++++++++++++++++++++++++++++++++++++++++++++++++++++
DISCLAIMER
The Paranoid's Bible and its writers hold no responsibility for the acts of others.
The Paranoid’s Bible is for research and entertainment purposes only.
Please visit our blog for more PDFs and information: http://www.paranoidsbible.tumblr.com/
++++++++++++++++++++++++++++++++++++++++++++++++++++
===Preface===
One of the most highly ignored points of privacy and security for anyone is the physical security and location of someone’s tech. It doesn’t matter if you air-gap your rig, have a safe for your tech, or simply remove the HD and ram due to the simple fact that if you aren’t actively working on securing your tech and adopting certain practices, you will trip up in the long run. This is why this supplementary guide was created – to help better explain some points within Windows 7 Special 1.
+++++++++++
===Old Tech is Best Tech===
Old tech (2009 or older) is preferred for anything deemed important where OPSEC, activism or projects (you don’t want out) are concerned. In general, older tech is needed when you don’t want a backdoor on your system at the hardware level. You’ll also want to do your research before purchasing anything off the internet, however remember that governments are known for hijacking deliveries and implementing their own malicious software or substituting the hardware for their own backdoored tech. This means basically that your best bet is to start scrounging around secondhand shops, rummage sales, estate sales, and the classifieds to find any old tech you can buy on the cheap (with cash). Buying old tech this way is also beneficial in the sense that you don’t have anything of yours (info wise) tied to its purchase, ergo another area of exposure covered.
This isn’t to say you can’t build yourself some tricked out and maxed out gaming rig, but you need to practice some restraint and look toward compartmentalization. The gaming rig should be used only for things like gaming, various forms of media and entertainment, and non-serious surfing. A second rig for your more serious items, like banking and purchasing items online while yet another rig is used for extremely serious matters that can be correlated to things like activism, research or whatever you don’t want people knowing about.
===Remember this:=== Don’t have two rigs on at the same time – if one rig is on, all others are to be turned off and not connected to any wires at all. This is to prevent potential time correlation or logins being tracked at the ISP level or if there are potential infections like keyloggers or anything similar. Your network, again, should always be hard wired and one rig connected at a time.
===Note:=== Stay away from INTEL and NVIDIA at all costs for non-entertainment based machines.
+++++++++++
===Compartmentalization and Computers===
As we stated above and in the guide that this one supplements: Compartmentalization is needed.
It’s quite a basic thing to grasp and commit to once you understand what you want VS what you need. If you’re going to be streaming, watching stuff online, do day-to-day browsing (non-serious login), participate on sites like Reddit or Tumblr, or things like gaming then a decoy/normie rig can be made with modern hardware and even modern software if you observe the needed tweaks, modifications and security protocols. However older hardware should be used for “disposable” or “burner” rigs that are created specifically for things like activism, surfing non-surface sites (E.G: Sites you can only access with software or VIA knowing the address), porn usage/viewing…etc
This isn’t to be confused for purpose-made rigs, like a rig dedicated for the creation of art (Completely offline, files transferred VIA USB or external HD after being sanitized) which would lessen potential cross contamination. Another example of purpose-made rigs would be a rig created specifically for taxes and online banking, usually done VIA a laptop with its wireless disabled and microphone(s) and camera(s) disabled too. This way it can’t connect to Wi-Fi networks or be used as a “remote viewer” on its user(s). Purpose-made rigs usually are use-as-needed items that are offline or (temporarily) disassembled (E.G: Removal of ram, battery and HD) until its next use. Simply think of paying bills online, however to avoid potential cross contamination or infection or even interference from modifications, the purpose-made rig for banking and bills is used only for that. No games, movies or any real modifications to the browser – just banking and bills.
Practice this VIA setting up rigs for specific tasks (Online shopping | Banking | Entertainment) and soon you have less to worry about as not everything is sitting on one rig. The decoy/normie rig for entertainment will be the one seen usually online the most often and would be targeted if you ever get raided, warranted or whatever else for whatever reason whereas your other rigs were hopefully safe offsite or hidden out of harm’s way.
Of course the biggest issue with purpose-made rigs is judging what is and isn’t needed. You don’t need a high-end graphics card or sound card, and rarely need anything over a dual-core for taxes, paying bills online and simple tasks when compared to a rig set for entertainment or constant surfing online (usually for research or streaming) but that doesn’t mean each rig has to be purpose-made from the ground up. If you have an old rig laying about or buy one that’s near complete, a few simple modifications to it will suffice.
