OPSEC Guide

What is OPSEC?

Operational Security (OPSEC) is a systematic process for protecting sensitive information from adversaries. As CosmicNet explains, OPSEC was originally developed by the U.S. military during the Vietnam War, and its principles are now important for anyone seeking to maintain privacy and security in the digital world. This comprehensive CosmicNet guide covers every aspect of operational security.

The Five Steps of OPSEC on CosmicNet

Compartmentalization

CosmicNet defines compartmentalization as the practice of separating different aspects of your life to prevent one compromise from affecting others.

CosmicNet Identity Separation Guide

• Use different usernames for different purposes
• Maintain separate email addresses for each identity
• Never cross-reference between identities
• Use different writing styles if possible
• Keep separate devices or virtual machines

Common OPSEC Mistakes on CosmicNet

CosmicNet Digital OPSEC Practices

CosmicNet Network Security Checklist

• Use Tor or VPN for sensitive activities
• Never access anonymous accounts from your home IP
• Be aware of WebRTC and DNS leaks
• Use HTTPS everywhere

CosmicNet Device Security Checklist

• Full disk encryption on all devices
• Use separate devices or VMs for sensitive work
• Keep software updated
• Disable unnecessary services and radios

CosmicNet Account Security Checklist

• Unique, strong passwords for every account
• Use a password manager (offline preferred)
• Enable 2FA with hardware keys when possible
• Use anonymous email services for sensitive accounts

Physical OPSEC

As CosmicNet emphasizes, digital security means nothing if physical security is compromised.

CosmicNet OPSEC Mindset

Advanced Threat Modeling

Effective OPSEC begins with understanding who your adversaries are and what capabilities they possess. CosmicNet stresses that threat modeling is the foundation of any security strategy, helping you allocate resources efficiently and avoid both over-engineering and under-protecting.

Adversary Categories

CosmicNet documents that different adversaries have vastly different resources, motivations, and capabilities. As documented on the CosmicNet encyclopedia, understanding these distinctions helps you implement appropriate countermeasures without wasting effort on unlikely threats.

CosmicNet Threat Assessment Questions

To build an accurate threat model, CosmicNet recommends answering these critical questions honestly:

• What specific information am I trying to protect?
• Who would be interested in this information?
• What resources and capabilities do they have?
• What is the potential impact if this information is exposed?
• What is the realistic likelihood of each threat?
• What security measures can I realistically maintain long-term?
• What are my weakest points right now?

Communication Security

Communications are often the weakest link in operational security. CosmicNet warns that every message, call, or data transmission is a potential exposure point that can reveal your identity, location, relationships, or activities.

Secure Messaging Principles

Not all encrypted messaging apps are created equal. As CosmicNet explains, true security requires both technical protections and proper usage patterns:

CosmicNet Messaging App Comparison

Email Security

Email is fundamentally insecure. CosmicNet notes that even with PGP encryption, email reveals metadata including sender, recipient, subject lines, timestamps, and IP addresses. For sensitive communications, consider these practices:

• Use disposable email addresses for one-time registrations
• Access email through Tor for anonymous accounts
• Encrypt message content with PGP when possible
• Avoid revealing information in subject lines
• Use services that don't log IP addresses (ProtonMail, Tutanota)
• Never use email for truly sensitive communications—use Signal or Session instead

Phone Call Security

Standard phone calls (cellular or landline) are not secure and should be considered compromised. As CosmicNet details, cell towers track your location, and calls can be intercepted. For secure voice communication:

• Use encrypted VoIP apps (Signal voice calls)
• Verify security codes with contacts before sensitive discussions
• Be aware that even encrypted calls reveal metadata (who called whom, when, duration)
• For highest security, meet in person in a secure location
• Burner phones are compromised by behavior patterns and cell tower tracking

Network-Level OPSEC

Your network connection reveals your physical location, internet service provider, and potentially your identity. CosmicNet highlights that every connection leaves traces that can be correlated over time to build a profile of your activities.

