March 2010
S	M	T	W	T	F	S
« Feb
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

Who Wrote The Book Of Love

5. February 2010 by Revelator.

While reading “Hour Game” by David Baldacci I came upon a narrative that screemed OPSEC better than anything I’ve read or seen on TV lately. Never under estimate the threat - in any situation…

He watched the old couple totter out of the supermarket and ease into their Mercedes station wagon. He wrote down the license plate number. He would run it later on the Internet and get their home address. They were doing their own shopping, so they probably had no live-in help or grown children nearby. The make of the care was relatively new, so they weren’t surviving solely on Social Security. The man wore a cap with the logo of the local country club. That was another potential gold mine of information he might later tap.

He sat back and waited patiently. More prospects were sure to come in the busy shopping center. He could consume all he wanted without ever once taking out his wallet.

A few minutes later an attractive woman in her thirties came out of a pharmacy carrying a large bag. His gaze swung to her, his homicidal antennae twitching with interest. The woman stopped at the ATM next to the pharmacy, withdrew some cash and then committed what should have been classified as a mortal sin for the new century: she tossed the receipt into the trash before climbing into a bright red Chrysler Sebring convertible. Her vanity plate read “DEH JD.”

He quickly translated that to be her initials and the fact that she was a lawyer, the “JD” standing for Juris Doctor. Her clothes told him she was fastidious about her appearance. The tan on her arms, face and legs was deep. If she was a practicing lawyer, she probably had just come back from vacation or else had visited the tanning booth over the winter. She was very fit-looking, her calves particularly well developed. His gaze had fixed on the gold anklet she wore on her left leg as she climbed in her car. That was intriguing, he thought.

She had a current-year American Bar Association bumper sticker, so the odds were she was still practicing law. And she was also single - there was no wedding ring on her finger. And right next to the ABA bumper sticker was a parking permit for a very expensive gated residential development about two miles from here. He nodded appreciatively. These stickers were very informative.

He parked, got out of the Bug, walked over to the trash can, made a show of throwing something away and in the same motion plucked out the ATM receipt. The woman really should have known better. She might as well have tossed her personal tax return in the trash. She was now naked, completely open to any probing he wanted to do.

When he got back to his car, he looked a the name on the account: D. Hinson. He’d look her up in the phone book later. And she’d also be in the business listings, so he’d know which law firm in town she worked at. That would him two potential targets. Banks had started leaving off some of the numbers of the account because they knew their customers stupidly disposed of their receipts where they were easy picking for people like him.

He kept trolling under the warming sun. What a nice day it was shaping up to be. He reclined slightly in his seat only to perk up when off to his right a soccer mom started loading groceries in her van. He wasn’t guessing there: she wore a T-shirt that announced her status. An infant rode in the car seat in the rear. A green bumper sticker announced that the woman was the mom of an honor roll student at Wrightsburg Middle School for the current school year.

Good to know, he thought: seventh or eighth grader and an infant. He pulled into the space next to the van and waited. The woman took the cart back to the front of the store, leaving the baby completely unguarded.

He got out of the Bug, leaned into the van’s open driver’s side window and smiled at the baby, who grinned back, chortling. The interior of the van was messy. Probably so was the woman’s house. If they had an alarm system, they probably never turned it on. Probably forgot to lock all the doors and windows too. It was a wonder to him that the crime rate in the country wasn’t far higher what with millions of idiots like here staggering blindly through life.

An algebra book was in the backseat; the middle school child’s, no doubt. Next to it was a children’s picture book, so there was at least a third child. This deduction was confirmed by the presence of a pair of grass-stained tennis shoes in the rear floorboard; they looked to be those of a five- or six-year-old boy.

He glanced in the passenger seat. There is was: a People magazine. He looked up. The woman had just slammed the cart back into the rack and had now paused to talk to someone coming out of the store. He reached in and drew the magazine toward him. Name and home address were on the mailing label. He already had her home phone number. She’d helpfully put it on the For Sale sign on the window of her van.

Another bingo. Her keys were in the ignition. He placed a piece of soft putty over the ones that looked like house keys, taking quick impressions. It made the breaking in and entering part a lot easier when you didn’t have to “break” when you “entered.”

A final home run. Her cell phone was in its holder. He looked up. She was still gabbing away. Had he been so inclined he could have killed the kid, stolen all her groceries and torched the car, and the woman would never even know it until someone started screaming at the flames shooting into the sky. He glanced around. People were far too busy with their lives to notice him.

He snatched the phone, hit the main screen button and got her cell phone number. The he accessed her phone book, took a digital camera the size of his middle finger from his pocket and snapped pictures of screen after screen until he had all the names and phone numbers in her directory. He returned the phone, waved bye-bye to baby and slipped back into his car.

He went over his list. He had her name, home address and the fact that she had a least three kids and was married. The mailing block had been addressed to both Jean and Harold Robinson. He also had her home phone number, cell phone number and the names and numbers of a host of others important to her as well as impressions of her house keys.

She and her lovely family belong to me now.

Keep the Faith
Revelator

Who Wrote The Book Of Love - The Monotones

Posted in Risk, Critical Information, Awareness, Vulnerabilities, Threat, Family OPSEC, Analysis, General OPSEC | Print | No Comments »

Heartbeat (It’s A Love Beat)

3. February 2010 by Revelator.

And here it comes once again…Valentine’s Day. That one day a year we must visibly show our undying devotion to and appreciation for the one we love. So, off we go to the corner gas station/convenience store on February 13 looking for the card we almost forgot to purchase to show exactly how much we love our one true love. Finding only a card from a dog to its owner we rush off to Wal-Mart where the selection is only slightly better. But you find a card that sort of fits your current relationship and then you head over to the candy aisle to find that all that is left are $50 boxes of “Anatomically Correct Heart Shaped” Chocolate covered Canteloupe. Sure you love canteloupe - who doesn’t? But you’re put off by its anatomically correct shape so you are off to Target where, much to your chagrin all they have left is a 25 pound Hershey Kiss®. Now what?

Sure, I could go on but most of us guys have been there - done that, so I’ll leave the rest to your unfortunate memories of Valentine’s past. I’ll assume you’ve learned your lessons and now start planning your Valentine’s Day accordingly. Two weeks out you started searching and found the perfect Valentine’s gift for your lady. You were smart and passed on the “Jillian Michaels Biggest Loser Workout” for the Wii and instead opted for the Mani-Pedi-Spa-Massage package. Sure it ran you just over $400 bucks but come on, she’s worth it.

But the question remains - how do you pull this off without her finding out about this great gift ahead of time? You know she loves surprises so you want to make this all happen without her knowing…but how?
How can you make a major purchase ahead of time without her knowing?
How can you make sure she is available on Daytona 500 Sunday..I mean, Valentine’s Day for her appointment at the spa?
How can you make sure she doesn’t just go and waste money on a manicure or a pedicure (or both) on Friday in anticipation of you taking her out to dinner for Valentine’s Day?
And won’t she be suspicious if you haven’t made some sort of plans for Valentine’s Day?
Is some sort of deception plan required?
How can you pull this off and still watch the Great American Race?

All these questions and more can be answered by utilizing OPSEC in your planning. Just common sense and perhaps some deception and you can actually pull off a great Valentine’s Day surprise that will really show the one you love just how much you love them…until next Valentine’s Day when you will have to top this one. Good luck with that.

Keep the Faith!
Revelator

HeartBeat (It’s A Love Beat) - The DeFranco Family

Posted in BS, Planning, Family OPSEC | Print | No Comments »

Lies

29. December 2009 by Revelator.

As 2009 draws to a close I thought I might ponder, muse if you will, about the state of OPSEC and all that has happened in OPSEC during the year…or I could do the third installment of my running discourse about fortune cookies.

