Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459

bigbrother.py

@@ -49,7 +49,7 @@ from utils.resource import (
 )
 
 console = Console()
-logger = logging.getLogger("sensor.cli")
+logger = logging.getLogger(__name__)
 
 # PID file for daemon mode
 PID_FILE = "/tmp/.bb.pid"

config/bigbrother.yaml

@@ -45,7 +45,7 @@ connectivity:
   reverse_ssh:
     relay_host: ""
     relay_port: 22
-    relay_user: "bb"
+    relay_user: "operator"
     key_file: "storage/config/ssh_relay.key"
 
 security:
@@ -90,7 +90,7 @@ bettercap:
   binary: "/usr/local/bin/bettercap"
   api_address: "127.0.0.1"        # Localhost only -- never network-visible
   api_port: 8083
-  api_user: "bb"
+  api_user: "admin"
   # api_password generated per-session, stored in memory only
   default_caplet: "passive_recon"
   caplets_path: "config/caplets"

core/bus.py

@@ -13,7 +13,7 @@ import multiprocessing
 from dataclasses import dataclass, field, asdict
 from typing import Callable, Optional
 
-logger = logging.getLogger("sensor.bus")
+logger = logging.getLogger(__name__)
 
 # Canonical event types
 EVENT_TYPES = frozenset([

core/capture_bus.py

@@ -16,7 +16,7 @@ import threading
 import multiprocessing
 from typing import Optional, Callable
 
-logger = logging.getLogger("sensor.capture_bus")
+logger = logging.getLogger(__name__)
 
 # ETH_P_ALL for capturing all protocols
 ETH_P_ALL = 0x0003

core/engine.py

@@ -26,7 +26,7 @@ from core.state import StateManager
 from modules.base import BaseModule
 from utils.networking import detect_interface_with_retry
 
-logger = logging.getLogger("sensor.engine")
+logger = logging.getLogger(__name__)
 
 # Hardware tier definitions — module limits and resource ceilings
 HARDWARE_TIERS = {

core/kill_switch.py

@@ -28,7 +28,7 @@ from typing import Optional
 
 from core.bus import EventBus
 
-logger = logging.getLogger("sensor.kill_switch")
+logger = logging.getLogger(__name__)
 
 # Boot flag — if this file exists on boot, resume wipe
 WIPE_FLAG = "/var/run/.bb_wipe"

core/resource_monitor.py

@@ -17,7 +17,7 @@ from typing import Optional
 from core.bus import EventBus
 from core.state import StateManager
 
-logger = logging.getLogger("sensor.resource_monitor")
+logger = logging.getLogger(__name__)
 
 # Thermal thresholds (Celsius)
 THERMAL_WARNING = 55

core/scheduler.py

@@ -14,7 +14,7 @@ from dataclasses import dataclass, field
 from typing import Callable, Optional
 from concurrent.futures import ThreadPoolExecutor
 
-logger = logging.getLogger("sensor.scheduler")
+logger = logging.getLogger(__name__)
 
 
 @dataclass

core/state.py

@@ -16,7 +16,7 @@ import logging
 from typing import Any, Optional
 from pathlib import Path
 
-logger = logging.getLogger("sensor.state")
+logger = logging.getLogger(__name__)
 
 _DEFAULT_DB = os.path.join(
     os.path.expanduser("~"), ".implant", "state.db"

core/tool_manager.py

@@ -24,7 +24,7 @@ from typing import Callable, Optional
 
 from core.bus import EventBus
 
-logger = logging.getLogger("sensor.tool_manager")
+logger = logging.getLogger(__name__)
 
 
 @dataclass

modules/active/arp_spoof.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.arp_spoof")
+logger = logging.getLogger(__name__)
 
 
 class ARPSpoof(BaseModule):

modules/active/bettercap_mgr.py

@@ -22,7 +22,7 @@ from modules.base import BaseModule
 from utils.bettercap_api import BettercapAPI
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.bettercap_mgr")
+logger = logging.getLogger(__name__)
 
 
 class BettercapManager(BaseModule):

modules/active/dhcp_spoof.py

@@ -13,7 +13,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.dhcp_spoof")
+logger = logging.getLogger(__name__)
 
 
 class DHCPSpoof(BaseModule):

modules/active/dns_poison.py

@@ -14,7 +14,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.dns_poison")
+logger = logging.getLogger(__name__)
 
 
 class DNSPoison(BaseModule):

modules/active/evil_twin.py

@@ -25,7 +25,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.evil_twin")
+logger = logging.getLogger(__name__)
 