===Note:== Don’t forget that security must also be taken into consideration for each rig, as should settings. Always be aware what you’re doing with each purpose rig, especially settings. Just because one setting is needed for one rig it might not be for another rig due to interference with tasks or performance.
+++++++++++
===Decoy Computing Explained===
We’ve used and explained the term a few times already but we feel the need to further expand upon what we mean when we say: Decoy Computer
A decoy computer/rig is quite simply a modern-tech built rig. It’s a computer made with modern tech and a modern operating system. It’s used mainly for entertainment purposes and general browsing practices. This is the rig your ISP, and any others who watch, will notice using your connection the most. Be it VIA the MAC address or some other form of ID, the decoy rig will be the main rig that’ll be sought after if you’d ever do anything to attract attention to yourself. The decoy rig is also the one that’s considered the most disposable as it’ll most likely be the most aesthetically pleasing to those who see it which means that if you have someone break into your house then that rig will most likely be targeted, thus leaving the other rigs hopefully alone.
You should, honestly, go “hog wild” and enjoy building the decoy rig. Make it how you want to do what you want, however since it’s modern hardware and software NEVER use it for anything but entertainment and nonsensical browsing or research. NEVER store anything of importance on this computer. DO follow proper OPSEC and INFOSEC when using it, and remember to use common sense. Secure the rig as much as possible which means, yes, do use encryption and other viable security options.
This rig is ultimately used for pleasure and is set up in such a way that it’ll be seen as the one worth money or of main use which should mean that it’ll be the one most sought after or taken in case of theft. The decoy rig is an important part of physical security as it helps distract people from searching further into your home. So, yeah, it should be in plain sight and insured to cover costs if stolen or taken.
+++++++++++
===Physical Security & You===
So we’re not boring you with more chapters we’ll be making a list that’ll help you figure out what you need to do or can do to secure your technology and rigs. This physical checklist should help even the most amateurish individual step up their game and ensure kerfuffles are kept to a bare minimum.
---Things to Remember---
• Don’t fall for the gate keeping and memes concerning towers.
You don’t need an expensive, supposedly high-end tower meant for gaming or with a see-through panel. You only need to worry about air flow, having enough space for your hardware, enough ports for fans, and be able to actually get your hands inside to work on it. If you want a high-end “gaming rig,” and plan to buy such a fancy tower be aware that those will be targeted more often than a “plain” tower.
===Remember this when purchasing any tech:=== Fancier it looks, or more aesthetically pleasing, or in trend the more likely it’ll be targeted by thieves, exes, or untrustworthy individuals.
• If it shines, it might as well be gold.
Again, one of those things that attracts unwanted attention is lighting. If you add excessive lighting (especially fans that “glow”) you attract attention. Even if you own a cheap and nearly disposable rig, the lights on fans or other pieces of hardware that glow/light-up will attract the attention of people. If someone were to break into your home, see your rig and look through the side and see lights they’ll most likely assume it’s worth more than what it truly is because of the aesthetics alone.
• If you find it tedious, then so do they.
Simple things like the purchase of a pillowcase, or protective sheet, used to cover your monitor and/or tower (when unplugged and cable(s) removed) as a “protective measure” from dust or dings while away or not in use will tend to annoy people to the point of ignoring said items. It also displaces your tech, in a sense, through a simple disguise. While not truly effective in preventing theft or as a true disguise, it’ll dissuade people from trying to use or poke around your tech simply due to the fact that removal and exact (re)placement of everything will take some work. People are lazy, exploit that.
---Basics---
• Configure Bios
- Enable your bios password to prevent unauthorized entry and to prevent changes to bios (This is your first password).
- Ensure the desktop boots from the hard drive only, never diskette, USB or CD-rom drive.
- Disable all cache options.
- Prevent and/or disable all express (gate) or instant online boot-up settings.
• Passwords & Encryption
- Encrypt your system (Usually your second pass).
- Enable your system pass (Your third pass).
- Enable your computer to automatically lock for you if not in use (E.G: Screen saver password option).
- Always lock your computer when not in use or leaving it for a few minutes.
- Always shut down your rig when not in use for extended periods of time.