I’ve decided on the fortune cookies…

The day was March 17, 2008 (it’s still there - check it out) - I could no longer hold back and had to do that fateful first Fortune Cookie entry. And it felt good. My basic premise was that Fortune Cookies rarely had fortunes in them. Instead they had statements about living and other such crap. Nine months later (December 5, 2008) I was fed up again and wrote the second in the series about Fortune Cookies. And now, after a stop at Panda Express the other day I am compelled to write the third in my continuing Fortune Cookie Saga…

Look, I’m a basic guy. Keep it simple. When I open a Fortune Cookie I want to see a fortune damn it! I don’t care what it says and I don’t believe a word I read but if you are going to call it a Fortune Cookie then I believe I deserve a fortune - even a weak one. Come on, I know that the McRib isn’t really rib meat - it’s just a great sauce so I’m Ok with almost right but I can’t stand by and be lied to by the Fortune Cookie wrapper itself. If they were called Words of Wisdom and Other Such Crap Cookies then I’m good with them but they are not - they are called Fortune Cookies and (I say again) I want to see a fortune damn it!

Waiting till the end of the meal (as I believe tradition requires) I opened my latest Fortune Cookie and here is what the tiny white paper had printed upon it; “Treat yourself to something of quality.” Now I’m not sure by what standards you may define “fortune” but I’m pretty sure this statement would not qualify. And just so you won’t think this was a one off aberration allow me to share a couple of more “fortunes” with you:

A smile is your personal welcome mat. Not mine - have you seen my teeth lately? A statement - and not true.

A truly rich life contains love and art in abundance. Says who? By the way - I have much love but little to no art in my life so I guess, by definition, I’m screwed out of a truly rich life. Another statement - and false.

Competence like yours is underrated. Know what they call underrated competence? Incompetence - that’s what it’s called when its underrated. Under appreciated is quite another thing. I could live with that. It’s still not a fortune though. Nope, another statement that is not only false but misleading.

Have a beautiful day. Bite me. Not even a true statement but an order. I do not take orders from cookies.

There’s no such thing as an ordinary cat. Logically, it would seem to me that at any given time there is one cat in the world who is smack dab in the middle of cat extremes. This cat then, would have to be the one who is ordinary - until he or she dies leaving the next one who is, again, the one who is in the middle of the extremes and by definition; ordinary.

You are working hard. Not a fortune and certainly not true.

You have a shrewd knack for spotting insincerity. Found it. So I guess that one is true - but still not a fortune, merely a lucky guess.

Truth be told I have received a number of “fortunes” in my Fortune Cookies over the years. Here are what I consider decent fortunes:

Now is a good time to buy stock.
Now is the time to go ahead and pursue that love interest!
You are in good hands this evening.
You will inherit a large sum of money.

See what I’m saying? To my knowledge only one of those came true but again, this is not my point. Truth in advertising - that’s all I’m looking for. When I crack it open I want a fortune damn it!

Happy New Year’s y’all.

Keep the Faith
Revelator

Lies - The Rolling Stones

Posted in BS | Print | No Comments »

Merry Christmas, Baby

24. December 2009 by Revelator.

Every year there are a number of Christmas movies I have to watch; “Scrooged”, “Elf”, “It’s A Wonderful Life” and the original “How The Grinch Stole Christmas”. And in each of these movies I have some favorites lines and moments but every year there is one quote that stands out for me. It’s from Scrooged - Bill Murrey as Frank Cross: “It’s Christmas Eve. It’s the one night of the year when we all act a little nicer, we smile a little easier, we cheer a little more. For a couple of hours out of the whole year we are the people that we always hoped we would be.”

On this Christmas Eve (and for as long as you can hold on to it) we should all try to be the people that we always hoped we would be.

Merry Christmas everyone.

Keep the Faith!
Revelator

Merry Christmas, Baby - Written by Lou Baxter & Johnny Moore; sung by many

Posted in Movies | Print | No Comments »

‘Zat You, Santa Claus?

24. December 2009 by Revelator.

Alright now settle down, settle down. Everyone take your seats and let’s get this thing started. Plenty of room up front folks…come on down - don’t be shy. That’s right - fill in all the seats. And you guys leaving the extra seat open like you do in the theater…that’s not gonna fly in here; move it on over. Doesn’t mean your dating just cuz your elbows touch. Oh come on! Who’s cell was that? You? Well ain’t you special… Everyone, I would like you to meet that one special person to whom the rules don’t apply. Could a couple of you gentlemen who abided by the rules please escort this gentleman to the door, take his badge and fling him into the new falling snow? Thank you very much. Dutch? Could you make sure to terminate his security clearance please? Thanks.

Boys, this is serious business and you will either follow my rules or….well, you’ve seen what happens when you don’t follow the rules.

Where’s my clicker? Thanks. Slide, the first - here’s your target. Surprised? Wondering just what the hell is going on here? Well, wipe those stunned looks off your faces cuz this is indeed your target and we have a very small window of opportunity to grab this guy and that time is fast approaching.

So your saying to yourself; “I’ve seen this guy a thousand times - I could walk half a block from here and just grab him.” Yes, you could grab him…but it wouldn’t be him. Remember when we found out that Saddam had look-a-likes attending meetings and such in his stead? Well, this guy has taken this strategy to insane new levels. In our estimation he has over 27,000 doubles working all over the world and trust me when I tell you we don’t have the budget to round them all up and run DNA tests on each one so we need to figure out just how to get the real one; something people have been trying to do for long about two hundred years now. Oh, he’s crafty this one - don’t ever underestimate this man.

And here’s the worst thing about this guy - he understands our intelligence systems and how to manipulate those. Wait there is one more thing - he see’s what you are doing. Some how he has each and everyone of you under surveillance 24 hours a day. For example, he knows that you are here now and later he’ll know what you are doing too. It is very hard to track a target like that let me tell you.

Back to the intel systems - he’s on to us. How do we know? Here’s how:

1. We know exactly what he looks like and we can’t find him.
2. We know exactly what he wears and we can’t find him.
3. We know exactly who his wife is but no one has ever actually seen her.
4. We know where he lives but we can’t actually find it.
5. We know exactly what he drives but we can’t find that either.
6. We know exactly when he will be out among us yet we can’t find him.
7. We know is flight routes but still can’t shoot him down.
8. We know who works for him but no one has ever seen one of his employees.

So, we know everything about this guy and yet for all our efforts no one can find him and bring him in. That is why your were brought here. You are the best of the best in your fields and we think if anyone can find this guy it will be someone in this room. Let me add that I think the one mil we’re offering as a reward just might incentivize each of you a bit.

Fellow OPSECers, I was thinking about Santa this morning and I’ve come to the conclusion that Santa must have the best OPSEC program EVER! How else can you explain items 1-8 above? Seriously. Dude has it mastered. Sure, NORAD follows him every year but still no one has been able to shoot him down. I’m just saying…
You find another program that protects info better than this and I’ll put you right at the top of my Christmas List.

Keep the Faith!
Revelator

‘Zat You, Santa Claus? - Louis Armstrong (and many others)

Posted in BS | Print | No Comments »

Tell It Like It Is

18. December 2009 by Revelator.

This is just unfreakingbelievable!

Hackers steal SKorean-US military secrets By KWANG-TAE KIM, Associated Press Writer Kwang-tae Kim, Associated Press Writer Fri Dec 18, 7:19 am ET

SEOUL, South Korea – South Korea’s military said Friday it was investigating a hacking attack that netted secret defense plans with the United States and may have been carried out by North Korea.