 # Default dnsmasq config for captive portal
 DNSMASQ_CONF_TEMPLATE = """interface={iface}

modules/active/ipv6_slaac.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.ipv6_slaac")
+logger = logging.getLogger(__name__)
 
 
 class IPv6SLAAC(BaseModule):

modules/active/mitmproxy_mgr.py

@@ -22,7 +22,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.mitmproxy_mgr")
+logger = logging.getLogger(__name__)
 
 # Hardware tier check — mitmproxy is too heavy for RPi Zero 2W
 SUPPORTED_TIERS = {"opi_zero3", "rpi4", "full"}

modules/active/ntlm_relay.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.ntlm_relay")
+logger = logging.getLogger(__name__)
 
 # Supported relay protocols
 RELAY_PROTOCOLS = frozenset(["smb", "ldap", "ldaps", "http", "https", "mssql", "adcs"])

modules/active/responder_mgr.py

@@ -22,7 +22,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.responder_mgr")
+logger = logging.getLogger(__name__)
 
 # Regex for Responder hash log filenames
 HASH_FILE_PATTERN = re.compile(

modules/connectivity/ble_emergency.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.ble_emergency")
+logger = logging.getLogger(__name__)
 
 # Custom BLE service/characteristic UUIDs (random, non-standard)
 SERVICE_UUID = "bb000001-1337-4000-8000-000000000001"

modules/connectivity/bridge.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.bridge")
+logger = logging.getLogger(__name__)
 
 BRIDGE_NAME = "br0"
 WATCHDOG_INTERVAL = 5.0  # seconds between health checks

modules/connectivity/cellular_backup.py

@@ -22,7 +22,7 @@ except ImportError:
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.cellular_backup")
+logger = logging.getLogger(__name__)
 
 # Default serial device for modem AT commands
 DEFAULT_MODEM_DEVICE = "/dev/ttyUSB2"

modules/connectivity/data_exfil.py

@@ -31,7 +31,7 @@ from modules.base import BaseModule
 from core.bus import Event
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.connectivity.data_exfil")
+logger = logging.getLogger(__name__)
 
 
 class ExfilPriority(IntEnum):

modules/connectivity/tailscale.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.tailscale")
+logger = logging.getLogger(__name__)
 
 TAILSCALE_BIN = "/usr/bin/tailscale"
 TAILSCALED_BIN = "/usr/sbin/tailscaled"

modules/connectivity/wifi_client.py

@@ -15,7 +15,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.wifi_client")
+logger = logging.getLogger(__name__)
 
 WPA_SUPPLICANT_BIN = "/sbin/wpa_supplicant"
 WPA_CLI_BIN = "/sbin/wpa_cli"

modules/connectivity/wireguard.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.wireguard")
+logger = logging.getLogger(__name__)
 
 WG_INTERFACE = "wg0"
 HEALTH_CHECK_TIMEOUT = 5  # seconds

modules/intel/change_detector.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.change_detector")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS changes (

modules/intel/credential_db.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.credential_db")
+logger = logging.getLogger(__name__)
 
 _TABLE_DDL = """
 CREATE TABLE IF NOT EXISTS credentials (

modules/intel/net_intel.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.net_intel")
+logger = logging.getLogger(__name__)
 
 # Known malicious infrastructure patterns
 _KNOWN_BAD_PORTS = {

modules/intel/operator_audit.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.operator_audit")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS audit_log (

modules/intel/security_posture.py

@@ -18,7 +18,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.security_posture")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS security_tools (

modules/intel/supply_chain_detect.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.supply_chain_detect")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS supply_chain (

modules/intel/tool_output_parser.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.tool_output_parser")
+logger = logging.getLogger(__name__)
 
