Welcome to Cyber Pirata, your Austin-based cyber community hub. Here, we provide essential operational security (OpSec) tips to enhance your experience at our meetups.
Meetups are a great way to connect with like-minded individuals, but it's important to prioritize your privacy and security. Below are some practical OpSec guidelines to follow:
- Limit Personal Information: Avoid sharing sensitive personal details, such as your full name, address, or phone number.
- Use Pseudonyms: Consider using a pseudonym or handle when engaging with others in the community.
- Secure Your Devices: Ensure that your devices are updated and secured with strong passwords and encryption.
- Be Cautious with Photos: Think twice before sharing photos that may reveal your identity or location.
- Stay Aware of Surroundings: Be mindful of who is around you and what they may overhear during conversations.
By following these OpSec practices, you can enjoy a more secure and engaging experience at Cyber Pirata meetups. Join us in fostering a vibrant and safe cyber community!
Beyond the Basics: Network, Device and Social Hygiene at Meetups
The guidelines above cover the essentials. Security-minded gatherings also bring a few risks of their own. A room full of people who enjoy testing systems is a great place to learn. It is also a place where a careless setting on your laptop or phone can turn into a live demo. Here are some further habits worth building before you head to a session.
Treat the venue network as hostile
Shared Wi-Fi at bars, coworking spaces and community halls is convenient, but you cannot see who else is on it or what they are running. If you need to connect, use a reputable VPN or tether to your own phone. Turn off auto-join for open networks so your device does not quietly reconnect to a lookalike access point with a familiar name. Forget the network when you leave.
Reduce what your devices broadcast
- Bluetooth and AirDrop: Switch them off, or set file sharing to contacts only, so strangers cannot push files or see your device name.
- Device names: A laptop called "Jane-Smiths-MacBook" undoes the value of a pseudonym. Rename it to something neutral.
- Lock screens: Hide notification previews. A message from your bank or employer can reveal more than you expect.
- USB ports: Do not plug in found or freebie drives. Use your own charger rather than unknown charging cables or kiosks.
Separate your identities deliberately
A handle only protects you if it stays separate from your real identity. Use a dedicated email address and, where possible, a separate messaging account for community contacts. Check whether your handle is reused on accounts linked to your real name. Consider what your public code repositories, conference badges or photos of past events might reveal when pieced together.
Respect other people's OpSec too
Good security culture is mutual. Ask before photographing anyone, and keep faces and screens out of shots you share. Do not press people for their employer or real name. If someone mentions a vulnerability they are still disclosing responsibly, keep it to yourself. If you notice someone probing devices in the room without consent, raise it quietly with the organisers rather than confronting them in public.
You can find upcoming gatherings on the events page. To keep up with the threats worth discussing at your next session, follow the Cyber Pirata threat feed.
Also on this site: about us · Scarcely There Opticals to Bring out Your Inner Geek-Chic · Kate Upton Trains with the US Marines