opsec

The Grugq's Hack In The Box 2012 talk on operational security for hackers, drawing on hacker indictments and counter-intelligence research. It reviews OPSEC goals and methods for avoiding detection and arrest, with case studies of how hackers got caught.

A DEF CON 30 talk by Sam Bent, a former darknet vendor, on operational security when using Tor and the darknet. He applies the hacker mindset to staying anonymous and avoiding capture.

Journalist Matthew Cole's Black Hat 2013 talk on the CIA's operational security failures in the 2003 Milan kidnapping. Phone and location metadata exposed the team and led to arrest warrants.

Matthew Cole's Black Hat 2013 talk on operational security failures by CIA operatives. It covers the Abu Omar case and how sloppy tradecraft with cell phones exposed officers through call records and metadata.

Zoz's DEF CON 22 talk on operational security in the age of pervasive surveillance. He shows how hard it is to avoid mistakes even for people who should know better.

Adrian Crenshaw's DEF CON 22 talk gives an overview of Tor and I2P, then goes through real cases where darknet users were caught. These include Silk Road and its operator.