 # -----------------------------------------------------------------------
 # Responder log patterns
@@ -372,8 +372,8 @@ class ToolOutputParser(BaseModule):
 
         api_host = self.config.get("bettercap", {}).get("host", "127.0.0.1")
         api_port = self.config.get("bettercap", {}).get("port", 8083)
-        api_user = self.config.get("bettercap", {}).get("user", "bb")
-        api_pass = self.config.get("bettercap", {}).get("password", "bb")
+        api_user = self.config.get("bettercap", {}).get("api_user", "admin")
+        api_pass = self.config.get("bettercap", {}).get("api_password", "")
 
         base_url = f"http://{api_host}:{api_port}"
         last_event_id = 0

modules/intel/topology_mapper.py

@@ -18,7 +18,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.topology_mapper")
+logger = logging.getLogger(__name__)
 
 # OS family -> Graphviz fill color
 _OS_COLORS = {

modules/intel/user_timeline.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.user_timeline")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS user_events (

modules/passive/auth_flow_tracker.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.auth_flow_tracker")
+logger = logging.getLogger(__name__)
 
 # Protocol ports
 KERBEROS_PORT = 88

modules/passive/cloud_token_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.cloud_token_harvester")
+logger = logging.getLogger(__name__)
 
 # Token regexes — compiled once
 _TOKEN_PATTERNS = {

modules/passive/credential_sniffer.py

@@ -28,7 +28,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.credential_sniffer")
+logger = logging.getLogger(__name__)
 
 # Hashcat mode mapping
 HASHCAT_MODES = {

modules/passive/db_interceptor.py

@@ -24,7 +24,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.db_interceptor")
+logger = logging.getLogger(__name__)
 
 # TDS packet types
 TDS_SQL_BATCH = 0x01

modules/passive/dns_logger.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.dns_logger")
+logger = logging.getLogger(__name__)
 
 # Well-known DoH resolver IPs
 DOH_RESOLVERS = frozenset([

modules/passive/host_discovery.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.host_discovery")
+logger = logging.getLogger(__name__)
 
 
 class HostDiscovery(BaseModule):

modules/passive/kerberos_harvester.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.kerberos_harvester")
+logger = logging.getLogger(__name__)
 
 # Kerberos message types (application tags)
 KRB_AS_REQ = 10

modules/passive/ldap_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.ldap_harvester")
+logger = logging.getLogger(__name__)
 
 # LDAP protocol tags
 TAG_SEQUENCE = 0x30

modules/passive/network_mapper.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.network_mapper")
+logger = logging.getLogger(__name__)
 
 TCP_PROTO = 6
 UDP_PROTO = 17

modules/passive/os_fingerprint.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.os_fingerprint")
+logger = logging.getLogger(__name__)
 
 # p0f-style TCP signature database (built-in fallback)
 # Format: (ttl_range, window_size, df, mss_range, sack, timestamps) -> (os_family, os_version)

modules/passive/packet_capture.py

@@ -25,7 +25,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.networking import detect_interface_with_retry
 
-logger = logging.getLogger("sensor.passive.packet_capture")
+logger = logging.getLogger(__name__)
 
 
 class PacketCapture(BaseModule):

modules/passive/quic_analyzer.py

@@ -21,7 +21,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.quic_analyzer")
+logger = logging.getLogger(__name__)
 
 # QUIC constants
 QUIC_LONG_HEADER_BIT = 0x80

modules/passive/rdp_monitor.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.rdp_monitor")
+logger = logging.getLogger(__name__)
 
 # NTLM signature for CredSSP extraction
 NTLMSSP_SIGNATURE = b'NTLMSSP\x00'

modules/passive/smb_monitor.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.smb_monitor")
+logger = logging.getLogger(__name__)
 
 # SMB2 command IDs
 SMB2_NEGOTIATE = 0x0000

modules/passive/tls_sni_extractor.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.tls_sni_extractor")
+logger = logging.getLogger(__name__)
 
 # TLS record types
 TLS_HANDSHAKE = 22

modules/passive/traffic_analyzer.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.traffic_analyzer")
+logger = logging.getLogger(__name__)
 
 # Protocol number to name mapping
 PROTO_NAMES = {

modules/passive/vlan_discovery.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.vlan_discovery")
+logger = logging.getLogger(__name__)
 
