS".

    Examples of OSINT terrorists and hostile elements may use:
    Example 1.PNG
    (Serving Major's Linked In profile, advertises his history and courses including his current station when he did his Intelligence and Security course and previous command, all available for free just by going on LinkedIn).
    example 2.PNG
    Another example of a ex Pakistani army officer offering his skills at an International PSC website. Sanitized for obvious reasons!

    What is OPSEC:
    Today, keeping information safeguarded is known as OPSEC or Operational Security. This is an incredibly important task for military members, military families and friends. We never know who may be listening or trying to gain information about our military. For this reason, it is always important to make sure that information doesn’t fall into the wrong hands.

    First and foremost, those who serve in the military should not be sharing sensitive information with others who are not in the military. It is important to realize that this may even include sharing pictures online. A seemingly innocent picture can actually provide a lot of information to the enemy including weapons systems and location.
    [​IMG]
    Rank, Name, Corps/Unit insignia... Criminal Elements are always looking to find ways to bypass security, the Pakistani Army has tremendous respect in the eyes of the public and people will use this.

    Acceptable photographs:
    [​IMG]

    Terrorists and criminals such as ISIS have shown capability to use advanced OSINT tools such as SHODAN to obtain a full digital footprint of their target(s).

    Example:
    [​IMG]
    Say hello to Mr. Masood Shah AKA Lt. General Shah, a criminal land grabber who used to wear full military uniform and use a fake staff car to help land grabbers in Karachi.

    If those in the military do not share information with family members or friends, it is much less likely that they will slip up and say something that could put the military member or his unit in danger. He should always be aware of what he is saying when he is sharing information about his day. This is particularly true when he is away training or when he is deployed on operations.

    OPSEC generally covers several different scenarios that should never be discussed with those who are not on a need-to-know basis. This includes:
    1. Deployment dates. This includes when troops are deploying on operations and when they are redeploying back home. In addition to leaving and returning from the deployment as a whole, this also includes when soldiers leave and return.
    2. Training. Information on where, how and why they train should not be shared. Information that appears benign to us may be just what the enemy needs.
    3. Numbers, equipment or other security information. Information about the number who are involved, the type of equipment or weapons systems they use or other sensitive information should never be shared.
    4. Troop movements. In addition to not sharing deployment dates, when they are on operation, it should also not be shared when they are leaving for a mission or changing locations.
    An example of such things can be an innocent post on facebook or even PDF such as:

    Please say a prayer for my brother's unit xxx. They are leaving tomorrow night to go on a mission in Dir. This is entirely too much information and puts the mission as well as his unit at risk.

    PERSEC
    And that brings us to PERSEC or Personal Security. This is protecting your personal information. While the military is not as strict on PERSEC as they are on OPSEC, it is still an important aspect of security.

    PERSEC focuses on protecting information such as rank, your home address and information about your family. Generally, it is basic common sense that reminds you not to advertise that you are living alone or otherwise giving out personal information to others who you may not know.

    Social Media Security tips:
    • Understand the privacy settings
    • Delete passwords and search history
    • Enable two step verification
    • Don't add strangers
    • Avoid checking in at a place event on Facebook
    • Don't post full profile pictures
    • If you are serving 'GOOGLE YOURSELF' see how large or small your digital footprint is and adjust accordingly.

    Please help our security services by remembering OPSEC and PERSEC, sanatize things you post on the internet such as photo's and videos (this applies to content that has not been officially shared i.e. you or your family member took a photo or made a video), avoid talking about sensitive subjects in great detail, especially online and finally!
    [​IMG]


    @waz @Horus @WebMaster @Jango @Major Sam
     
    Last edited: Sep 24, 2018
    • Thanks Thanks x 20
    • Positive Rating Positive Rating x 2
  2. WebMaster

    WebMaster ADMINISTRATOR

    Messages:
    22,435
    Joined:
    Jun 25, 2016
    Ratings:
    +0 / 2,156 / -0
    Country:
    Pakistan
    Location:
    Pakistan
    I request all members to follow above guidelines when possible.
     
    • Thanks Thanks x 2
  3. Horus

    Horus ADMINISTRATOR

    Messages:
    39,260
    Joined:
    May 3, 2009
    Ratings:
    +400 / 93,667 / -0
    Country:
    Pakistan
    Location:
    Australia
    All staff members must adopt this approach.