The suspected hacking occurred late last month when a South Korean officer failed to remove a USB device when he switched a military computer from a restricted-access intranet to the Internet, Defense Ministry spokesman Won Tae-jae said.

The USB device contained a summary of plans for military operations by South Korean and U.S. troops in case of war on the Korean peninsula. Won said the stolen document was not a full text of the operational plans, but an 11-page file used to brief military officials. He said it did not contain critical information.

Pardon? Did I read that wrong? Let me check…”He said it did not contain critical information.” Nope - I read it right. Still can’t believe it. I mean, are you kidding me? An 11 page Executive Summary of our South Korean defense plans (OPLAN 5027) contains no sensitive information? Am I dead? Did I go to OPSEC hell and not get greeted by the demon of OPSEC? I’ve met this demon before - his name is Ignorance - so I’m pretty sure I would know him if he was greeting me at the gates of OPSEC hell. Perhaps this is a dream? Damn it people - just saying something isn’t so does not make it not so. Sure that’s a horrible sentence but let me show one that is far worse: “He said it did not contain critical information.” See? Much worse.

And don’t give me that nonsense that denying it had critical information is our way of not confirming to the North Koreans that it did indeed contain sensitive information. You know who says stuff like that? People who don’t understand the adversary. To be so blind as to think that North Korea doesn’t have a damn good idea of what is essentially contained in OPLAN 5027 is the height of ignorance. Especially since you can find older versions of OPLAN 5027 in all it’s classified glory on the internet.

I’ll grant that the 11 page summary may have been unclassified but there is no way I’m going to grant it didn’t contain critical information. Unless the only definition you have of critical information is anything that’s classified - and we know that’s just not true. Too bad not everybody understands that these days.

Thanks to my good friend Kirk for letting me know about this.

Keep the Faith!
Revelator

Tell It Like It Is - Aaron Neville

Posted in Risk, Critical Information, BS, Vulnerabilities, Threat, Media, WWW, Computer Intrusions | Print | No Comments »

The Inteview - Part I

18. December 2009 by Revelator.

Today I want to share an interview I conducted with an OPSEC grey beard (GB) who insisted he remain nameless. Originally, I refused to do the interview with this particular stipulation but as you read on I think you’ll agree that even without identification the information shared is valuable enough to overlook the anonymity clause. We sat down in a small bar in a busy city near our nations capital. After ordering, I hit record and began the interview.

Rev: How long have you been in OPSEC?
GB: Since before they called it OPSEC.

Rev: What did they call it before they coined the term OPSEC?
GB: They didn’t call it anything - that’s the point isn’t it? It didn’t have a name. But we knew it as using your common sense - doing the right thing - being smart - protecting your ass from the guy trying to shoot it off.

Rev: Do you see OPSEC as primarily a wartime program?
GB: First, I don’t see it as a program - I see it as a way of life. But to answer your question up until very recently yes, it’s application was mainly in support of military operations - specifically wartime operations. But in the past ten years I think we have come to realize that every day is a wartime situation. Every conversation, every text, every tweet, every email could harm not only our all-volunteer military but also innocent civilians.

Rev: So would you say that in these times spreading the gospel is critical.
GB: Spreading the gospel, as you say, has always been critical. OPSEC can truly be a life saving art but if no one understands it and therefore no one uses it then its no more useful than the warnings on a pack of cigarettes. The most important step in the OPSEC process, as we know it now, isn’t even one of the five steps because it is a concept followed - if we’re lucky - by an action.

Rev: And what is that?
GB: Awareness! The most important OPSEC concept is awareness. If the people in your military unit or even your corporation don’t understand the “why” of OPSEC then you guys can take the OPSEC process and work it into the ground and it won’t be worth a damn because no one understands why you are doing it. And more importantly why they should use it. Listen; I’ve known guys who knew OPSEC cold…knew how to work each of the five steps, and could write an OPSEC plan so beautiful you would marvel at its magnificence. But some of these guys couldn’t sell the concept - they couldn’t show people how or why they should care about, much less use, OPSEC in their daily operations.

Rev: Is it true that the OPSEC process was at one time 12 steps and then 9 steps before we arrived at the five steps we have now?
GB: Absolutely. And it was 15 steps and 10 steps and one pretty highly placed, but ignorant, guy wanted it to be three steps.

Rev: Well, how many steps do you think it should be?
GB: To be honest, I wasn’t happy with the five steps when it first came out. I thought they left out two steps that I thought we’re pretty important.

Rev: Which were…?
GB: Not important now. People seem to be doing them just as a matter of course so I don’t want to upset those that are responsible for this process. But let me make another point before we move on; the average person in your organization doesn’t care how many steps it is. They don’t care about what you have to do to accomplish the five steps of the OPSEC process. You know what they care about if they care at all?

Rev: Tell me, please.
GB: Two things - what do I need to protect and how do I protect it. And that is all they should care about. The OPSEC Manager needs to do all the work and be able to answer those questions for the warfighter. If you can’t tell them what needs to be protected and how to protect it then what are you there for? To give the annual training? To fill the square? Bullshit. You are there to protect the mission and to protect life so if you can’t tell the trigger pullers what to protect and how to protect it then crawl back into your cubicle and work on your next PowerPoint presentation cuz brother they don’t need you.

Rev: Strong words sir.
GB: Yes they are. Look, I’ve worked at this too long and too hard to try to soften the blow of what I’ve learned over the years. You asked me so I’m telling you. I believe I’ve saved lives using OPSEC and if I couldn’t say that then why would I have stayed in OPSEC? For the glamour? For the glory? For the money? No, no and hell no! (long pause) In my military service I took lives… Since I laid down my weapon I have been trying to save lives and as I said I believe I have. (pause) OPSEC is important. It’s more than going to the conference once a year. It’s more than giving your annual briefing. It’s more than putting up a poster or two. Actually, it is all of that but so much more.

This is the end of part one of the interview. I’ll have part two for you soon.

Keep the Faith!
Revelator

Posted in History, General OPSEC | Print | No Comments »

All Shook Up

17. December 2009 by Revelator.

OPERATIONS SECURITY - OPERATIONS SECURITY - OPERATIONS SECURITY - OPERATIONS SECURITY. Everyone - say it with me now: OPERATIONS SECURITY!

If I read one more article, speech or blog entry that defines OPSEC as Operational Security I’m gonna go Elvis on my computer monitor. People, this isn’t difficult. Operations Security is a different concept than operational security. I’m not gonna go into a long dissertation about the difference because you should know what the difference is. But even as I write those words I realize I’m wrong. Generals, Lt Col’s, Master Sergeants, CIO’s even OPSEC Managers have written, or spoken operational security when speaking of OPSEC. And not just in general but typically something like this: “OPSEC, or Operational Security, is a 5-step…”
I honestly don’t know why this happens or what to do about it - I just know that every time it happens it sets us back just a little bit. OPSEC has a hard enough time getting accepted without people who should know better defining it incorrectly. In the world of OPSEC there is much room for disagreement on a number of topics but this isn’t one of them.
Which comes first; Threat or Critical Information development? Argue that all you want.
How should you define risk? Take sides and come out swinging.
What is the best way to prioritize vulnerabilities? Jump into the octagon and figure it out.
But - “Is it Operations Security or operational security?” is not open to debate.
So, to all of you getting it wrong I say: STOP THAT!

