Seems we need a new digital category for Darwin Awards.
This is the modern way to die of stupidity — use your fitness watch app to log your miles on an online app instead of locally — so reveal your operational location.
The US had one of its secret bases in Afghanistan fully mapped for anyone to see by its residents logging their on-base runs.
Now, the French aircraft carrier is pinpointed en route to a war zone.
Yes OPSEC is hard, and they should be trained to not do this, but it seems to be getting ridiculous. If I were in command of such units, I'd certainly be calling for packet inspection and a large blacklist restriction of apps like that (and the research to back it up).
Local first is not just a cute quirk of geeks, it is a serious requirement.
No amount of OPSEC lectures or packet inspection is going to sufficiently keep the carrier's private information private. There's thousands of sailors on these things. When details like its location and readiness level actually need to be secret, all regular internet access should just be cut off. Radio silence. I assume this person had internet access to use Strava because the carrier isn't yet in some higher level of readiness and its location isn't yet considered much of a secret.
Yep. A full moat is the only sure way, and indeed, the OPSEC lectures and even pre-announced severe punishments will never be 100% — there is always some idiot who thinks he is special and rationalizes it in his head. Allowing traffic to only a small pre-vetted whitelist of sites works only until someone fires up a VPN, which again, no amount of lectures & punishments will prevent.
This is the modern way to die of stupidity — use your fitness watch app to log your miles on an online app instead of locally — so reveal your operational location.
The US had one of its secret bases in Afghanistan fully mapped for anyone to see by its residents logging their on-base runs.
Now, the French aircraft carrier is pinpointed en route to a war zone.
Yes OPSEC is hard, and they should be trained to not do this, but it seems to be getting ridiculous. If I were in command of such units, I'd certainly be calling for packet inspection and a large blacklist restriction of apps like that (and the research to back it up).
Local first is not just a cute quirk of geeks, it is a serious requirement.