Or, as Zoz explained in his DEFCON 22 talk "Don't Fuck It Up!"[1], OPSEC is really REALLY hard. Even people that have the necessary technical background are hum

Or, as Zoz explained in his DEFCON 22 talk "Don't Fuck It Up!"[1], OPSEC is really REALLY hard. Even people that have the necessary technical background are human and make mistakes. To stay secure in the "dark web" you need to never make a mistake and e.g. forget to turn on your VPN/Tor before logging in somewhere important. I doubt anybody - even people that made the "best" life decisions - could do this successfully without a LOT of very specific, very technical training. >> "OPSEC is a 24/7 job." >> "... a lot of OPSEC fails ... [from] the folly of only using privacy tools when you’re up to no good." >> "For example, investigators could look at who went and downloaded the Tor Browser Bundle right before the bomb threat got called in; or look at everyone who connected to a known Tor entry node at that time, or who accessed the Tor directory servers. [...] no compromise of Tor necessary." [1] https://www.youtube.com/watch?v=J1q4Ir2J8P8 https://www.youtube.com/watch?v=J1q4Ir2J8P8