Keep the Faith!
Revelator

All Shook Up - Elvis

Posted in BS, General OPSEC | Print | 1 Comment »

For What Its Worth

30. October 2009 by Revelator.

At my current job as OPSEC Manager I have somehow become the go-to-guy when an employee feels they are being scammed in one way or another. About once a week an employee will forward me a suspected scam email or bring in a letter they received at their home. Having become quite familiar with this stuff over the past year or two I do the research, confirm it is a scam and then write up an email that goes to all employees alerting them to the latest scam.

I’m not complaining - this is a good thing; but it got me to thinking. Most of us work in environments that place a high importance on security. Also, many of us work in positions that require a security clearance. Because of this we are particularly security conscious. But what about the vast majority of people out there? What about those who aren’t, for whatever reason, as security conscious as we are? Might they be much more susceptible to scams than we are?

I think of my parents, I think of my housewife sister, I think of my many friends who work at what we might call regular jobs in any number of fields that don’t come in almost daily contact with the many threats facing us day in and day out.

I think we have a responsibility to these people. We are in the know - we know of Nigerian bank scams, charity scams, mystery shopper scams, phishing scams, missing child email hoaxes, email lottery scams, internet dating scams, inheritance scams, and a host of others. Sure, we’re (relatively) safe from these nefarious hoaxes and scams but what about your family and friends?

My recommendation to you is that you make this your personal responsibility. Let your friends and family know that if they receive a “too good to be true” email or letter to contact you and you’ll research it to verify it’s legitimacy or (as will be the case 99.9% of the time) determine that it is a scam. We are paranoid by definition but the vast majority of our friends a family aren’t and I think you owe it to them to be the go-to person if they have any security questions of concerns. Just a thought.

Keep the Faith!
Revelator

For What It’s Worth - Buffalo Springfield

Posted in Awareness, Family OPSEC | Print | No Comments »

Puff The Magic Dragon

16. October 2009 by Revelator.

As we are all aware by now Operations Security, or OPSEC, has been around for ages. We first see it referred to directly in early Greek texts like this “ασφάλεια διαδικασιών.” Granted most of us don’t read Greek but perhaps this will aid in your understanding: OPSEC has it’s own Greek God - his name is Opus.

Opus was the brother of Calisto. After the overthrow of their Father Vasilios he drew lots with Calisto and four other brothers, for shares of the security world. Opus had the worst draw and was made lord of OPSEC. His wife was Iossa whom Opus abducted from the God Enesay. Opus may be the God of OPSEC but, security itself is another god, Seeiya.

This legend was first spoke of in Greek Mythology as dictated by Ospa; a Greek pre-classical poet and contemporary of Homer. His preliminary epic poems spoke through symbolism with a heavy dose of romanticism though some of his later works dealt directly with mysticism and the duality of God and man. In an early Ospa epic Opus was shown as both God and man as he does battle with the mythical 5-headed purple dragon, Tarasthretenstien. Opus, though expressly told not to seek out and attack Tarasthretenstein, set out one day with the express purpose of doing battle with, and ultimately defeating the dreaded purple dragon. It is written that he ignored the warnings of his father Vasilios as he suited up for battle knowing that as the God of OPSEC his failure would mean the loss of OPSEC to the world. As soon as he was suited up, the sky turned black and the purple dragon descended with each of its five mouths spewing fire.

As Tarasthretenstien drew closer Opus bent on his knees in a gesture of surrender. Tarasthretenstien thought Opus was begging for his life, so she did not attack immediately. Seeing his deception working Opus struck the dragon with his magic Sword of OPSEC cleanly severing one of her five heads.

Fearing defeat Tarasthretenstein begged for her life explaining that she had hatchlings all over the world that would die if she did not feed them. Opus, realizing that leaving Tarasthretenstien alive would result in unacceptable risk cut off her four remaining heads.

As we all know today, Tarasthretenstien’s hatchlings survived leaving us with a world of threats and adversaries to this day.

When times get tough, remember the OPSEC God Opus and attack those threats in any way you can.

Keep the Faith!
Revelator

Puff The Magic Dragon by Peter, Paul and Mary

Posted in BS, History | Print | No Comments »

Shameless Promotion Alert

8. October 2009 by Revelator.

So I’m searching “OPSEC” on YouTube yesterday, as I am wont to do from time to time, and I ran across a new video titled “Atomic OPSEC Part 1.” I noticed that it was from the Department of Energy’s Nevada Site Office and I took this as a good sign. I liked what they did with their “OPSEC Hunters” video so I thought I would check it out.

Well, I gotta tell you this new video is even…

Ok, I can’t do this anymore. Let the BS end right here…

We made the video. That’s right; I wrote it and acted in it - my fellow DOG of OPSEC directed it and the new guy plays the scientist. We think it’s pretty good and think y’all might like it also so go to YouTube and search “Atomic OPSEC” and watch parts 1 and 2. Total time is around 13 minutes. We hope you like it.

Keep the Faith!
Revelator

Posted in BS, Awareness, WWW, Media, Movies | Print | 1 Comment »

Nothing Matters And What If It Did

25. September 2009 by Revelator.

A young John Cougar used those words as the title to his fifth album. In those moments when I’m frustrated by the sometimes low OPSEC give-a-crap-factor I wonder about those words and my mind drifts to this thought: OPSEC doesn’t matter and what if it did? Generally speaking it appears to me that no one really cares about OPSEC.

If OPSEC “mattered” then why is it so hard to get people who should care about OPSEC to actually care about OPSEC?
If OPSEC “mattered” then why is it blown off in the planning cycle?
If OPSEC “mattered” then why is it so often on the chopping block when money is tight?
Oh man, I could go on and on.

But to what end? What would be the point? No one cares. And I can’t even assume that those of you who are part-time/additional duty OPSEC POCs care. I’ve done too many OPSEC assessments and have seen with my own eyes the reality of dormant OPSEC programs around the world. I’ve done the interviews of unit personnel as they stare blankly at me when I ask them who their OPSEC Manager is or what a Critical Information List is. I’ve listened to blow-hard OPSEC POC’s who rant and rave about their OPSEC program only to find that it’s all an illusion - that nothing real exists. I’ve read Critical Information Lists that are 10 pages long and totally useless or were “benchmarked” from another unit and they didn’t even bother to change the letterhead to letterhead from their own unit. I’ve listened to OPSEC briefings that would make you want to rip your eyelids off. I’ve listened to senior leaders who talk, talk, talk, OPSEC but can’t seem to get an OPSEC section in their plans of operation. I’ve seen young just appointed OPSEC guys and gals who are ripping their hair out cuz the program they just took over sucks and they are getting no support to make it any better. And I’ve seen really good people try their damdest to do really good things and get shut down and hammered by idiots who make more money than they do.

Good Lord, why even bother? Seriously. Why bother? Hey - I’m not leading up to any great epiphany here. I’m not setting you up to tell you why you should bother. I have no intention of trying to get your emotions roiling by extolling the virtues of OPSEC and it’s devout practitioners in a vain attempt to get you psyched about how great OPSEC is. Nope. Not today.

Today I’m just bummed. OPSEC sucks - that seems to be the prevailing attitude so I’m just gonna give into it. Come on now…aside from some small pockets of success, in the vast majority of places that OPSEC should matter it simply doesn’t. And that sucks.

Keep the Faith! (your gonna need it)
Revelator

Nothing Matters And What If It Did - John Cougar

Posted in BS, General OPSEC | Print | 1 Comment »

Fight The Power

16. September 2009 by Revelator.

“I’ve called this meeting because, as we feared, our budget has been cut 14%. We’ve game-planned for this but now is the time to get serious about what we can slim down and what we can live without.”