    TY RR
     
    • Thanks Thanks x 2
  4. CriticalThought

    CriticalThought SENIOR MEMBER

    Messages:
    5,969
    Joined:
    Oct 10, 2016
    Ratings:
    +9 / 5,642 / -6
    Country:
    Pakistan
    Location:
    Australia
    @WebMaster this should be pinned at the very top of each forum.
     
  5. Foxtrot Alpha

    Foxtrot Alpha STAFF

    Messages:
    6,431
    Joined:
    Aug 19, 2012
    Ratings:
    +56 / 11,227 / -0
    Country:
    Pakistan
    Location:
    Pakistan
    i remember reviewing one profile on linked in - Assistant Director at Ministry of Defence - Current Designation - Analyst ......handling matters of national security :D

    then i reviewed couple of other profiles and they were no different......few of these folks have gone nuts, there is very less regard for OPSEC......young Lt.s 127 L/C & onwards have taken this social media obsession to next level its like they are going to PMA not to fight the enemy but to pose for Fashion magzine or a Photoshoot?.....
    few of them got castigated and reprimanded but all this fell on deaf ears.....

    thene
     
    • Thanks Thanks x 1
  6. khansaheeb

    khansaheeb SENIOR MEMBER

    Messages:
    5,654
    Joined:
    Dec 14, 2008
    Ratings:
    +2 / 5,921 / -1
    Country:
    Pakistan
    Location:
    United Kingdom
    As they say, careless talk and photos costs lives.

    This forum is heavily monitored and scrutanised by friendly and enemy agencies and organisations, so be careful what you post and what opinions you post, all is not fair in love and war and forums.
     
    • Thanks Thanks x 1
  7. Sine Nomine

    Sine Nomine ELITE MEMBER

    Messages:
    8,138
    Joined:
    Nov 19, 2014
    Ratings:
    +25 / 9,801 / -8
    Country:
    Pakistan
    Location:
    Pakistan
    Sometimes there is a competition going among young lads for more likes and friend requests from opposite sex.

     
    • Thanks Thanks x 1
  8. CriticalThought

    CriticalThought SENIOR MEMBER

    Messages:
    5,969
    Joined:
    Oct 10, 2016
    Ratings:
    +9 / 5,642 / -6
    Country:
    Pakistan
    Location:
    Australia
    @RescueRanger wither OPSEC?



    This guy just shared his full name, his face, and even the information of his family!
     
  9. RescueRanger

    RescueRanger PDF THINK TANK: CONSULTANT

    Messages:
    7,648
    Joined:
    Sep 20, 2008
    Ratings:
    +70 / 12,629 / -0
    Country:
    Pakistan
    Location:
    Pakistan
    That joke probably sounded better in your head.
     
  10. CriticalThought

    CriticalThought SENIOR MEMBER

    Messages:
    5,969
    Joined:
    Oct 10, 2016
    Ratings:
    +9 / 5,642 / -6
    Country:
    Pakistan
    Location:
    Australia
    OK. But in all seriousness, I will continue to point out any possible lapses. There might be nothing behind them, but I feel it my duty. You are free to consider it a joke if you like.
     
  11. Thorough Pro

    Thorough Pro ELITE MEMBER

    Messages:
    10,762
    Joined:
    Aug 23, 2008
    Ratings:
    +6 / 9,237 / -27
    Country:
    Pakistan
    Location:
    Pakistan
    I for one has on record always stressed to keep things discreet but lost all hope, because unfortunately majority of Pakistani members are "Shodas" here and like to boast about who they or there friends or family members are by sharing critical information.

    I am also strictly against posting videos of border clashes, but there are tons of videos recorded and posted by military personnel. They provide a lot of critical information that may help the enemy in many ways.
    A well written and explained article. Much appreciated. But I think this is something all branches of Armed forces should teach to their officers and soldiers and make it mandatory to follow or face court martial. I have never heard of any military personnel ever being disciplined/punished in an exemplary manner to stop them from posting their pics on the internet or creating accounts on social media with their full names, ranks and places of posting.





    Why don't you mods delete such posts and ban the posters to enforce this rule, you know requests never work with us Pakistanis, we only understand one thing ....

     
    • Thanks Thanks x 3