<unnamed>

Public Key

npub1y7rvzdq5s5m65v2zygkvesdkln6gvdjrefu2jcjajx4fwjxsu3uqyhd0r3

Profile Code

nprofile1qqsz0pkpxs2g2da2x9pzytxvcxm0eayxxepu579fvfwer25hfrgwg7qpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qz9nhwden5te0wfjkccte9ec8y6tdv9kzumn9wsq3uamnwvaz7tmjv4kxz7fwv9e8g6t09e5kue3ww4hxjcn99e3ksqf6waehxw309anx2etywvhxummnw3exzunrdp5hvetn9e3k7mf0dehhgetn9a68yetwv35kuee0wfjhqmmnw3ej7ar0v3shjqgjwaehxw309ac82unsd3jhqct89ejhxqg0waehxw309ahx7um5wghx6mmdyd3xq0

Publishing to

relay.ditto.pub

relay.primal.net

relay.artio.inf.unibe.ch

feeds.nostrarchives.com/notes/trending/reposts/today

purplepag.es

nostr.mom

Last Notes

2026-10-27 19:11:36 UTC

https://youtu.be/OqzMrhcMcUM
https://media.sambent.dev/video/833e3e22571bca15.mp4

2026-10-27 13:05:44 UTC

https://youtu.be/kDMfDN7iuQY
https://media.sambent.dev/video/2a1df2ae6966ad6e.mp4

2026-10-27 09:30:10 UTC

#OPSEC365 220/365
Every USB device has a unique serial number that identifies it.
When you plug a USB drive into a computer, the operating system logs the device's vendor ID, product ID, and serial number. That drive can be traced across every computer it's touched. Forensic analysis of machines reveals what USB devices have connected to them.
USB serial numbers are logged in Windows registry entries that persist after the device is removed.
#OPSEC365

2026-10-26 19:09:13 UTC

https://youtu.be/uMDHPK-xyAA
https://media.sambent.dev/video/82783fa8c30b8889.mp4

2026-10-26 13:41:22 UTC

The darkest twitter (pitch) disables new accounts due to spam.
Quality over quantity.
https://media.sambent.dev/img/f2c5e8e4fabaafd0.jpg

2026-10-26 09:53:24 UTC

#OPSEC365 219/365
Vulnerability analysis in OPSEC doctrine ranks vulnerabilities on two axes: operational importance and susceptibility to collection. The highest-priority items are both important AND easy for your adversary to collect.
Low-importance data that's hard to collect isn't worth protecting. High-importance data that's trivially exposed is your immediate priority.
A list of vulnerabilities without ranking gives you no place to start. #OPSEC365

2026-10-25 19:28:26 UTC

https://youtu.be/V5ad6y5sixU
https://media.sambent.dev/video/51e53a589d6f49ce.mp4

2026-10-25 13:27:52 UTC

https://sambent.dev/sam/HiddenForge/releases/tag/v2.1.0
https://media.sambent.dev/img/2adc58eb315bd5b5.jpg

2026-10-25 09:05:23 UTC

#OPSEC365 218/365
Shared links to cloud files often don't require authentication.
That Google Drive link you shared to collaborate on a document might be accessible to anyone with the URL. Some cloud storage defaults to link access that doesn't check who's clicking. URLs can be guessed, leaked, or discovered through browser history.
Check the sharing settings on cloud files before sending links and restrict access to specific accounts.
#OPSEC365

2026-10-24 19:42:44 UTC

https://youtu.be/XDsLDhKG8Cs
https://media.sambent.dev/video/03bca5ccdf85fbed.mp4

2026-10-24 13:37:47 UTC

https://youtu.be/oFioqVeNGGg
https://media.sambent.dev/video/7d01a6528cc10ce0.mp4

2026-10-24 09:23:18 UTC

#OPSEC365 217/365
Customer support is a backdoor for social engineers.
Attackers call support lines pretending to be you, using info gathered from social media and data breaches to pass security questions. They request password resets, account changes, or info that helps compromise your accounts.
Add extra security to accounts that allow it and expect that attackers will target support channels.
#OPSEC365

2026-10-23 19:43:16 UTC

https://youtu.be/-HGCGivMSUs
https://media.sambent.dev/video/db00cba63ca9ac6f.mp4

2026-10-23 13:17:35 UTC

https://youtu.be/4Gry4U6L7l8
https://media.sambent.dev/video/9ea158fc40d28d17.mp4

