7 ms·

Been working on security for NGOs and activist groups all over the world and in every part of the space for a long time. I think your figure is on the high side

Been working on security for NGOs and activist groups all over the world and in every part of the space for a long time. I think your figure is on the high side and overly alarmist. Perhaps with Pirateparty-style groups it is higher than most but not across the whole sector. It's certainly not the case that two-thirds of all groups and activists have been compromised. People forgot that human intelligence operations are actually pretty cost intensive and fairly difficult to pull off well. Some parts of the community make the problem worse once a genuine compromise is found by then creating biases and accusations where none can be confirmed. It really depends on many factors - location, group activities, training, personal, the threats they pose to the actors with the will/desire etc to target them, also how you define compromised (a cleaner keeping tabs? a phishing email opened? a disgruntled volunteer? a paid staff member who walks out the door with data? a leader who has been turned?)

donkeyd 10y ago
>I think your figure is on the high side and overly alarmist. This is actually my gripe with the Dutch pirate party. They are often very alarmist and exaggerate problems in the same way the parties they oppose do. I wish there was a party that's focuses on major issues in stead of exaggerating a small number of issues in order to get popular with a specific market.
- coretx 10y ago
  You are right when it comes to the alarmism and exaggeration, it's a populist policy choice, detrimental to the roots of the party and something I totally disagree with.
- tripzilch 10y ago
  Very much agreed. If the Dutch PP was anything like the German, Swedish, Icelandic (to name a few) ones, I'd vote for them in a heartbeat, no second thoughts. But they just keep on making blunder after (sometimes well-intentioned, sometimes plain stupid) blunder, and it's just sad and disorganised. I admit I might still vote for them anyway if I can't find a party that better represents me. Fortunately we get quite a few to choose from! Dutch might want to take a moment and be thankful we have that :)
coretx 10y ago
Compromised does not have to be destructive intent. It can be nothing but passive intelligence gathering for example. Furthermore, compromised entities are rarely compromised by just one entity. For example national intelligence agencies are obligated to monitor new and rising political or activistic activities in order to asses if they are threat or not.This raises the % of compromised entities a lot. And then there is private intelligence & interest groups; same story. Yet in general, I do agree with your conclusions. Often the fear of being compromised is more dangerous than actually being compromised.
- secfirstmd 10y ago
  This is true and many NGOs pursue security strategies of "acceptance" or openness in order to deal with this issue. Essentially going along to the policy-maker and telling them what they are doing, which sometimes works to reduce the information gathering operations against them by cutting out the middle layer (intel organisations).

donkeyd 10y ago

>I think your figure is on the high side and overly alarmist. This is actually my gripe with the Dutch pirate party. They are often very alarmist and exaggerate problems in the same way the parties they oppose do. I wish there was a party that's focuses on major issues in stead of exaggerating a small number of issues in order to get popular with a specific market.

coretx 10y ago
You are right when it comes to the alarmism and exaggeration, it's a populist policy choice, detrimental to the roots of the party and something I totally disagree with.
tripzilch 10y ago
Very much agreed. If the Dutch PP was anything like the German, Swedish, Icelandic (to name a few) ones, I'd vote for them in a heartbeat, no second thoughts. But they just keep on making blunder after (sometimes well-intentioned, sometimes plain stupid) blunder, and it's just sad and disorganised. I admit I might still vote for them anyway if I can't find a party that better represents me. Fortunately we get quite a few to choose from! Dutch might want to take a moment and be thankful we have that :)

coretx 10y ago

Compromised does not have to be destructive intent. It can be nothing but passive intelligence gathering for example. Furthermore, compromised entities are rarely compromised by just one entity. For example national intelligence agencies are obligated to monitor new and rising political or activistic activities in order to asses if they are threat or not.This raises the % of compromised entities a lot. And then there is private intelligence & interest groups; same story. Yet in general, I do agree with your conclusions. Often the fear of being compromised is more dangerous than actually being compromised.

secfirstmd 10y ago
This is true and many NGOs pursue security strategies of "acceptance" or openness in order to deal with this issue. Essentially going along to the policy-maker and telling them what they are doing, which sometimes works to reduce the information gathering operations against them by cutting out the middle layer (intel organisations).