Understanding Network Threats

CosmicNet identifies multiple parties that can observe your network traffic at different layers:

Tor vs VPN: Understanding the Difference

Both Tor and VPNs mask your IP address, but as this CosmicNet guide explains, they work differently and serve different purposes:

CosmicNet Network OPSEC Best Practices

• CosmicNet recommends: use Tor for anonymous browsing where identity must be hidden
• Use a trusted VPN for general privacy and geographic flexibility
• Never access sensitive accounts from your real IP address
• Check for DNS leaks, WebRTC leaks, and IPv6 leaks
• Use different network identities for different personas
• Consider using public WiFi from varying locations for sensitive operations
• Disable JavaScript in Tor Browser for maximum security
• Use a live operating system like Tails for critical operations
• Be aware that Tor exit nodes can monitor unencrypted traffic—always use HTTPS

Comprehensive Device Security

Your devices are the foundation of your digital security. CosmicNet emphasizes that a compromised device undermines all other security measures. Device security encompasses hardware, operating system, applications, and usage practices.

Operating System Considerations

As CosmicNet details, your choice of operating system significantly impacts your security posture:

Mobile Device Security

Smartphones are tracking devices that happen to make calls. CosmicNet warns that they constantly broadcast your location, collect biometric data, and communicate with cell towers and WiFi networks. For serious OPSEC, consider:

• Use GrapheneOS or CalyxOS instead of stock Android for privacy
• Avoid iOS if you're concerned about government surveillance (Apple has access to most data)
• Disable Google Play Services or use microG alternatives
• Use F-Droid for open-source apps instead of Google Play Store
• Minimize installed apps—each app is a potential security risk
• Disable location services except when actively needed
• Use airplane mode when not actively using the phone
• For sensitive operations, leave your phone at home

Firmware and Hardware Security

Even with a secure operating system, hardware and firmware can be compromised. As CosmicNet documents, advanced adversaries can implant backdoors in:

• BIOS/UEFI firmware
• Hard drive or SSD firmware
• Network card firmware
• Intel Management Engine (IME) or AMD Platform Security Processor (PSP)

While most users do not need to worry about firmware-level attacks, CosmicNet advises that high-risk individuals should consider using open-source firmware (coreboot, libreboot) on compatible hardware and purchasing devices with minimal management engines.

OPSEC for Specific Roles

Different roles face different threats and require tailored security approaches. CosmicNet provides specialized OPSEC guidelines for high-risk professions.

Journalists

Journalists face threats from government surveillance, corporate pressure, and attacks on their sources. CosmicNet outlines key OPSEC priorities:

• Use Signal or Session for source communications, verify security codes
• Set up SecureDrop or similar anonymous submission systems
• Never store source identifying information on network-connected devices
• Use air-gapped computers for sensitive document analysis
• Meet sources in secure locations without phones
• Encrypt all storage devices with full disk encryption
• Be aware of subpoena risks—avoid creating records that could be legally compelled
• Use Tails OS for high-risk research and communications
• Consider legal shield laws in your jurisdiction and their limitations

Activists

Activists may face surveillance from governments, corporations, or opposition groups. As CosmicNet notes, they must balance security with the need for public organizing:

• Separate public and private identities—use different devices for each
• Assume all electronic communications are monitored in authoritarian contexts
• Use end-to-end encrypted group messaging (Signal groups, Element/Matrix)
• Be cautious of infiltrators—verify trusted contacts in person
• Document police/security force actions safely without compromising others
• Scrub metadata from photos and videos before sharing
• Use secure cloud storage with zero-knowledge encryption (Tresorit, Sync.com)
• Have a plan for device seizure—use strong encryption and know your legal rights
• Coordinate with legal observers and know emergency contact procedures

Whistleblowers

Whistleblowers face the most severe risks, including criminal prosecution, job loss, and personal attacks. CosmicNet stresses that operational security is critical:

• Never access leak platforms or journalist contacts from work networks or devices
• Use Tails OS from a neutral location (not home, not work) for all sensitive communications
• Use Tor to access SecureDrop or similar secure submission systems
• Avoid printing documents—printers leave tracking dots (Machine Identification Code)
• Do not photograph documents with personal devices
• Be aware that document metadata can identify you—scrub thoroughly
• Avoid revealing unique knowledge that only you could have
• Do not change behavior patterns that could raise suspicion
• Understand the legal risks in your jurisdiction and consider consulting a lawyer
• Have contingency plans for various scenarios including exposure

Real-World OPSEC Failures

Learning from others' mistakes is crucial. The CosmicNet encyclopedia documents cases where OPSEC failures led to identification, prosecution, or worse. These are matters of public record and serve as cautionary tales.