“Sir, if I may…we do have one program that has absolutely no verifiable Return on Investment that I think we should consider.”

“You mean, we actually have a program that is costing us money that has absolutely no ROI?”

“Yes sir.”

“Frankly, I’m a little worried that this hasn’t come to my attention before. What program are you talking about Johnson?”

“OPSEC sir.”

“Op-what-now?”

“OPSEC sir; Operational Security. You know the one. That briefing we get once a year where they tell you to keep your mouth shut. Don’t talk about work in bars and stuff.”

“Yeah, I know it. You mean that program costs us money? It can’t be very much can it?”

“Well sir, we have a full time guy who runs the program and then we have a group of people who have to spend a small percentage of their time on it as OPSEC Committee members.”

“Hmmm. So what do they actually do for us?”

“No one really knows sir. I think I’ve seen a report or two floating around but I’ve never read one and no one I’ve asked has either.”

“Let me make sure I understand…they give briefings that no one wants to go to, write reports that no one reads and take up valuable time from committee members who should be doing something else. Is that about right?

“I would say that about sums it up sir.”

“And how much will we save annually if we kill it?”

“Based on the projected cuts for this upcoming FY killing this program would save us .003% off the top.”

“Well that’s not much is it Johnson?”

“No it isn’t sir, but if we think we really don’t need it anyway then why not just kill it? It will show that we’re being proactive and not afraid to cut what some of our security professionals say is a critical program.”

Ladies and Gentlemen, this is happening today. OPSEC has already been reduced or just plain cut from a number of organizations. We know OPSEC is a viable program. We also know that it does not and will not ever bring in money. ROI is almost impossible to prove also. Did OPSEC save any lives today? Did a competitor not find what he was looking for when he went through our trash because of OPSEC? Did Johnny or Susie not say something critical or sensitive on the Internet today because of OPSEC? Beats me. I hope so - but we have no proof.

Sooner or later your OPSEC program will come into question. At that time you will need to be able to answer the question: “Why should we keep the program?”

The answers to that question are as varied as the individual programs and can’t be fully answered in this forum. But you need to be thinking about how to answer that question for your program and your organization. I guarantee you that sooner or later the question will be asked and I’ll bet you that if you don’t have the answer they’re looking for…

Let’s just say you and your program may be in danger.

Keep the Faith!
Revelator

Fight The Power - Public Enemy

Posted in Leadership Support, Program Management, General OPSEC | Print | No Comments »

Jail Bait

3. September 2009 by Revelator.

I’ll never forget the night - I think we were in Lubbock or was it Wentzville…either way. I remember that Miles - that’s Miles Anthony, the lead singer of Big Slick, was really hot for this babe in the fourth row and as his top roadie he expected me to make the deal with her. You know - get her backstage and well…you know. And this was unusual because normally he would choose three or four just in case one or two wouldn’t well…you know. So I watched her off and on during the concert just to see what I could see. Well, I could see quite a lot if you know what I mean and I suspect that is what made Miles want her so bad but that’s neither here nor there.

I word or two about me is in order I suspect: My name is Night Train. Actually my name is Lance but a long time ago outside of a little bar called The Cavern a drunken Ringo called me Night Train and the moniker just stuck with me over the years. At that time I had spent three years in college and was doing a summer vacation with the love of my life who’s name I just can’t seem to recall at the moment. One night we went to see this band at a bar in the red light district called the Cavern and while I was hanging out after the show this chap in a leather jacket asked if I could help them drag some equipment to their van. Turns out that chap was John Lennon and we struck up a friendship that lasted until that fateful night outside of the Dakota. But that is the short version of how I started at a roadie. The story about why I am still a roadie is much longer and not quite as enjoyable.

So - back to that night in Barstow…or was it Philly - either way. During the drum solo (I swear Smokestack was channeling Don Brewer of Grand Funk that night) Miles asked if I hooked it up yet and I had to tell him not yet. Miles really didn’t like that answer but it was the only one I had right then. After a quick line and a towel-off he was back on stage and I was back to my job - pimpin for rock stars. Not a job I recommend to young professionals but I’m pretty good at it by now and I’m pretty damn sure that at sixty-six years of age I won’t be going to truck drivers school if this doesn’t work out. But this was 17 years ago when I still thought I would get a real job when I grew up.

Back to LuAnn (her name as I was to find out later)…She had squeezed her way up to the second row by now and had just flashed her considerable attributes to Miles and he looked at me and gave me the signal - again. Rock stars and their roadies have a complicated series of signals that would make a third base coach proud. One signal means “she can come back stage but that’s all” another means “she can come back stage if she brings her friend/sister” another means “she can come back stage but only if she’ll ___________ (insert desire here)” and yet another meant “she can come backstage but make sure she’s not a dude first.” There are more but I’m sure you get the gist of it. The signal I had just received for the second time meant “if she’s willing she can come on tour with us for a week or two.” I didn’t get that signal too often so I took it seriously.

And so I watched her. I watched her because there is a level of trust between a roadie and a horny rock star and I have a solid reputation for never letting the rock star down - or getting him arrested. And that’s the key to this whole operation - keep the rock star safe from a multitude of potentially embarrassing situations. And so I watched her. I watched her on her cell numerous times - and not that happy about it. I watched her turn away dude after dude who hit on her. I watched her as her older friend brought her beer after beer. And I noticed she didn’t have any tattoos.

And I watched as she walked away after Miles sang the last lines to their hit at the time, “Big Leg Woman” (a decent version of the classic Muddy Waters tune). As she walked I chased. I didn’t expect her to bolt so fast. I figured she would stick around and slide toward the side of the stage to well…you know. But she didn’t. She was in a hurry and I knew I would be fired if I didn’t get her backstage to Miles.

I was about to catch up to her when she met her angry mother and father at the exit. And that is when all the indicators started springing to my mind. No tat’s for one. Sure you can get your parents to sign for you if you are under 18 but not many do. And all the text messages and phone calls that she wasn’t happy about. No doubt her mom or dad had sent those. And all those dudes she turned away - no sense hooking up when your angry mom is gonna meet you at the door. And finally, it was her older friend that was bringing her the beers. Something someone under 18 couldn’t have purchased without a fake ID.

And so I had to face a not too happy Miles backstage. I just had to tell him she was underage and we were good. No way he wants to mess with any jailbait - not again, at least. In the end he hooked up with a reporter for a local rag that was much more age appropriate for my aging rock star. I am happy to report some 17 years later that they have been married for 15 years now and have two kids. The boy is named Thor and the girls name is LuAnn. I guess even if you’ve had as many as Miles you never quite forget the one that got away.

OPSEC - keeping rock stars out of jail for 60 years.

Keep the Faith!
Revelator

Jail Bait - George Thorogood and The Delaware Destroyers

Posted in Indicators, BS, Risk | Print | No Comments »

Everything Is Broken

31. August 2009 by Revelator.

From CNET News.com written by Elinor Mills:

“Here’s either a cautionary tale or an example of social-media paranoia. An Arizona man believes that his Twitter messages about going out of town led to a burglary at his home while he was away.

Israel Hyman posted to approximately 2,000 followers on Twitter that he and his wife were “preparing to head out of town,” that they had “another 10 hours of driving ahead” and later, that they “made it to Kansas City.”

When he came home, he found that someone had broken into his house and stolen thousands of dollars worth of video equipment he used for his video business, IzzyVideo.com, which he uses for his Twitter account.

“My wife thinks it could be a random thing, but I just have my suspicions,” he told the Associated Press. “They didn’t take any of our normal consumer electronics.”