2026-10-23 09:32:07 UTC

#OPSEC365 216/365
Temporary email services aren't as anonymous as they seem.
10minutemail, Guerrilla Mail, and similar services let you create throwaway addresses, but the services themselves log IP addresses and usage. Anyone with access to the service's logs can correlate your temporary address with your real identity through connection data.
For truly anonymous email, temporary services require additional layers of protection like Tor.
#OPSEC365

2026-10-22 19:46:30 UTC

https://youtu.be/onYWQJsWFpk
https://media.sambent.dev/video/a27e8907b93e622d.mp4

2026-10-22 13:15:06 UTC

https://youtu.be/Ml99dXffRXk
https://media.sambent.dev/video/653c60b20307cac3.mp4

2026-10-22 09:15:41 UTC

#OPSEC365 215/365
Counter-surveillance starts with awareness of who might be watching.
Professional surveillance involves multiple people, vehicle switches, and careful tradecraft. But most surveillance you'll encounter is amateur. A car that appears too often, someone who shows up at multiple places you go, or patterns that feel off deserve attention.
Practice being aware of your surroundings without being paranoid.
#OPSEC365

2026-10-21 19:10:02 UTC

https://youtu.be/3wlNemFwbwE
https://media.sambent.dev/video/bcd8984b0e34d82b.mp4

2026-10-21 13:39:15 UTC

https://youtu.be/pfGRAJgUFIM
https://media.sambent.dev/video/7583a5e7e699e28a.mp4

2026-10-21 09:41:57 UTC

#OPSEC365 214/365
Granting contact access doesn't expose your data. It exposes everyone else's.
Your address book is a social graph belonging to people who never consented. WhatsApp, LinkedIn, and TikTok have all used contact uploads to build graphs of non-users.
Cronk's aggregation problem: the app now knows your network position without you ever posting publicly.
A photo editor, game, or flashlight has no need for your contacts. Audit and revoke. #OPSEC365

2026-10-20 19:23:45 UTC

Tor Project "We dislike mullvad donated to someone we dislike."
Also Tor: "We accept funding from the feds, and give DC talks about how cool it is that they talk to us."

2026-10-20 13:42:40 UTC

https://youtu.be/MUYjiETdVWQ
https://media.sambent.dev/video/b89c9b6578fa548c.mp4

2026-10-20 09:12:00 UTC

#OPSEC365 213/365
Your notification center is a summary of your digital life visible on your lock screen.
Banking alerts, message previews, calendar reminders, and app notifications all appear where anyone glancing at your phone can see them. The locked screen shows a feed of your recent activity.
Review your notification settings and limit what shows when your phone is locked.
#OPSEC365

2026-10-19 19:53:23 UTC

https://youtu.be/WN5uOMTGzPc
https://media.sambent.dev/video/59ec9925812f8177.mp4

2026-10-19 13:10:38 UTC

https://youtu.be/ooNmubCA680
https://media.sambent.dev/video/066a2e5c3c79c1c9.mp4

2026-10-19 09:27:34 UTC

#OPSEC365 212/365
Gait recognition is being marketed as a way to identify you by how you walk.
Your stride length, pace, arm swing, and posture create a signature that does not change when you cover your face. Watrix, a Chinese vendor, has publicly claimed 50-meter identification at 94% accuracy with the face fully covered. That figure comes from the company itself and has not been independently validated in peer-reviewed research.
#OPSEC365

2026-10-18 19:56:15 UTC

https://youtu.be/j0VdLBIjNRQ
https://media.sambent.dev/video/f354c8b516a09772.mp4

2026-10-18 13:55:32 UTC

Regulation was written by the people it's supposed to regulate, and it's been that way since the beginning.
https://media.sambent.dev/img/de97a08f098e18e0.jpg

2026-10-18 09:00:17 UTC

#OPSEC365 211/365
Shared computers retain browsing history across users.
Family computers, library terminals, and shared workstations keep history unless actively cleared. Private browsing helps during the session but doesn't erase what you did before remembering to use it. The next person at that computer can see what you browsed.
Always use private browsing on shared computers and clear history if you forget.
#OPSEC365

2026-10-16 19:08:56 UTC

https://youtu.be/ekp_KuC255A
https://media.sambent.dev/video/0da2fec66de3f0aa.mp4

2026-10-16 13:32:33 UTC

Things happen, we learn and adapt.
The most important lesson in life is to not make the same mistake twice.
Hope all the best for Dread, and Paris.
If the site ever shuts down, I will publish my archived backup.
https://media.sambent.dev/img/8c08e8fbaeeb7074.jpg