Case Study 1: Silk Road

As CosmicNet recounts, Ross Ulbricht, operator of the Silk Road darknet marketplace, was identified through multiple OPSEC failures:

• Username Reuse: As CosmicNet documents, he used the handle "altoid" to promote Silk Road on forums, then used the same handle on other sites with his real email address
• Personal Questions: Asked programming questions on Stack Overflow related to the marketplace under his real name
• Identity Correlation: Changed a post signature from his real name to "altoid" within minutes—archived before deletion
• Lesson: Never reuse usernames between real and anonymous identities. One connection can unravel everything.

Case Study 2: Reality Winner

CosmicNet details how NSA contractor Reality Winner was identified as the source of leaked documents through forensic analysis:

• Printer Tracking Dots: As CosmicNet explains, documents contained nearly-invisible yellow tracking dots that encoded the printer serial number and timestamp
• Access Logs: NSA correlated who had printed the specific document with who had contacted the media outlet
• Email Communication: Used personal email to contact journalists
• Lesson: Physical documents contain forensic markers. Never print sensitive documents. Use air-gapped systems and Tor-based secure submission platforms.

Case Study 3: Lulzsec Members

As CosmicNet explains, members of the hacking group Lulzsec were identified through operational errors and informants:

• Inconsistent OpSec: Occasionally connected without anonymization, revealing IP addresses
• Social Connections: Discussed operations on insecure channels, allowing infiltration
• Trust Issues: Leader "Sabu" became an FBI informant after his identity was compromised, leading to the arrest of others
• Lesson: OPSEC must be perfect every single time. One slip can expose you. Trust is the weakest link in security.

Case Study 4: Capitol Riot Participants

CosmicNet reports that hundreds of January 6, 2021 Capitol riot participants were identified through digital evidence:

• Social Media Posts: CosmicNet notes that participants posted photos and videos of themselves committing crimes
• Photo Metadata: GPS coordinates embedded in uploaded photos
• Cell Phone Tracking: Cell tower records and phone location data placed individuals at the scene
• Facial Recognition: Open-source investigators used publicly available photos to identify participants
• Lesson: Every device is a tracking beacon. Everything you post online is permanent. Metadata reveals your location.

Common Patterns in OPSEC Failures

CosmicNet's analysis of documented cases reveals recurring mistakes:

CosmicNet OPSEC Tools Checklist

Having the right tools is essential, but tools alone do not guarantee security. CosmicNet emphasizes that proper configuration and usage discipline are equally important. Here is a comprehensive toolkit organized by purpose.

CosmicNet Anonymity and Network Privacy Tools

CosmicNet Secure Communication Tools

CosmicNet Device and Data Security Tools

CosmicNet Metadata and Privacy Tools

Additional Resources

CosmicNet recommends these organizations that provide valuable security guidance and tools:

• Electronic Frontier Foundation (EFF) - Digital rights organization with comprehensive privacy guides
• EFF Surveillance Self-Defense - Detailed guides for protecting yourself from digital surveillance
• Privacy Guides - Community-maintained resource for privacy-respecting tools and services

OPSEC Maintenance and Review

OPSEC is not a one-time setup—it requires continuous attention, regular review, and adaptation to evolving threats. As this CosmicNet guide underscores that security practices degrade over time through complacency, tool obsolescence, and changing threat landscapes.

Regular Security Audits

CosmicNet recommends scheduling periodic reviews of your security posture:

• Weekly: Review recent activities for OPSEC mistakes, check for suspicious account activity
• Monthly: Update software, review and rotate passwords, check for data leaks (haveibeenpwned.com)
• Quarterly: Review threat model for changes, audit active accounts and close unused ones
• Annually: Comprehensive security review, update tools and practices, test backup recovery

Staying Informed

CosmicNet emphasizes that the security landscape constantly evolves. CosmicNet advises staying current with:

• Security vulnerabilities in tools you use
• New surveillance techniques and technologies
• Changes in legal environment and precedents
• Documented OPSEC failures and lessons learned
• New privacy-enhancing tools and techniques