- Do NOT use a password manager or any sort of password saving abilities. This will allow people to gain access to your system and/or accounts, especially if saved VIA a 3rd party service or on your rig. This is most due to risk of exploits or leaks.
• Check your rig
- Does it have built-in preventative features?
- Alarm or prevention to start if case is open?
- Slot to lock the case VIA a padlock to prevent it from being open?
- Can you at least modify it to secure it to another object?
• Cable locks
- Avoid using the adhesive and insert items that come with the lock. Actually cut a hole on the bottom of your rig or the top (if there isn’t a slot available for the explicit purpose of physically locking your rig) and thread the lock through it. Attach to an anchor, or even through an eyelet drilled and epoxied into your floor or wall. This will act as a deterrent and prevent most grab and runs besides acting as a way to frustrate people who try to seize your tech.
• Avoid wireless/Wi-Fi/smart gadgets
- If it can access the internet, or you can access it over Wi-Fi it'll be a potential hazard.
- Literally don't use any wireless network.
- Look into a centralized Wi-Fi and/or cellular blocker for your home.
- Or look for signal blocking alternatives such as a faraday bag or fabric (Place individual items in the bags or line a trunk or locker with the fabric and store items there).
• Remove peripherals when not in use.
- Think of this as lessening your chance of people trying to use your devices when you’re not there to monitor them.
-Placing something like the keyboard in a drawer under clothes or other items being one of the most basic moves.
-The same applies to any input device like a mouse, camera or microphone. If you can unplug and remove it from your tech, then do so.
• Prevent use of your keyboard
With enough practice, most people can use a QWERTY board without even looking. If you can get to this point in your usage, then look into buying stickers to cover the characters on your keyboard (some blank stickers exist for this but match to your colors). You can use a sharpie if it matches exactly the color of your keyboard or you can purchase keyboards with the keys already blank. If you’re an enterprising individual, buy “translator stickers” of non-Western characters for your keyboard. It’ll deter people and make them assume your computer isn’t in “English” however blank keys are preferred.
Note: If you want to make things harder, you can buy an ABC keyboard where the characters are “in order” of the alphabet. Learning to use this by muscle memory and using blank stickers can actually cause would be users to have such a fit of rage that they may just shove the keyboard through the wall or break it.
• Location, location, location...
- Position your desk, rig and monitor so others can't see them
- Ensure they aren't visible from windows (or install privacy film - https://www.amazon.com/Frosted-Privacy-Window-Film-Treatment/dp/B06X3XDQQ4/) and blackout curtains.
- If it’s in sight, it’s in mind. If you have your computer or tech directly in your room or out in the open in another room, and people can see it, then it’ll be in thought. If you own or rent your living space, then look into using a room that isn’t at the front of the house and/or where you sleep. Try putting it in the middle or near the back, to avoid it being snatched up in a smash and grab or by a desperate individual/relative/roommate. If it has to be in your room, then ensure its seen as “unusable” VIA the above basics and some minor modifications (when not in use) like removal of the power cable or important parts like the HD.
• Know your neighbors
- Are they potential allies or potential threats?
- Can you befriend them and ask them to help keep an eye on your place?
- Do they have surveillance on their property, like cameras?
- Can these also be used to check yours?
- Are they too curious or not interested enough in the area?
• Sanitize your work area
- Always tidy up and have a lockable container for anything and everything
- Always store these lockable containers in a larger lockable container, like a locker, chest or safe
- Get a lockable filing cabinet, disguise VIA a sheet or something similar to make it appear like a piece of furniture (E.G: Like an end table)
- Always file papers away, no matter how small (E.G: Even a post it note)
- CDs, DVDs, USBs, external HDs, internal HDs...etc all need a secure place to be stored.
- Be it a storage locker or case for HDs, or a small personal safe that can be stored under a bed.
- You'll need something to store everything (Remember: A place for everything and everything in its place).
---Stepping up your Game---
• If you can avoid using it, then do so.
If you don’t need it for business or school, or work, then avoid excessive frivolities like webcams and microphones. Even something as small as an RGB strip could lead to issues down the line, especially if it’s from some unverified source or a cheap knockoff being sold online. There are exploitations everywhere, especially when it comes to items that can be “plugged” into your tech.
===Remember:=== Not everyone needs a webcam, microphone or a high-end monitor with built-in speakers.
