+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: Is Perfect OPSEC Even Possible? (/showthread.php?tid=6330836)
Pages: Pages
1
2
RE: Is Perfect OPSEC Even Possible? - Omniscient - Aug 28, 2026
No, I don't believe in perfect OpSec.
Anyone can get got. The resources of LE are practically endless. You can however, probably get away with a lot of stuff without being noticed. The trick, is not being noticed. If for example you go and steal $20m in crypto, you're going to be a target the rest of your life.
RE: Is Perfect OPSEC Even Possible? - Shapeless - Aug 28, 2026
(Aug 28, 2026 10:28 AM)Omniscient Wrote: No, I don't believe in perfect OpSec.
Anyone can get got. The resources of LE are practically endless. You can however, probably get away with a lot of stuff without being noticed. The trick, is not being noticed. If for example you go and steal $20m in crypto, you're going to be a target the rest of your life.
This is not entirely true, only in majority of the world. If i would hypothetically steal 20 million $ and be in North Korea, Iran or Russia, I think you can make a deal and never be targeted as long as you avoid some juristictions, kind of like being a russian oligarch or a Iranian son to power, it just shows how vulnerable you are in some situations where country can save you from the long reach of FBI for example.
I definetely also believe in the old, bury a device into a wall and use 3g simcards prepaid what not and hide behind layers and never use this device for anything than one task. that keeps you safe, the old guides on HF thought me well :)
Id like peopple to look into how silkroad got busted and see how you can still mess up, but science beats even feds or so snowdens book showed.
RE: Is Perfect OPSEC Even Possible? - kommer2016 - Aug 29, 2026
(Aug 27, 2026 08:33 AM)Binance Wrote: Lol.
Google was certainly tracking every movement, every cell reception ping latency, telemetry logs in 1968+. You are making a shrewd comparison to the life of 1970s to 2020s. They didn't have massive databases of DNA to cross reference nor modern science. by all means, use the Zodiac killer as a comparison to modern digital cybercriminals...
If you're going to make a comparison, make it post 2010 to now. If lockbit and all of the others can be unmasked, SectopRAT(Yellow) can be unmasked, Zeus... Yes. The police will come for you as a digital criminal.
Data is more valuable than blood in this ecosystem.
You’re kinda right. What you’re missing is that back in the ’60s, you didn’t have to be a pro to be the Zodiac Killer. These days, you’d need to be seriously tech-savvy and spend years learning-to dodge mass surveillance.
RE: Is Perfect OPSEC Even Possible? - SeishiAku09 - Aug 31, 2026
(Aug 27, 2026 08:33 AM)Binance Wrote: Lol.
Google was certainly tracking every movement, every cell reception ping latency, telemetry logs in 1968+. You are making a shrewd comparison to the life of 1970s to 2020s. They didn't have massive databases of DNA to cross reference nor modern science. by all means, use the Zodiac killer as a comparison to modern digital cybercriminals...
If you're going to make a comparison, make it post 2010 to now. If lockbit and all of the others can be unmasked, SectopRAT(Yellow) can be unmasked, Zeus... Yes. The police will come for you as a digital criminal.
Data is more valuable than blood in this ecosystem.
The only thing that always connects those groups is the downfall of all the people in this side of things, greed and hunger for fame.
literally a lot of agencies in the "intelligence" area at some point, put all of their hopes in the fact that you as a human will make a mistake and so they can catch you.
Most people that get into this never spend the appropiate amount of time thinking what to do with the money once they have it and specially, what type of routine they will have when they hit the jackpot. Is kinda like they forgot about all of their talent to hack into things to become stupid college students with a lot of money.
(Aug 29, 2026 12:50 AM)kommer2016 Wrote: You’re kinda right. What you’re missing is that back in the ’60s, you didn’t have to be a pro to be the Zodiac Killer. These days, you’d need to be seriously tech-savvy and spend years learning-to dodge mass surveillance.
and on top of that, i wouldn't remomend you to become a cyber criminal if you still haven't make peace with the idea of being popular or noticed by people.
if you can't just get the money and enjoy it quietly, without the need of "flexing" on other people, you should probably keep your 9 - 5 job and call it a day.
RE: Is Perfect OPSEC Even Possible? - overdoses - Sep 1, 2026
(Aug 28, 2026 11:09 AM)Shapeless Wrote: This is not entirely true, only in majority of the world. If i would hypothetically steal 20 million $ and be in North Korea, Iran or Russia, I think you can make a deal and never be targeted as long as you avoid some juristictions, kind of like being a russian oligarch or a Iranian son to power, it just shows how vulnerable you are in some situations where country can save you from the long reach of FBI for example.
I definetely also believe in the old, bury a device into a wall and use 3g simcards prepaid what not and hide behind layers and never use this device for anything than one task. that keeps you safe, the old guides on HF thought me well :)
Id like peopple to look into how silkroad got busted and see how you can still mess up, but science beats even feds or so snowdens book showed.
Interesting, what "old guides" are you talking about?
RE: Is Perfect OPSEC Even Possible? - denekzah - Sep 3, 2026
I think near perfect security is possible, but nothing is 100% secure. Even a PC that isn’t connected to the internet can be hacked.
RE: Is Perfect OPSEC Even Possible? - Roberto Scorpius Malfoy - Sep 3, 2026
If they want you they get you, its all about how much they want to get you.
Lets say you do some shit on the internet and they decided nah its not worth to put that effort to get him, then they wont get you. However if they really want to get you boom they get you no matter how much time u put on your opsec.
Remember one thing the internet is not constructed for you to be anonymous its the opposite.
RE: Is Perfect OPSEC Even Possible? - kane2026 - Sep 4, 2026
(Aug 28, 2026 11:09 AM)Shapeless Wrote: This is not entirely true, only in majority of the world. If i would hypothetically steal 20 million $ and be in North Korea, Iran or Russia, I think you can make a deal and never be targeted as long as you avoid some juristictions, kind of like being a russian oligarch or a Iranian son to power, it just shows how vulnerable you are in some situations where country can save you from the long reach of FBI for example.
I definetely also believe in the old, bury a device into a wall and use 3g simcards prepaid what not and hide behind layers and never use this device for anything than one task. that keeps you safe, the old guides on HF thought me well :)
Id like peopple to look into how silkroad got busted and see how you can still mess up, but science beats even feds or so snowdens book showed.
I think you are making the argument for NO, if you were to steal 'hypothetically' $20 million and you hide in such countries then it is not your money. You have become an extension of their pockets, to be used when convenient. Plenty of hackers hide out in China and Russia but Western authorities know damm well who they are, eager to pounce if they set a foot outside those jurisdictions.
On principle perfect OPSEC is NOT possible, but some risks can be expertly mitigated. If you run a dark web market you will be under constant siege from police, competitors and customers. One stray email account or username on a website from 15 years back will cost you. If on the other hand you have one-off job lined up (the hypothetical $20 million) then you can prepare your OPSEC to the last detail, but you better not forget anything.
Misdirection might also be a necessity, if a hack is misattributed then you can put some proper distance between it and yourself.