Personally, I don’t think it’s a good idea to advertise to the world that your home will be unoccupied for a period of time. I also don’t think it’s necessary to reveal too many other personal details on social media sites that could be used for identity fraud, like your birth date.”

A number of thoughts some to mind:
1. Yeah, that was stupid. People are putting waaaaaaaaaaaaaaay too much on social networking sites. But then we know that already don’t we? Which leads me to my second thought…

2. Most OPSEC professionals, even part-timers, have known this for quite some time now so I have to ask; are we just horrible at spreading the word or are people not listening? Personally, I think it’s both. Awareness is the key here and while some are doing a pretty decent job the majority of us are not. And yeah, I know, why waste the time when you just know people aren’t going to listen to you either way. That’s tough to overcome but you just have to Keep the Faith! and press on.

3. Was it just the tweets or did dude possibly not consider OPSEC and basic security prior to leaving on vacation? We’ve all done the “so you’re going on vacation for two weeks how do you protect your home while you’re away” exercise. (if you haven’t let me know - I’ll send it to you). I suspect he didn’t arrange to deal with his mail, newspaper, growing grass, lights, etc while he was away and just got nabbed by bad guys who know what to look for.

Your fellow employees are counting on us OPSEC and Security professionals to keep them informed and protected. Do your best to inform them and with any luck they can protect themselves.

Keep the Faith!
Revelator

Everything Is Broken - Bob Dylan

Posted in Awareness, Indicators, Countermeasures, Risk, WWW, Threat, Family OPSEC | Print | No Comments »

OPSEC & A Nasty Habit

24. July 2009 by Revelator.

My friends, it is time once again for a guest blogger to put in his two-cents. This entry has a significantly higher military quotient than most of mine and I must say it brings back good memories for this retired GI. The gentleman who wrote this is a good friend (and an ex-boss) - and I consider him one of the premier OPSEC Planners on the planet. Read and heed my friends…Rev

“Everything I learned about really good OPSEC planning for a big operation I learned from dipping snuff,” he said. Not quite sure he was serious, I responded, “You’ve got to be kidding me!” The lack of expression on Sam’s face, as he removed the black plastic lid and spit into his McDonalds’ coffee cup, led me to believe he was serious.

We were on a break from the Joint Planning Group session at a particular US combatant command headquarters, hanging around in the break room engaged in professional Information Operations (IO) discourse and partly solving dilemmas elsewhere on the planet.

Born Samuel T. Cogley five decades ago in rural Arkansas, “Books,” as he was known throughout the IO and Naval Aviation communities, was the most experienced military planner I had ever known. He had been brought in from a “Center of Excellence” to provide electronic warfare subject matter expertise to the combatant commander’s core joint planning group. Now retired, he was working as a defense contractor and did his best to impart IO knowledge on anyone who showed any interest in becoming enlightened.

I was this combatant command’s OPSEC Officer and doubled as the OPSEC planner for the J3’s IO Cell. With most of the folks in the IO Cell away TDY, I actually just happened upon this planning group by shear accident and had no idea that a plan was in work. That is until I heard the constant throat clearing voice of brand new Lieutenant Colonel McClin.

“Major! Major Patrick!”

I had just walked past one of our many conference rooms – which were seemingly always in use – and turned my head. Looking down at a clipboard, Lieutenant Colonel McClin pushed his glasses up the bridge of his nose and asked, “Are you”…ah-hem…“Major Jonathan Patrick”…ah-hem…”Jonathan Patrick IV,”…ah-hem…”the OPSEC dude?”
Not sure where this was going, I hesitated in responding. “Yes, I am. But you can call me JP4, everyone else does.”

“Okay…ah-hem…JP4; I am Lieutenant Colonel McClin, everyone calls me…ah-hem…Chilly Mac, but since I am a Lieutenant Colonel…ah-hem…in the United States Army, and you…ah-hem…are just a Major, you should call me…ah-hem…Colonel. Please go in and have a seat, the Joint…ah-hem…Planning Group is getting ready to start. I could…ah-hem…cover the OPSEC stuff since… ah-hem…I have done it Iraq before, but since you are here…ah-hem…you can be the OPSEC planning rep.”

As I entered the conference room, I heard someone from the back corner calling out in a loud whisper, “JP4, over here!” It was Books. I went over and sat next to him. “Man, it’s a good thing you showed up, I was afraid I was going to have to cover for your sorry rear end and do the OPSEC planning duties,” Books said. “Hey, give me a break! I didn’t even know about this. Besides, what about that Chilly Mac guy? He told me he could do it, he knows OPSEC…at least he says he’s done it before.”

“Oh, please!”

So, after about an hour, we went on our first break, initially arguing about how zombies were not getting a fair shake in the entertainment world, especially when compared to vampires and werewolves, but somehow came back to OPSEC planning.

I responded to Books’ comment, “What exactly do you mean? How on earth can anyone compare smokeless tobacco to OPSEC planning? Besides, it is such a disgusting habit!
“What, OPSEC planning?”
“No! That stuff you are putting in your mouth!”
“Oh.”
“Wait a minute, how can you even contemplate that OPSEC planning is disgusting?”

“Um, well, not exactly that way, I was actually thinking that most of the time I’ve seen planners wait until the plan is almost complete and ready for execution or the boss’s signature before someone thinks about OPSEC. Kind of like, ‘oh, can you OPSEC folks “sprinkle” a little OPSEC on this before we go to print?’ That’s disgusting from a professional standpoint; kind of sad really.”

“So what do you mean?” I inquired.

Books began his lesson on dipping snuff and equating it to OPSEC planning. “Getting in on the beginning is the key. I need to do my analysis and find out what is allowed in the planning room and what is not. Usually, the command will allow beverages. I mean how can you really do effective military planning without caffeinated beverages?

Sometimes, there will be signs posted that forbid the use of tobacco products. So, I show up with a coffee cup – with a lid – and overtly show everyone that I drink coffee. I mingle, sit in on working groups, I want everyone to recognize I am a coffee drinker. Later, when the time is right, I go away and put in a dip and return with my coffee cup and lid.”
“For me, and I hate to admit this, I cannot do effective military planning without my nicotine, especially if we are doing 12+ hour sessions. If I show up with the regular observable indicators of a dipper of snuff, then I am at risk of getting busted.”

I interrupted, “You mean like Major Sweet, that Marine that walks around everywhere with that old, worn-out, plastic Ozarka water bottle full of spit juice?”
“Yep, exactly!” Books said. “He is never a happy camper when the anti-tobacconists ask him to leave.”

Books continued, “And speaking of the anti-tobacconists, the next part of my analysis of this “threat” – still taking advantage of showing up early – is to scope out the room where we will be planning and find the optimum location to sit and be out of easy purview of the folks looking for dippers.”

“Like where we’re sitting in the conference room today?” I asked. “You’re catching on, JP4, you’re catching on.” “But I never see you spit in there!” I charged. “Ha! You don’t know when to look. Or rather, I know the times when the “bad guys” aren’t looking. Like during slide transitions or when someone asks a question. Their “collection capabilities” are diverted elsewhere and I take advantage of the moment.”

I was still somewhat puzzled. “Okay, so what does this have to do with OPSEC?”

“I’m getting there,” Books responded. “In the grand scheme of things, Major Sweet takes a risk of getting caught, or better yet, doesn’t acknowledge the vulnerability his observable indicators create nor does he appreciate the risk of being seen by the anti-tobacconists. You would probably agree with me that his risk would be rated as HIGH.”