• Lack of plugs equates lack of interest.
Relying on ignorance and laziness of others, the removal of cables tends to put people off of investigating tech. This is doubly so for computers and monitors. If it doesn’t have the cables, it must be broken or not working. This is the line of thought for many, especially for those who seem like they know what they’re doing. This helps prevent energy waste, potential damage from brown/blackouts and really dissuades people from a randomly grabbing things when desperate or looking for something that’ll make a quick buck.
• Unplugging, removing and storing external memory devices when not in use.
It doesn’t matter if the device is encrypted or not. Given enough time, someone, somewhere will be able to decrypt it and dig into your information, or at the very least destroy it so you can’t access it. If you’re not actively using or don’t plan to use it while logged into your devices – REMOVE IT AND PUT IT AWAY! Get a storage case or a protective case, place the external device inside and hide it. Out of sight and potentially out of mind of most people.
• Purchase and anchor a trunk or cabinet/locker with a built in lock or install a lock onto it.
- Anchor to floor or wall
- Important items should be placed here.
- Lock it, if it doesn't have a lock install one
• Install locks on drawers
- Install rubber sheets on your desk and drawers to lessen static and dampen vibrations
- Now that your drawers are semi-safe, install locks on them and move smaller item into said drawer
• Purchase cases and locks
- Much easier to steal the HD than it is to take the entire thing
- It also pays to have a storage case + lockable case to store said storage case in
- Use both cases to secure and lock your HDs when not in use
- Pain to do but worth it in the long run
• Remember: HD cases are a long con.
If you’re ever away for an extended period of time, you may appreciate the use of protective shells or cases for your HDs. This is mostly due to the fact that, if you’re going to be gone for more than a day, then the removal and storage of your HDs will be in dividends in the long run VIA the decreased risk of losing the data stored on them. While not a day-to-day maneuver for most, it’s something worth remembering and doing if you’ll ever be gone for extended periods.
• Store and hide backups
- Pack up the backups, if they can't steal anything else these could be their next target.
• Disable drives while away
- Remove your drives
- or purchase a "drive lock" for your various drives.
- The simpler solution is to remove the power cable or SATA cable to prevent use.
- Some people use glue to kill their USB ports too.
- Or you can buy some cheap USBs and make a small, nearly unidentifiable colored mark on a part of it and "color code" your ports to know when they've been moved or used.
- Literally double check your ports and plugs before starting up your rig.
• Check the PB's home security guide
- Gives you ideas on how to better secure your abode - https://paranoidsbible.tumblr.com/post/156566985089/home-security-and-you
- Install locks on the room(s) you plan to have your computer(s) and tech in.
- When not in use, unplug everything and sure nothing electrical is running when your lock the room.
• Prevent Dumpster Diving
- Collect all scrap metal (Aluminum, tin, steel...etc) and wires to be taken in yourself (plus you gain a bit of cash).
- Dismantle first, separate second (scrap, recycle, throw away...etc), throw away and recycle last (this allows you to see the inner workings, which is pretty cool and gives you some knowledge) besides allowing to destroy what you can.
- Deface (color, paint...etc), shred, then burn or mix in with the trash (especially animal waste) any and all paper items or similar items (receipts, old documents…etc).
- Take your bins into your garage or yard (if possible) to prevent digging.
- Separate to your trash and recycling to be on the safe side (enough fines or tickets, authorities might dig/investigate).
- Peel off the paper/wrappers from cans and bottles (to prevent identifying what you eat or drink) and wash out any containers you can too (helps prevent potential mishaps to those who work at the recycling plants and also prevents their machines from choking on loose debris). This is to further prevent people from digging or guesstimating your habits.
- Invest in a composter. The less trash and items you throw out, the less chance of people digging or being interested. This is also a good way to lessen waste in dumps.
---Time for Escalation ---
• Mobile proximity alarms
- While not usually used by civilians, it's a good method to spook would be thieves. Depending on the alarm, some will set off a physical alarm while others alert you VIA email or text. You want to opt-in for the ones that have a physical alarm that is both separate and built-in (or whichever is best for your needs). This way, once it's removed from a specific area it'll alert not only you but others nearby.
• Set up surveillance
- Install both false and legitimate cameras to confuse would be thieves.