2026-10-16 09:51:26 UTC

#OPSEC365 209/365
Location stickers on social media stories reveal where you are in real time.
Instagram and Snapchat location tags show your current location to everyone viewing your story. Unlike posts, stories broadcast where you are right now, not where you were last week. Check-ins announce your presence to anyone following you.
Anyone watching can screenshot the tag before the story expires.
#OPSEC365

2026-10-15 19:04:35 UTC

https://youtu.be/2yw_fwoKXBM
https://media.sambent.dev/video/478fdd7ce18dfccc.mp4

2026-10-15 13:19:10 UTC

https://youtu.be/9csp-sQrKnU
https://media.sambent.dev/video/c91cb8b4a7eb8553.mp4

2026-10-15 09:56:11 UTC

#OPSEC365 208/365
Remote work monitoring software may be tracking more than you realize.
Hubstaff, Time Doctor, ActivTrak, and similar tools capture screenshots, track keystrokes, monitor application usage, and sometimes record through webcams. Working from home with company monitoring means your employer can see everything on your work device.
Ask your employer what monitoring software runs on company devices and what it captures.
#OPSEC365

2026-10-14 19:48:51 UTC

Every red flag in a toxic relationship is standard operating procedure for the federal government.
https://media.sambent.dev/img/2ab3e2821d9a8d7f.jpg

2026-10-14 13:27:51 UTC

https://youtu.be/moH5DkuAFiQ
https://media.sambent.dev/video/877388268eeb1d94.mp4

2026-10-14 09:27:22 UTC

#OPSEC365 207/365
Lockheed Martin's Cyber Kill Chain breaks an adversary's progression into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives.
Most people only think about the final stages. By the time you notice, the adversary has been in reconnaissance for weeks.
Map your environment at the reconnaissance stage, not after the exploit lands. #OPSEC365

2026-10-13 19:28:00 UTC

https://youtu.be/pZiG8r-diTM
https://media.sambent.dev/video/e731b3defed21e1c.mp4

2026-10-13 13:28:34 UTC

https://youtu.be/Nt8tMiYo4PA
https://media.sambent.dev/video/4be2bd963d39bf68.mp4

2026-10-13 09:13:19 UTC

#OPSEC365 206/365
In 1991, P&G suspected a leak to the Wall Street Journal. One grand jury subpoena to Cincinnati Bell swept every call from Cincinnati to WSJ's offices over months. Tens of millions of records came back, none belonging to a named suspect.
Grand jury subpoenas for phone records require no probable cause and no narrow targeting. The P&G case was widely reported by mainstream press after journalist outrage forced disclosure.

2026-10-12 19:13:02 UTC

https://youtu.be/6aYWzhSl_TE
https://media.sambent.dev/video/0be827888e3eaa4b.mp4

2026-10-12 13:32:11 UTC

https://youtu.be/xIquTIykpQM
https://media.sambent.dev/video/6090522841f85c5d.mp4

2026-10-12 09:56:31 UTC

#OPSEC365 205/365
Your neighbors can tell when your devices are active on WiFi.
A neighbor with passive monitoring sees your access point's beacon frames, the rough timing of connected-device activity, and changes in your network footprint as devices come and go. Modern phones randomize their MAC in probe requests and skip broadcasting saved SSIDs, so the phone leaks less than older posts suggest. The access point still gives plenty away.
#OPSEC365

2026-10-11 19:58:12 UTC

https://youtu.be/iRJPGu7-USI
https://media.sambent.dev/video/a770b1d7a1e87564.mp4

2026-10-11 13:54:47 UTC

https://youtu.be/MdG46N_Z-Io
https://media.sambent.dev/video/2445813165f785db.mp4

2026-10-11 09:14:48 UTC

#OPSEC365 204/365
Sports betting apps collect extensive financial and behavioral data.
DraftKings, FanDuel, and state gambling apps require identity verification including SSN, track your betting patterns, and retain detailed financial records. This data reveals your income level, risk tolerance, and potentially problematic behavior patterns.
State gambling regulators share player data with law enforcement. The financial records are subpoenable.
#OPSEC365

2026-10-10 19:54:40 UTC

https://youtu.be/U_6LZSd0KFk
https://media.sambent.dev/video/f6704b18e86de7f9.mp4

2026-10-10 13:07:58 UTC

https://youtu.be/yWgwm2IqMqU
https://media.sambent.dev/video/10699316385275dd.mp4

2026-10-10 09:24:44 UTC

#OPSEC365 203/365
Wedding websites broadcast personal details to anyone who finds them.
The Knot, Zola, and personal wedding sites include full names, dates, venues, registries linking to home addresses, and often how the couple met. These sites are indexed by search engines and rarely secured with passwords.
The full names, venues, and registries stay publicly searchable for years.
#OPSEC365

