The OPSEC Podcast

AI assistants have been positioned as productivity tools. Structurally, they are the most sophisticated data collection interfaces ever built — ones that convince users to voluntarily disclose their most sensitive information in the form of natural language conversation. This episode covers what ChatGPT, Gemini, and Copilot actually do with your data, the corporate exposure epidemic (77% of employ...

SovereignOS is a fork of GrapheneOS — Spicy Corp took the gold standard of open-source mobile security and gave it what they call "the Shelby treatment." Like Carroll Shelby re-engineering the Mustang into the GT350, they stripped attack surfaces at the kernel level, replaced stock Google branding, and added operational capabilities GrapheneOS was never designed to include. This episode covers wha...

Deliberately create separate digital identities or “personas” for different parts of your online life so that your personal information, behavior, and interactions don’t all link back to a single profile. This reduces linkage between activities (shopping, social, work, banking, etc.), limits how much data ad networks and trackers can build about you, and helps contain exposure if one profile is co...

Strengthen your home network so that your router and connected devices are resilient against attacks, unauthorised access, and privacy invasions. This includes upgrading to more secure firmware, encrypting local and internet traffic, and creating network-level protections that block unwanted connections while allowing only legitimate ones. A hardened home network reduces the risk of compromise for...

Systematically reduce your publicly visible personal information by identifying where your data appears online (search engines, data brokers, people-search sites) and using services to request removal or opt-out, so third parties and automated systems can’t easily collect, sell, or expose your PII. This step helps protect against spam, identity theft, unsolicited marketing, and malicious activity...

Harden your Devices: strengthen the security and privacy of your phones, tablets, laptops, and desktop computers by reducing their attack surface, protecting stored data, and blocking common threats. This includes encrypting data at rest, securing network traffic, tightening web browsing, and using malware protection. Hardened devices are much safer if lost, stolen, or actively targeted. Steps to...

Throughout the latest episode, we have discussed operational security in professional settings. Today, we are bringing Gabriel Fanelli, director of training at Grey Dynamics and a former United States SIGINT operator with a Bronze Star commendation, to talk about something more than hardening your devices and obfuscating your networks:  Family Security First of all, you are not your kids' bes...

Audit your social-media exposure, review all your public or private social-media accounts and online profiles; check what personal information (photos, posts, bio data, connections) is visible; then remove, reduce, or restrict exposure of anything risky or unnecessary. Steps to audit your social media exposure: 1. Make a full list of every social-media profile or public/social online account you’v...

AI assistants have been positioned as productivity tools. Structurally, they are the most sophisticated data collection interfaces ever built — ones that convince users to voluntarily disclose their most sensitive information in the form of natural language conversation. This episode covers what ChatGPT, Gemini, and Copilot actually do with your data, the corporate exposure epidemic (77% of employ...

Implement multi-factor authentication (MFA) on every account, using the strongest method available with a graduated approach: 1. Audit all important accounts (email, banking, cloud storage, social media, password manager) to check whether MFA is supported. 2. For each account, go to the security or login settings and enable MFA. Choose the strongest method the service supports. 3. If using an auth...

Your money is one of the most targeted assets you own, and one of the easiest to compromise if left unattended. Modern financial attacks start with reused passwords, exposed debit cards, unsecured networks, and excessive data leakage. In this episode of The OPSEC Podcast, we apply the full Covert Protocol framework — Control, Obfuscate, Verify, Encrypt, Reduce, Track — to financial security. From...

Allen Pace presents the Covert Protocol, a structured methodology that will combine through different episodes the OPSEC Podcast principles with the CIA Triad practices. By using these two frameworks in tandem, this process aims to equip everyday users (like you) with both the strategic mindset and the practical tools needed to increase security, reduce vulnerabilities, and enhance personal privac...

For the past decade, people have underestimated the most powerful surveillance system ever built, not by intelligence agencies, but by corporations. Every movement you make, every store you walk into, every website you open, every conversation near your phone, it’s all collected, correlated, sold, and fed back into behavioural models more invasive than anything that Langley or the Kremlin could ev...

For more than a decade, intelligence agencies, data brokers, and criminal syndicates have quietly relied on the same vulnerability: your wireless signals. Your phone, your credit cards, your passport, your key fobs — they all broadcast data constantly, whether you realise it or not. And every signal can be intercepted, cloned, profiled, or used against you. In this episode of The OPSEC Podcast , w...

From an operational-security perspective, financial metadata is one of the most actionable intelligence vectors available to adversaries and fraudsters alike. In this episode of The OPSEC Podcast , host Alan Pace — speaking from field experience — delivers a concise intelligence-grade briefing on masked payment cards (e.g., Privacy.com) and how to incorporate them into a practical OPSEC posture fo...

For 50 years, 130 governments trusted Crypto AG to protect their most secret communications. Every single message was being read by the CIA and German intelligence. Operation Rubicon was the longest-running espionage operation in history. The CIA secretly bought a Swiss encryption company in 1970, installed backdoors in every device, and sold “secure” communications to governments worldwide. Nobod...

Courts can’t agree if geofence warrants are constitutional – but law enforcement is using them anyway. Your phone is volunteering you for mass surveillance operations right now. In 2024, one court declared geofence warrants “categorically unconstitutional” mass surveillance. Another court said they’re perfectly legal. When the law can’t agree on what’s legal, you need to take matters into your own...

Russian soldiers are dying because stolen Ukrainian iPhones are broadcasting their every move. Your phone is doing the same thing to you right now. In the Russia-Ukraine conflict, troops are being hunted down through cell phone signatures. One Ukrainian soldier used Apple’s “Find My Device” to track Russian forces who stole his iPhone and earbuds. They thought they got free electronics – instead,...

Every time you use your real name online, you’re volunteering to be tracked, profiled, and monetized. You never agreed to this system, but you’re trapped in it anyway. Companies have created fake rules that 99% of people would reject on a fundamental level: surrender all your personal data or you can’t use our services. But here’s the truth – unless there’s a legal requirement, they don’t need you...

In 2024, Americans lost $12.5 billion to financial fraud – a staggering 25% increase from the previous year. Your bank account structure is making you a target. Most people make the same fatal mistake: they use one checking account for everything. Income flows in, bills flow out, debit cards get compromised, and criminals drain everything while you sleep. In this deep-dive episode of The OPSEC Pod...

In 2018, a fitness app accidentally exposed secret CIA black sites, military bases, and soldier patrol routes to enemy forces worldwide. Strava’s “harmless” heat map revealed 3 trillion GPS data points, lighting up covert locations in Afghanistan, Syria, and Africa like Christmas trees. Soldiers had unknowingly painted targets on their own backs, just by logging their daily runs. In this episode o...

Meet Alex – a regular guy who lost everything because of one social media post and zero OPSEC. While Alex slept peacefully, a hacker drained his bank accounts, stole his identity, and destroyed his digital life. His crime? Posting a photo of his new iPhone at the Verizon store. In this inaugural episode of The OPSEC Podcast, you’ll discover: The exact 20-minute process hackers use to destroy lives...