- Look for "spy cameras" or "micros" that are small enough to hide around the area where your computer(s) and tech are installed.
• Look into storing your printers
- many of today's printers store document contents in their own on-board memory.
- If your printer is stolen and used in a crime, it could be tied to you until you’re proven innocent.
• Know where your lines are
- Where are your cable and phones lines?
- How are they connected to your abode?
- Is there an outside hook up or is it inside?
- Can you check easily for taps or bugs put by a 3rd party (ABCs have better toys, this is more aimed at snoops)?
- Can you access these easily to prevent the need for a repairman (fixing breaks at or inside the house level)?
+++++++++++
===Air Gapping Further Explained===
As we stated previously, the civilian version of air-gapping isn't as involved or complicated however it can be depending on your needs and wants. This is why it's such an important step in any anti-forensic setup, and even if you aren't into anti-forensics it's still good to take up simply to ensure your systems stay safe. The biggest thing that we'll be discussing in this chapter is the various things that you can do to bolster your air-gap setups besides what was covered in the other guide(s). First things first however, we have to state that this guide won't cover Faraday cages. That will be its own guide later on.
So, just to refresh your memory and to summarize air-gapping: It's a security measure where one isolates a computer and/or a network to prevent it from connecting to the internet or form any sort of external connection. Simply put, a segregated system incapable of connection to anything be it wirelessly, wired or through any other means. It's a system that can only be accessed by an entity in person. You have to be physically in the same room to operate the machine.
Depending on the severity of the security plan, some systems require a certain amount of space between it and any internet capable devices. Other plans require no hardware or tech that can receive or send signals within the same building whereas there are those that use faraday cages and "grounded rooms" to prevent anything entering or leaving the room without full knowledge by security.
Such extremes are due to Van Eck phreaking, light transmissions, and similar exploits. The biggest threat, though, is the end-user. If the end-user isn't privacy or security conscious then any measures might as well be null and void.
We know it seems like a mess, however using what you've learned from this guide and various other guides you'll be able to prevent a lot of potential trouble and harm to you, yourself, your tech and those around you. Many leaks don't make it to the public due to people not learning proper anti-forensic and physical computer security methods and knowledge. An air-gapped rig is useful, even if it's just to store backups or to create various graphical works like art or posters to lessen potential contamination and meta-data.
Simply put: An air-gapped machine is similar to a viewing station at a library. You can review sensitive files, however unlike a viewer you can modify, edit, save, backup and generally whatever you want to files on this neutered machine. It's also a good point to make that certain individuals use air-gapped machines to ensure their own code and projects don't get stolen or spied on.
Now onto the list.
> Encryption
- If it can be encrypted, encrypt it
> Prevent internet access
- Literally the most basic concept for an air-gapped rig
- No internet, ever.
- To scan files before transferring between rigs, create a "clean rig"
- A "clean rig" is a rig specifically meant to be updated and connected only to the internet when you update security software
- Using the "clean rig," you can scan files before transferring them to an air-gapped rig
- This is to prevent a stuxnet-like scenario besides prevent connections to the air-gapped rig
- Remember: Software and hardware have backdoors and exploits, always ensure the rig(s) for air-gapping never touched the internet
- Look up Cottonmouth-I to see what the NSA has been doing
> Use a desktop where possible
- Desktops are easier to configure on a hardware level
- They're also easier to modify to your needs
- If you must use a laptop or netbook, physically remove all wireless hardware
> Keep it off if not in use
- Don't turn it on if you're not using it
- Always remember to shut it off
- Never have an air-gapped rig near anything that can connect to the internet
- If you're going to be away from the rig for a few minutes, remember to lock it
> If you're using a rig meant to be offline or as a file backup
- Use glue to destroy built-in Ethernet
- Remove or disable the network interface card (NIC)
- Some people who're more handy have actually modified their mom boards to permanently prevent internet access
> Turn off all audio
- Remove sound cards
- Disable microphones and speakers
- Look into Michael Hanspach and Michael Goetz, two people who found it possible to transmit data VIA sound sent through microphones and/or speakers.
> Less peripherals, more security
- Less is more when it comes to air gapping
- Keep air gap rigs purpose built
- Lookup Yuval Elovici and Moti Guri and their research and what they did with light alone.
- Moral of the story: Keep air gapped machines out of sight ensuring it can't be seen by literal outside parties.
