|
the grugq
@
thegrugq
https://grugq.tumblr.com
|
|
Security Researcher :: Cultural Attaché :: g@comae.io :: PGP keybase.io/grugq :: Не верь, не бойся, не проси :: you can’t fight a meme with an exploit
|
|
|
271,464
Tweets
|
353
Following
|
97,973
Followers
|
| Tweets |
|
|
the grugq
@thegrugq
|
2h |
|
I haven’t. It is a minefield I’m not sure I want to enter. Each Linux or BSD box is essentially unique. There’s no way to make general statements.
• Disable gpaste -> “don’t even use gnome! I have i3 setup to..”
You know?
|
||
|
||
|
|
the grugq
@thegrugq
|
3h |
|
Traveling to a third party country for meetings is usually considered much safer than in country meetings. This method only really works if there is freedom of movement for the spy. Restrictions on Ames’ travel meant only official business travel (as cover) was safe.
Narrator: pic.twitter.com/MI1yVkdGiM
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
Honestly the only security lesson here is to not make international phone calls to discuss the details of your secrets KGB spy meetings with your wife.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
“And When is your next meeting with the KGB? Do you know where you’re going? Make sure it’s a good destination for you, you know how you get...Lima? Lima?! You could get killed! No, go to Bogota again.”
Rick: ok ok ok. I’m getting the money, ok? Geez pic.twitter.com/y453c6vcKv
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
“Be careful...and seriously, nothing went wrong? You don’t sound so sure. Don’t lie to me. Ok. Ok... so, you got everything all set for you meeting tomorrow? What is the plan for tomorrow? pic.twitter.com/3nndXTItGZ
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
Is there backseat spying? Is that a thing? I feel like that should be a thing. “Did you go to your KGB meeting? How did it go? When did you get back? Don’t ask my mother, it’s not her job to keep track of your KGB meeting! I’m worried your screwing this up. Are you?” pic.twitter.com/X0VLjeyG2S
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
but really it is far worse than a simple story. The addition of unnecessary details makes it more complicated to keep straight, there are easily checked elements that can destroy to cover, and so on. Aspire to self evident covers.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
Therefore a simple cover like “he’s in Annapolis” is better than “he has a doctors appointment in Annapolis and then he’ll stay overnight at a hotel to recuperate before coming back in a couple days.” That cover story might appeal by seeming plausible and explaining everything,
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
The beauty of a simple cover like this is that it is “self evident,” the story is built in the mind of the observer. “Why is there an old man at the dock with a fishing pole this early in the morning?”... the cover story is constructed by the observer from the context.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
3h |
|
Constructing a good cover story can be hard. Ames creates a good one for his wife to explain his absence if somone calls. It is good cover: not elaborate; easy to remember; mundane; smooth, no specifics or details, and hard to verify (except for the paper trail to Colombia). pic.twitter.com/9J6cVkzjK3
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
Slow down there speedy, you’re getting ahead of the class! ;)
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
An old OPSEC list. By “isolation” I meant physical compartmentation. The concept is to put all the stuff for one compartment in the same place and have it separate from other compartments. As simple as a specific bag for your work laptop and related stuff vs your personal laptop twitter.com/thegrugq/statu…
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
I’ll move it up, but right now I’m elbow deep in deception and propaganda stuff, don’t think I have capacity to give it the attention it deserves.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
It’s on his medium, if you google for it.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
Ego can be a big reason for a spy. Thinking they’re smarter than everyone, or having a secret that makes them special, revenge against being screwed by work, or for the thrill. So narcissism fits in.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
Proves they’re secretly communists
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
When I get to it. I’ve got a 200+ “to read” list right now.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
Yes
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
Haven’t read it.
|
||
|
|
||
|
|
the grugq
@thegrugq
|
4h |
|
My favorite part so far is just his wife nagging him about contacting the KGB like he forgot it to put the recycling out. “Is it that hard? Why didn’t you do it today? Tomorrow is already the 13th! You know what, fine, I’ll do it.”
Narrator: He does it. At 6am.
|
||
|
|
||