“I, on the other hand, take simple, cost effective mitigation measures to protect my indicators based on a current and thorough threat analysis.”

“The same thing goes for OPSEC planning. If you can get in on the planning early, and see where the plan is headed, you can then take measures and assign tasks far enough in advance to effectively mitigate indicators that reveal friendly intent, capabilities, timing, etc.” “If you show up late to the planning effort, OR, if you get the proverbial request to sprinkle some OPSEC fairy dust on the plan at the last minute, you’re out of position to make anything happen and the bad guys will pick up on the indicators.”

“We know the bad guys look for changes in our routines. We need time to adjust events to keep routines from highlighting what we are up to and you can’t just simply do that on the eve of the operation and you definitely can’t do it after the fact.”

“If I walk in on the last day of planning, I won’t be able to get an optimum seat; all eyes will be on me; and I will either have to go with just drinking coffee or…” “Or take the risk and just go about with your nasty habit ala Major Sweet,” I imparted. I think I’m getting it now…so if a plan depended on moving a specific unit out of particular location, say using C-17s…”

It was Books’ turn to interrupt now, “And the only time C-17s showed up was to move that unit, then that would be a huge indicator. That is unless you set up “random” C-17 flights earlier in the timeline, prior to actual execution.” “That kind of sounds like a military deception plan to me,” I said “Is it?” Books asked.

After a pregnant pause, he continued. “Remember the definition of MILDEC, and who the target audience is. OPSEC has a much broader target audience, and in your example we are not doing it necessarily to cause someone to take, or not take, action. However, you do bring up a valid point; and I must add that I am impressed with the way you think.”

“We can talk the finer points of MILDEC planning and execution later, but in a way you’re correct because OPSEC can use MILDEC as a mitigator to help make it harder for the bad guys to find the real indicators. I guess it really depends who initiates the task and if it was tasked as part of a larger MILDEC plan.”

“You can also kind of make the same correlation with Electronic Warfare and conditioning jamming before an operation. Is that MILDEC? Or is it OPSEC? The EW planner would tell you he is just being the consummate EW professional. Either way, it goes to not highlighting a routine that would give something away to the bad guys. I would like to think that a good OPSEC planner that got in on the planning early would be in a good position to help that EW guy and that deceptionist mitigate those kind of things.”

“Okay, okay, I get it,” I said. But I still had a few more questions.

“Books, I have to ask; why is the lid so important?”

Books smiled as he took another spit. “Cost effective mitigation to overhead surveillance – passersby to you JP4 – plus it doubles as a safety device. I wouldn’t want this to spill. I do have some couth you know!”

“Good point,” I replied. “But is there a tie in with snuff and the Critical Information List? Does dipping itself make you a better OPSEC planner?”

About this time Chilly Mac walked into the break room. Books noticed him before I did and slowly turned to avoid any eye contact with him.

Sensing his desire to stay clear of Chilly Mac, Books softly spoke, “Let’s get back into the conference room. We can talk about Critical Information on the next break.”

Don Sidro
The Godfather of OPSEC

Keep the Faith!
Revelator

Posted in Indicators, OPSEC Plans, Planning | Print | No Comments »

I Am The Walrus (revisited)

21. July 2009 by Revelator.

In yesterdays blog I listed a series of questions that I had hoped to have answered once I received my security clearance. I also stated that I didn’t ever get the answers to most of those. Well, it turns out that one of my faithful readers actually has the answers and is kind enough to share them with the rest of us. Because of the nature of the information and the sensitivity of the sources I cannot provide his/her name - suffice to say that he/she is known to many of you. Enjoy…

Revelator: Hope this helps…

Who really killed Kennedy?
- LBJ.

Did we land on the moon or was that all filmed in a soundstage in Burbank?
- We landed. Myth busters just proved it last night.

What is really going on in Area 51?
- It’s part of the current ‘Air Force Partying System’ - the Air Force had too many wild parties and broke the stereo systems in Areas 1 thru 50.

Is Elvis still alive?
- Yes he is. I just asked him.

Is there really a Hanger 18 and/or a Project Bluebook?
- Yes. It’s between Hangars 17 and 19. Yes. It was a joke. Or joke book.

Is there actually a government warehouse for freaky secret stuff? And if so, is the Arc of The Covenant there?
- Yes. It’s called the Pentagon. And no - God has more sense than to leave his scribbled down notes with a bunch of idiots.

Just who/what the hell is/are the Illuminati?
- Started out as a bunch of free-thinkers in Bavaria circa 1776. Recent Wanna-be’s took the name and supposedly comprise the New World Order…good luck to them.

Are we alone?
- No. If you need proof, just call 555-1212.

Who are the “Nine Unknown Men?”
- No one knows. That’s why we call them ‘Unknown’. But I think at least one’s named ‘Bob’.

Do the Grays really exist - and if they are running the world shouldn’t they be doing a better job of it?
- Yes they do. And yes, they should be; they need all the help they can get. Please call 8675…309. Ask for ‘Jenny’.

What the hell is going on in the Bermuda Triangle - and if it’s so jacked up there why do boats and planes still go there?
- Scientists determined that it’s a weather thing. A confluence of location and jet streams. Boats still go there because of what they saw on either the Adam’s Family movie or Unsolved Mysteries.

Where is Sasquatch and why do we never see more than one at a time?
- He resides at the Holladay Park Plaza, a Portland, Ore. assisted living center. You never see more than one at a time because he’s the only one. He’s classified as a cryptid.

Was that really a weather balloon in Roswell?
- Yes. But they were inadvertently popped by a gang of extra-terrestrials who were subsequently shot down and dismembered by some angry scientists who were really counting on getting that weather data.

What’s up with Stonehenge?
- A grouping of really big rocks which are the property of the English Crown and not the reigning monarch. It’s a place of burial; a domain of the dead.

And what about the Nazca Lines in Peru? Is this “Chariots of the Gods” stuff true?
- Just animal doodles on a large scale. A precursor to crop circles.
- Of course it’s true. It’s how we got Energizer batteries and keep our razor blades sharp.

And now you know…the rest of the story.

Keep the Faith!
Revelator

Posted in BS, Critical Information, General OPSEC | Print | No Comments »

I Am The Walrus

20. July 2009 by Revelator.

Way back in 1978 I started the process for my Department of Defense security clearance. I’ve had this thing for long about 32 years now so I’m fairly versed in how we handle, store, transmit, disseminate, and otherwise protect classified information. But I must say that as an 18 year-old waiting on my clearance I was pretty damn naive.

I actually thought that once I got my clearance I would be able to see all the Top Secret information the government had on file. I was pumped! I was finally gonna get the answers to some of the nagging questions that my government wouldn’t share with those so unfortunate as to not be cleared.

Here is my list of things I wanted to know:

Who really killed Kennedy?
Did we land on the moon or was that all filmed in a soundstage in Burbank?
What is really going on in Area 51?
Is Elvis still alive?
Is there really a Hanger 18 and/or a Project Bluebook?
Is there actually a government warehouse for freaky secret stuff? And if so, is the Arc of The Covenant there?
Just who/what the hell is/are the Illuminati?
Are we alone?
Who are the “Nine Unknown Men?”
Did Jesus have a wife?
Do the Greys really exist - and if they are running the world shouldn’t they be doing a better job of it?
Is Paul McCartney dead?
What the hell is going on in the Bermuda Triangle - and if it’s so jacked up there why do boats and planes still go there?
Where is Sasquatch and why do we never see more than one at a time?
Was that really a weather balloon in Roswell?
What’s up with Stonehenge?
Is Yoko Ono the Antichrist?
And what about the Nazca Lines in Peru? Is this “Chariots of the Gods” stuff true?