 # Ethertypes and protocol IDs
 ETHERTYPE_8021Q = 0x8100

modules/stealth/anti_forensics.py

@@ -19,7 +19,7 @@ from utils.stealth import (
     _get_os_install_time,
 )
 
-logger = logging.getLogger("sensor.stealth.anti_forensics")
+logger = logging.getLogger(__name__)
 
 # SystemMonitor install root (default; overridden by config)
 BB_ROOT = "/opt/.cache/bb"

modules/stealth/encrypted_storage.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.crypto import LUKSContainer, derive_network_key
 
-logger = logging.getLogger("sensor.stealth.encrypted_storage")
+logger = logging.getLogger(__name__)
 
 # Subdirectories created inside the mounted LUKS container
 STORAGE_SUBDIRS = ("pcaps", "logs", "baseline", "intel", "credentials", "config")

modules/stealth/ids_tester.py

@@ -12,7 +12,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.ids_tester")
+logger = logging.getLogger(__name__)
 
 # Detection risk levels
 RISK_LOW = "LOW"

modules/stealth/ja3_spoofer.py

@@ -15,7 +15,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.ja3_spoofer")
+logger = logging.getLogger(__name__)
 
 # Built-in JA3 fingerprint profiles (fallback if data/ja3_fingerprints.db absent)
 # Format: {name: {ja3_hash, cipher_suites, extensions, description}}

modules/stealth/lkm_rootkit.py

@@ -12,7 +12,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.lkm_rootkit")
+logger = logging.getLogger(__name__)
 
 LKM_TEMPLATE_DIR = "templates/lkm"
 LKM_SOURCE = "bb_hide.c"

modules/stealth/log_suppression.py

@@ -15,7 +15,7 @@ from typing import Dict, List
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.log_suppression")
+logger = logging.getLogger(__name__)
 
 RSYSLOG_CONF = "/etc/rsyslog.d/01-bb-suppress.conf"
 JOURNALD_CONF_DIR = "/etc/systemd/journald.conf.d"

modules/stealth/mac_manager.py

@@ -26,7 +26,7 @@ from utils.networking import (
 )
 from utils.stealth import set_sysctl, set_tcp_timestamps, set_tcp_window, set_ttl
 
-logger = logging.getLogger("sensor.stealth.mac_manager")
+logger = logging.getLogger(__name__)
 
 # Category preferences per network type
 _BUSINESS_CATEGORIES = ("printers", "network", "smart_home")

modules/stealth/overlayfs_manager.py

@@ -13,7 +13,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.overlayfs_manager")
+logger = logging.getLogger(__name__)
 
 # Default overlay paths
 OVERLAY_BASE = "/opt/.cache/bb/overlay"

modules/stealth/process_disguise.py

@@ -16,7 +16,7 @@ from typing import Dict, Optional
 from modules.base import BaseModule
 from utils.stealth import rename_process, spoof_cmdline
 
-logger = logging.getLogger("sensor.stealth.process_disguise")
+logger = logging.getLogger(__name__)
 
 
 class ProcessDisguise(BaseModule):

modules/stealth/tmpfs_manager.py

@@ -16,7 +16,7 @@ from typing import Dict, List, Optional, Tuple
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.tmpfs_manager")
+logger = logging.getLogger(__name__)
 
 # Default tmpfs size limits per tier (MB)
 _TIER_TMPFS_LIMITS = {

modules/stealth/traffic_mimicry.py

@@ -14,7 +14,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.traffic_mimicry")
+logger = logging.getLogger(__name__)
 
 PHASE_BASELINE = "baseline"
 PHASE_SHAPING = "shaping"

modules/stealth/watchdog.py

@@ -17,7 +17,7 @@ from modules.base import BaseModule
 from core.bus import Event
 from utils.resource import get_process_resources
 
-logger = logging.getLogger("sensor.stealth.watchdog")
+logger = logging.getLogger(__name__)
 
