Guest Blogger: Jacob Sipe

In my years of service with the military, I had the unique opportunity to dive into computer forensics and digital privacy. As a computer forensics analyst and Computer Crime Investigator, I developed my skills in understanding and dissecting digital devices and uncovering the multitude of ways they collect and transmit data on individuals. My mission was clear: to protect the autonomy and freedom of movement of those operating in highly contested and surveilled environments.

Understanding the Threat

I have always been fascinated by the intersection of technology and security. Through years of conducting computer investigations and media exploitation, I realized that digital devices, while immensely beneficial, posed significant risks to privacy and autonomy. Smartphones, tablets, and even seemingly innocuous IoT devices quickly become tools for surveillance, capable of tracking movements, capturing conversations, and collecting vast amounts of personal data.

My role involved conducting thorough forensic analyses of these devices. I examined their data storage, communication protocols, and embedded software to identify vulnerabilities and potential breaches. This process requires patience, precision, and an unwavering commitment to uncovering the truth. Over the past 15+ years, I have used almost every primary forensic tool on the market, including Parabens tools. I have found that all offer some capability that makes them slightly more beneficial than the others.

Each analysis begins with a comprehensive assessment of the device’s apps and what they store to understand the types of information it holds and how it is organized. I then delved into the communication protocols, scrutinizing how the device transmitted data and interacted with other systems. Lastly, I meticulously dissected the data exfil timelines and volume, looking for hidden vulnerabilities or malicious code. Some of the most interesting finds are the data that apps store and figuring out why they store it and does it get sent outside of the device. These discoveries have led to apps being banned by corporate policy or approved because they do not pose a risk.

Unmasking Surveillance Tactics

One of the most challenging aspects of my work was uncovering sophisticated collection or surveillance tactics. Most of the time, the data collected and transmitted is relatively benign. These tactics are designed to go unnoticed, seamlessly blending into the regular operation of the devices. I spent countless hours analyzing network traffic and scrutinizing metadata to reveal the hidden layers of surveillance and data recording.

However, benign data still carries a significant risk in aggregate. A single line of ad tech data can contain a unique identifier, location, timestamp, and device information. That dot on a map is not that important. However, when thousands of them come together, a picture of a person’s habits and movements can clearly be seen. Corporations and criminals can use this to develop patterns of life, interests, and connections that allow them to market or target an individual.

Learning from Investigations

Through numerous investigations and cases, I gained a detailed understanding of the risks these devices pose. Each case I worked on allowed me to piece together fragments of a person’s life, revealing how easily digital devices could track and collect data on our everyday activities. This process provided invaluable insights into the capabilities of these devices and the extent to which they can compromise our privacy. These cases allowed me to build cases that protect civilians from more significant harm, and the data was invaluable. However, my thoughts turned to what criminals could do with this information.

I discovered that the data collected by these devices is not only extensive but also sold by the companies that collect it. This posed a significant risk to organizations and individuals, as sensitive information could be exposed, leading to severe consequences. My work as a digital privacy professional allowed me to use my investigative background to dive into the data collected by these devices and provide risk assessments to organizations seeking to minimize the risk of outside influence and tracking.

Protecting Freedom of Movement

Moving freely and without hindrance is paramount for individuals and organizations. Adversaries often exploit digital devices to track and monitor movements, compromising their safety and security. My work aimed to mitigate these risks by developing strategies to identify risk and secure digital devices and communications.

I collaborated with software developers to create tools to anonymize data, encrypt communications, and detect unauthorized access attempts. These tools were designed to be user-friendly, ensuring that even those with limited technical expertise could protect their devices maintain their autonomy, and minimize the data they create and get transmitted off the device.

A Commitment to Digital Privacy

Beyond the battlefield, my commitment to digital privacy extends to everyday individuals and organizations. I understood that the same tactics in my investigations and build criminal cases could be applied to civilian life, identifying the risks to personal privacy and autonomy through how apps collect, store, and transmit data. My goal is to raise awareness about these risks and empower people to take control of their digital lives.

I conducted training sessions, developed educational materials, and shared my findings with the broader community. I hoped to inspire a culture of vigilance and proactive privacy protection by shedding light on how digital devices collect and transmit data.

I have learned a few very key things that ultimately protect a person’s privacy.

• Minimize your data generation. This can be achieved by removing old and unused apps from your device, turning off transmitters such as Bluetooth and Wi-Fi when they are not in use, and disabling unneeded services such as ad-tech. These steps are crucial to protecting your privacy, as they reduce the number of ways your personal information can be accessed or transmitted. Additionally, regularly reviewing and updating your privacy settings on various apps and platforms can further enhance your data security.
• Remove location from the equation. By disabling location services on your device, it becomes significantly more challenging to determine your exact whereabouts. Knowing a person’s precise location is crucial in building a pattern of life, which can be exploited by malicious individuals. The more difficult it is for a criminal to track your movements and predict your routines, the safer you will likely be. Making it harder for them to access your location information is a key step in protecting your privacy and security.
• Encrypt and secure your device. It is crucial to ensure that your device is fully encrypted to protect your sensitive information from unauthorized access. Additionally, use a Virtual Private Network (VPN) that includes ad-blocking and malware protection features. This will help safeguard your device from external influences, prevent tracking by malicious entities, and ensure a more secure and private browsing experience.

Finally, place your device in a protective container or Faraday bag. There are several good options on the market, such as Paraben’s patented technology. You can’t disable everything; iPhones are a great example. These devices, even in airplane mode, have multiple sensors that collect and store data. Using a protective container such as a Faraday Bag helps minimize what else it can detect.

Conclusion

Reflecting on my time in the military, I am proud of my work to safeguard digital privacy and autonomy. The challenges were immense, but the impact was profound. Every device analyzed, vulnerability uncovered, and countermeasure developed contributed to a safer, more secure digital landscape.

My role as a Computer Crimes Investigator allowed me to delve deeply into the intricacies of digital forensics, and I gained a wealth of knowledge about the threats and vulnerabilities inherent in modern technologies.

Throughout my career, I collaborated with dedicated professionals and innovative developers to create tools and strategies that enhanced digital security. We worked tirelessly to identify and mitigate risks, ensuring people could maintain their autonomy and freedom of movement. This work was not limited to the battlefield; it extended to everyday life, helping civilians understand and protect their digital privacy.

As the founder of SparkForge.pro, I have conducted training sessions, developed educational materials, and shared my findings with the broader community. By raising awareness and empowering people to take control of their digital lives, I aim to inspire a culture of vigilance and proactive privacy protection.

As technology continues to evolve, the importance of understanding and protecting against digital surveillance remains paramount. My journey in military computer forensics has equipped me with the knowledge and skills to navigate this complex terrain, and I remain dedicated to preserving autonomy in a digital world.