As you may know, or certainly must have guessed, I didn’t find the answers I was seeking once I got my clearance. Well, that’s not entirely true…I have been to Area 51 (didn’t see one stinking alien) and it looks like Paul is alive and well and I’m pretty sure Yoko Ono is not the Antichrist though I have no evidence to back that up either way. But the fact remains that once I got my clearance there was very little classified information that the government would let me get my hands on.

For those of you who have never had a clearance you may be asking why this is; three simple words - Need To Know. I didn’t have the Need to Know any of the information I was seeking (if it even exists - which I doubt).

Most of us understand and properly use Need to Know when dealing with classified information but I ask you now - how are you with unclassified information? Do you still apply Need to Know principles when someone asks you for unclassified sensitive or critical information? If someone you work with were to ask you to let them read a “For Official Use Only” document would you give it to them without much thought?

Sadly, most of us would. I mean, it’s unclassified for Heavens sake. If it was worthy of protection someone would have made it classified wouldn’t they? And therein lies our problem. A good number of us don’t really think anything unclassified requires any type of protection. Well, if that were true may I be so bold as to suggest that we don’t need OPSEC.

If we’re not going to bother seeing “For Official Use Only” or “Sensitive But Unclassified” or “Unclassified Controlled Nuclear Information” or “Law Enforcement Sensitive” or “Sensitive Homeland Security Information” or “Administratively Controlled Information” or “Security Sensitive Information” or “Critical Infrastructure Information” or “Personally Identifiable Information” or “Controlled Unclassified Information” as information requiring protection then why bother with any of these identifiers?

Back to the point: Need to Know needs to be applied to unclassified sensitive information (in all its forms) in the same way we apply it to classified information. If coworkers Bob or Janet want to see that “For Official Use Only” document then you need to verify that they have a Need to Know the information - that they need this information to do their job. And if you can’t verify that then you can’t let Bob or Janet see the information.

Pretty simple really.

And I hate to be the one to break this to you but yeah…Elvis is dead. Sorry man.

Keep the Faith!
Revelator

“I Am The Walrus” - The Beatles

Posted in Critical Information, General OPSEC | Print | No Comments »

Miss You

9. July 2009 by Layne.

Hey Baby!!

I sure miss you and the kids!!!!!!!!! XOXOXOXOX I know I’ve only been here two weeks but OMG do I miss you guys. I want to be back home so bad it hurts. I miss wrestling with Dylan and (don’t tell any of my boys this) but I really do miss Shelby’s tea parties (please tell her again that daddy is sorry he broke her chair). And do I have to even go into the things I miss about you? Especially after that last email I sent!! There are times when missing you guys really gets to me but I’ve been lucky so far and have been able to find places where I can be alone. To paraphrase Tom Hanks - “There’s no crying in war!”

Thank God I’ve got my blog so I can keep the whole family up to speed about what I’m doing. I know everyone is worried about me but hopefully if they know what I’m up to they won’t worry as much. In yestersay’s blog I tried to tell them everything I could about what what I was doing in Mosul. I know it’s on the news and all over the Internet but as usual they got it all wrong - they reported we were there just to quell some uprising but we were really there trying to capture an Al Queda bad guy who was in the area. We missed him but we’re going back tonight (in about an hour actually). We’ve got some info from a cousin of his that he’s hiding out in a Mosque near the park in Central Mosul. He was tipped off last night but I think we’ll get him this time - as long as everyone keeps their damn mouths shut! Keeping a secret around here is harder than keeping your brother off Meth (how is he doing by the way?)

And can you please tell everyone that I’m doing my best to keep up with the tweets. It’s just kind of hard when you’re rolling down the highway on your way to attack a target and you’re worried about an IED blowing your ass off. I’ll do my best but please ask everyone to understand if they don’t get up to the minute tweets from me. I’m trying to kill bad guys here and tweeting may not be the first thing on my mind.

And can you tell Dad not to call me on the cell every time he hears that someone died over here - it’s getting kind of annoying. Between the tweets, the MySpace page, the blog and my daily emails - I would think that would be enough information for the whole blessed family.

Hey, I was thinking the other night about getting you that new car…Baby, if you just absolutely can’t live without a new Mini then I guess when I get back we can get one for you. I know me being over here is very hard on you so I figure it’s the least I can do. You (and the kids) are the reason I’m over here babe. I want Dylan and Shelby to know that at least one time their daddy stood up for something that was important to him - and to his country. And I’ll never tell dad this but when I put on my uniform and I see the name he gave me on it I feel that I’m carrying him with me. I know that even though he’s not much on words I know he’s proud of me and yes, even that he loves me. When I get home I’m just gonna tell him I love him and I don’t care if he says it back - I just have to say it one time - so he knows.

I’ve got to get to the mission brief now baby. Hug Dylan and Shelby for me and tell them that daddy will be home soon. I’ll twitter when we’re done and email you as soon as I get back. I have to email you - there is something important I want to tell you about - it’s great news so don’t worry but I don’t have time now to tell you - gotta run. I love you with all my heart Angel!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

EPILOGUE: This was Private Lindmarks last email. His unit was ambushed that night as they approached the mosque in Mosul. No one knows how the information got to the opposing force. What we do know is that 17 soldiers lost their lives that night, 9 wives were widowed and 12 children will never see their father (and one mother) ever again.

Keep the Faith!
Revelator

Miss You - The Rolling Stones

Post Script - This story is a fictional account of something I hope never happens.
Rev

Posted in Critical Information | Print | 1 Comment »

Dirty Water

30. January 2009 by Layne.

The Purple Coats are coming! The Purple coats are coming!

That’s right kids - in just over one week the National OPSEC Conference will land in the Alamo City, San Antonio, Texas. And thanks to the Spurs getting booted out of the Playoffs (not to mention the Swine Flu based State of Emergency in Texas) we’ll have the Riverwalk all to ourselves for the week.

But not just the Riverwalk - San Antonio is chock full of places and activities to keep you entertained and occupied during your visit: The Alamo, La Villita, Gilberts Mexican Restaurant,
Hard Rock Cafe, Six Flags Fiesta Texas, Sea World, Witte Museum, San Antonio Museum of Art, El Mercado, Durty Nellie’s Irish Pub, Schlitterbahn Water Park Resort, Howl at the Moon,
Tower of the Americas, Splashtown, Dick’s Last Resort, Kirk’s Back Yard BBQ, Mission San Jose,
Coyote Ugly, Mad Dogs and on and on…

And if you get bored with all that stuff then I reckon you can stop by the conference for a presentation or two. It’s too late a date to try to convince you to register for the conference but I can tell you that over 1,000 OPSECers have registered! It’s the biggest ever. As they say, “Everything is bigger in Texas.”

Hopefully I’ll see you there. Also, I’m quite looking forward to seeing Don Sidro, J-Ellen, A-Train, Chik, BoyToy, Auggie Doggie, Ginzo, Betty Lee, Daniel-san, Tina Di, Goodie, Lovely Linda, Aussie OPSEC, Oso, Jacko, Red, Jernandler Bong, Jimmy Mags, Joannie C., Joey H., Keef, Kirk, Knappster, Numlock, Kyle, Wisdom, Goose, The Round Mound of OPSEC, Ollie, Saddam Dancing Phil, Sarge, Petro, Tomas A., and of course, BIG SEXY.

Can’t wait!
The first one’s on me (and for me).

Keep the Faith!
Revelator

Dirty Water - The Standells

Posted in Conferences | Print | No Comments »