 # OOM priority assignments by module type
 _OOM_PRIORITIES = {

scripts/run_watchdog.py

@@ -19,7 +19,7 @@ logging.basicConfig(
     level=logging.WARNING,
     format="%(asctime)s %(levelname)s %(name)s: %(message)s",
 )
-logger = logging.getLogger("sensor.watchdog")
+logger = logging.getLogger(__name__)
 
 CHECK_INTERVAL = 15.0
 THERMAL_WARN = 60

tests/test_opsec_violations.py

@@ -0,0 +1,80 @@
+#!/usr/bin/env python3
+"""Test that OPSEC violations are fixed.
+
+Tests for:
+1. sensor.* logger namespaces (should be __name__)
+2. Hardcoded "bb" API user (should be generic)
+3. Hardcoded "bb" relay_user (should be generic)
+"""
+
+import os
+import re
+import subprocess
+from pathlib import Path
+
+
+def test_no_sensor_logger_fingerprints():
+    """Verify that no logging.getLogger(__name__) calls exist."""
+    bb_root = Path(__file__).parent.parent
+
+    # Search for sensor.* logger calls in Python files
+    result = subprocess.run(
+        ["grep", "-r", r'getLogger("sensor\.', str(bb_root), "--include=*.py"],
+        capture_output=True,
+        text=True,
+    )
+
+    # Should find no matches (empty stdout)
+    assert result.stdout == "", (
+        f"Found sensor.* logger fingerprints:\n{result.stdout}"
+    )
+
+
+def test_no_bb_api_user_hardcoded():
+    """Verify that 'bb' is not hardcoded as bettercap API user."""
+    bb_root = Path(__file__).parent.parent
+
+    # Check config file
+    config_file = bb_root / "config" / "bigbrother.yaml"
+    with open(config_file) as f:
+        config_content = f.read()
+
+    # Look for api_user: "bb" (should be something else)
+    match = re.search(r'api_user:\s*"([^"]+)"', config_content)
+    assert match and match.group(1) != "bb", (
+        f"Found hardcoded api_user as 'bb' in config. Should be generic."
+    )
+
+    # Check Python files for hardcoded "bb" as default user parameter
+    result = subprocess.run(
+        ["grep", "-r", 'user:\s*str\s*=\s*"bb"', str(bb_root), "--include=*.py"],
+        capture_output=True,
+        text=True,
+    )
+
+    assert result.stdout == "", (
+        f"Found hardcoded 'bb' as default user in code:\n{result.stdout}"
+    )
+
+
+def test_no_bb_relay_user_hardcoded():
+    """Verify that 'bb' is not hardcoded as relay_user."""
+    bb_root = Path(__file__).parent.parent
+
+    # Check config file
+    config_file = bb_root / "config" / "bigbrother.yaml"
+    with open(config_file) as f:
+        config_content = f.read()
+
+    # Look for relay_user: "bb" (should be something else)
+    match = re.search(r'relay_user:\s*"([^"]+)"', config_content)
+    assert match and match.group(1) != "bb", (
+        f"Found hardcoded relay_user as 'bb' in config. Should be generic."
+    )
+
+
+if __name__ == "__main__":
+    test_no_sensor_logger_fingerprints()
+    test_no_bb_api_user_hardcoded()
+    test_no_bb_relay_user_hardcoded()
+    print("All OPSEC tests passed!")

utils/bettercap_api.py

@@ -15,7 +15,7 @@ class BettercapAPI:
         self,
         host: str = "127.0.0.1",
         port: int = 8083,
-        user: str = "bb",
+        user: str = "admin",
         password: Optional[str] = None,
         timeout: int = 10,
     ):

utils/credential_encryption.py

@@ -6,7 +6,7 @@ import json
 import logging
 from typing import Optional
 
-logger = logging.getLogger("sensor.credential_encryption")
+logger = logging.getLogger(__name__)
 
 # Cache the key in memory during module lifetime
 _cached_key: Optional[bytes] = None

utils/networking.py

@@ -13,7 +13,7 @@ import logging
 from pathlib import Path
 from typing import List, Optional, Tuple
 
-logger = logging.getLogger("sensor.utils.networking")
+logger = logging.getLogger(__name__)
 
 SIOCGIFADDR = 0x8915
 SIOCGIFHWADDR = 0x8927