SquirrelOps, a security system I build, plants an account that belongs to no one. It has a name that looks like a system administrator's, a password that works, and a place in the directory right next to the real staff. No employee logs into it. No script queries it. It sits there doing nothing, and doing nothing is its whole job. The day someone reaches for it, there is no suspicion to weigh and no score to interpret. There is a fact, delivered in person by the intruder.

That account is a decoy, and it does not work alone. It is one lie in a fabric of them, and every lie in the fabric is a sensor.

You cannot out-sift the river.

The usual way security fights noise is to sort harder. Real traffic is a flood, the dangerous thing is rare, so the industry builds ever smarter filters to fish the few bad events out of the many good ones. The trouble is arithmetic. Even an excellent filter, run against a river of ordinary activity, returns enough false alarms that a tired human stops reading them. Alert fatigue is not laziness. It is what volume does to a person.

SquirrelOps does not build a better net. It changes the water. Everything it plants is fake on purpose, useless to any honest person, so the only hands that can trip it are the ones you want to catch. The question stops being “is this malicious,” a matter of probability, and becomes “was the bait taken,” a question with a yes and a no. The module that seeds the fake employees contains no thresholds and no confidence scores anywhere in its code. There is nothing left to score.

A lie for every stage of the attack.

Watch what an intruder meets inside a network wearing this fabric. The first move is almost always the directory: look up who exists, find the service accounts, hunt for a privileged name nobody watches. Some of the employees in there were never hired. The next move is credentials, and some of the passwords sitting in reachable places are bait. The moment one is used, anywhere, the system knows, down to the address it came from. There are servers to explore: an SSH box, an admin console, databases that answer queries, accept logins, and are made entirely of theater. They open into a fake environment that keeps going deeper, and parts of it are tarpits, built to burn hours on nothing. Stolen documents call home the first time they are opened, so a theft names itself, and names what was taken. And anyone who probes the company's AI finds an internal endpoint that seems delighted to be jailbroken. It plays along. It “leaks.” Every secret it hands over is a tracking token that lights up the moment someone tries to spend it.

None of this would work if the traps looked like traps. A silent server with no users is an obvious fake, so a ghost crew keeps the decoys lived-in: logging in, running queries, doing chores on schedule. The system manufactures its own noise, stamps every fabricated event with a fingerprint, and subtracts it. What remains is the intruder.

The trap studies whoever it catches.

A trip is not the end of the encounter. It is the beginning of an interview. While the intruder works the fake environment, the system takes notes: typing speed, command vocabulary, tool signatures, working hours, credential reuse. It matches each session against every adversary it has seen before, so a repeat visitor gets recognized, and it grades skill. The grade changes the game. An amateur gets a shallow rabbit hole. A professional gets a deep one, longer tarpits, more poisoned data, because a professional's wasted hour costs the other side more.

The economics of the whole thing run backward, and that is the point. The old arrangement asked defenders to be right every time while an attacker only needed to be right once. Inside the fabric the burden flips. The attacker must move through a network full of lies and never touch a single one. The defender needs one trip.

The phone worth trusting.

A phone that buzzes all day teaches you to stop feeling it. A phone that almost never buzzes, and means it when it does, is worth a hundred of the other kind. That phone is not earned in the dashboard, tuning alarms while the flood is at the door. It is earned upstream, in the design, in a fabric of lies each waiting for the one hand that would ever reach for them. SquirrelOps lives at squirrelops.io, and the home version is free. Give your network a few good lies.