#RooneyvVardy, counter-intelligence, and password management

Here’s a little story, all about how, counter-intel and bad password management turned Twitter upside down. This time, the story features Colleen Rooney and Rebekah Vardy, wives of two footballers in the UK. What would normally be a celeb fight is now a good object lesson in counter-intel and password management. Here’s how:

What happened

First, Colleen Rooney suspected someone of leaking her private posts The Sun, a tabloid. This has been going on for months. She posted on Twitter in January 2019 that it was a problem. One of her followers replied:

This is counter-intel, as stated by none other than The Grugq, giver of amazing presentations on OPSEC, operational security.

As you can see from the tweet by The Grugq, Rooney narrowed her followers down to one suspect. She fed that suspect false info. It rooted her out. What was Vardy’s defense?

https://twitter.com/RebekahVardy/status/1181871914081509376?s=20

I’m going to put the image here, just to keep a record of it.

What should you be doing instead?

Overlooking the personal drama here, there’s a real problem.

“Over the years, many people have had access to my insta”

— Rebekah Vardy

People: I beg of you, please do not give out your passwords. Do not share passwords. I see this a lot among young teenagers and pre-teens. Your password is for you only. If you have an account with multiple people controlling it, that is no longer your account.

If you’re running an account with a PR manager, that account no longer posts personal things, and it no longer gets used by the celeb to follow other celeb’s private accounts. Keep the public and the private separate.

Vardy wrote, “If you thought this was a problem, you could have told me & I could have changed my passwords to see if it stopped,”

Vardy is wrong. Don’t wait for someone else to ask you to change your password. Change your password. Guard your password. Don’t lose control of it. Passwords suck, they’re insecure, especially without 2factor authentication, but for all that is holy, at least do the bare minimum to secure the stuff you actively use.

Even if you aren’t in the public eye, you can do better than this, but if you are going to land on the covers of newspapers, you owe it to yourself to practice better security than this.

Leave a Reply

Your email address will not be published. Required fields are marked *