> No cards, please.
- Unless the air gapped machine is purpose built, keep cards out
- No graphics
- No USB (save for built in ports)
- No Sound
- No Ethernet
- No cards. Period.
> Keep all wireless objects away from air gapped machines
- No Wi-Fi
- No Cell phones/smart phones (remove batteries when not in use)
- No radios
- Everything that can broadcast or receive should be kept away
- Again, look up the research by Mordechai Gur and Yuval Elovici.
> Invest in background noise
- Laser microphones can and have been used to listen in on people
- This means that if someone was so invested to do so, they could try listening in on your keyboard's clicks
- Either modify your keyboard or purchase a clickless board
- Invest in heavy blackout curtains
- Also invest in a white noise machine (or crank up some loud music or a fan or air purifier)
- It's also a good idea to use a dry erase board or chalk board (kept out of sight) to communicate with people near your air-gapped machine
- Look into purchasing one of these even - https://www.amazon.com/Shomer-Tec-SHLSD-Laser-Surveillance-Defeater/dp/B00ABV7J0C/
> Tint your windows
- As stated previously above, buy security/privacy film for your windows
- Invest in blackout curtains
> Research your monitors
- Look into using privacy film for your monitor(s)
- To prevent Van Eck phreaking avoid tube/CTR monitors
- Invest in a newer monitor but after you ensure it's only a monitor
- Avoid anything with wireless, blue tooth or any other sort of connectivity outside of a hardwire connection
- Look into privacy screens/films (measure carefully and find the one best suited for you) - https://www.amazon.com/Akamai-Office-Products-Diagonally-Measured/dp/B071F8XS2P/
> Monitor who comes and goes
- Just like any business or enterprise, you too are at risk from a disgruntled individual
- If you don’t monitor the access to your air-gapped tech, anyone can make an entire backup of it
- If they don’t need access to it, then don’t allow them access to it
> Remember the 3… 2… 1… backup strategy
> 3 backups
> 2 on different media
> 1 stored offsite
> Always encrypt these backups
+++++++++++
===Ghetto Camouflage===
While not the most politically correct term, it is however one of the more well known names for the tactic at hand – Compromising the aesthetic appeal of an item in order to camouflage its worth and value so that it isn’t targeted or seen as a profitable grab. This is usually done through the marring of an item’s outward appearance VIA superficial means, like aftermarket “rust” stickers or through the chipping or breaking of non-essential corners. Some simply remove decals and labeling to make the item look for generic however regardless of what you can or should do, we will take it up a step and explain several ways to accomplish the above tactic.
• Hide in plain sight
Purchase old dell or gateway towers (think of those old beige ones) to place your hardware into. Not only unsightly but also usually looked over and almost instinctually known to be “worthless”. With some slight modifications, you can easily fit modern hardware into these towers and they’re cheap enough to be used as disposable towers that you can sticker bomb or modify to your heart’s content.
• Sticker Bombing
Take a disposable tower or one you don’t care about and cover it head-to-toe in vinyl stickers. Cheap, effective and if you happen to get a few “Waifu” or “Anime tits” stickers from a grab bag bought online, it’ll only further steer people away from going after your tech. The more “weebish” or out there the better, however any bag of vinyl stickers will work. Check Amazon for cheap quantities to buy without breaking your wallet.
• Alternative towers
Some enterprising people will convert items like hat boxes or an old TV set into a tower for their hardware. Most people won’t suspect a boot or literal toaster, however because of the uptick in these mod-towers there are now videos and websites dedicated to creating them and sharing tips/tricks on how to accomplish certain tasks. So, while a decent measure it may be a temporary one as the trend continues.
• Blemishing
Previously mentioned above, the act of blemishing usually revolves around the act of degrading the aesthetic appearance of an object VIA superficial means, like cracks, chips, rounding corners, adding scratches or simply removing decals and some details. The entire point is to make something that ultimately works like it is brand new yet looks like it’s old and abused.
+++++++++++
===Afterword===
While the just the basics, there is so much else one could do to physically lock down their rig and miscellaneous tech, however it becomes greatly complicated the further you research what you can do. This is why we stuck to the basics with a mixture of corporate and government tactics. The biggest advantage is basic INFOSEC and OPSEC to ensure you don’t say or do the wrong thing in front of parties not in the know.