2026-10-09 19:39:57 UTC

https://youtu.be/DD4GcBgSBVs
https://media.sambent.dev/video/84c18adf6b5d258b.mp4

2026-10-09 13:05:35 UTC

https://youtu.be/TdulsXno-Tw
https://media.sambent.dev/video/2c836c1f70354c97.mp4

2026-10-09 09:19:08 UTC

#OPSEC365 202/365
In 1980 a Los Alamos scientist visited a Chinese institute. He deflected classified questions for hours. They threw a cocktail party in his honor: toasts, applause, drinks. After enough rounds he offered an analogy about neutron bomb thresholds.
Hadnagy documents this case. The alcohol, the flattery, and the pressure of being toasted each lowered the scientist's threshold one step at a time. Conferences and happy hours are collection environments.

2026-10-08 19:56:38 UTC

https://youtu.be/Y5GrbhB2HHQ
https://media.sambent.dev/video/c427eaa56b3de991.mp4

2026-10-08 13:13:57 UTC

https://youtu.be/y6SaXUUxMVU
https://media.sambent.dev/video/fe32cb0291adb097.mp4

2026-10-08 09:30:12 UTC

#OPSEC365 201/365
Timestamps reveal your timezone regardless of what you claim.
When you post at what you say is 9am but the metadata shows UTC offset, anyone can calculate your actual timezone. Photo timestamps, email headers, social media posts all carry timezone information. Someone tracking you can determine your general location from when you're active.
Consistent 3am activity on a US-based account suggests a different timezone than the one you claim.
#OPSEC365

2026-10-07 19:06:02 UTC

https://youtu.be/lxNOpIwjTxo
https://media.sambent.dev/video/d684d3be268adce7.mp4

2026-10-07 13:15:33 UTC

https://youtu.be/dOrjOPBRcf4
https://media.sambent.dev/video/0721b6c575b06323.mp4

2026-10-07 09:17:54 UTC

#OPSEC365 200/365
Forwarded emails often contain more metadata than the person forwarding intended to share.
Email headers include the original sender's IP address, email client, timezone, and the full chain of who received and forwarded the message. The person you forward to can extract information about everyone in the thread.
Check email headers before forwarding sensitive messages and consider copying content to a new email instead.
#OPSEC365

2026-10-06 19:05:04 UTC

https://youtu.be/Vxplqgrs3bk
https://media.sambent.dev/video/df850e52f41d17da.mp4

2026-10-06 13:36:58 UTC

https://youtu.be/Ofm0xSD6nq0
https://media.sambent.dev/video/4fe02956992a138b.mp4

2026-10-06 09:15:19 UTC

#OPSEC365 199/365
Under 18 U.S.C. §3123, an investigator certifies only that information 'is relevant to an ongoing criminal investigation.' Basic toll records come by subpoena. No warrant. No notification.
Court supervision ends when the order issues. This is standard procedure practiced by every federal investigative agency.

2026-10-05 19:32:50 UTC

https://youtu.be/fGIWOTXTfHw
https://media.sambent.dev/video/c4ec9b3c1de1a8a6.mp4

2026-10-05 13:52:24 UTC

https://youtu.be/_NY3h-0c5Sg
https://media.sambent.dev/video/632af7bf453f5e9f.mp4

2026-10-05 09:26:07 UTC

#OPSEC365 198/365
Digital receipts map your purchase history more precisely than paper ever could.
Email receipts are searchable, timestamped, and never lost in a drawer. That complete purchase history going back years reveals your financial situation, preferences, and lifestyle in fine detail to anyone who accesses your email.
Your inbox is a complete purchase history. Anyone with access to your email has access to everything you've bought.
#OPSEC365

2026-10-04 19:27:17 UTC

https://youtu.be/KGaKGzGOGKg
https://media.sambent.dev/video/8f80d921d3206bc0.mp4

2026-10-04 13:25:59 UTC

https://youtu.be/TRnOVyh5hl4
https://media.sambent.dev/video/03da2bb6dd4635a8.mp4

2026-10-04 09:04:54 UTC

#OPSEC365 197/365
Public records don't expire and they don't forget.
Every property you've owned is in the county assessor's database with your name and address. Business registrations list you as agent. A dismissed court case is still indexed on PACER and CourtListener. A lien from 2011 is still there.
Aggregator copies survive even after an official record is sealed.
#OPSEC365

2026-10-03 19:17:01 UTC

https://youtu.be/CV5J-usji04
https://media.sambent.dev/video/05e1017c12f05a8b.mp4

2026-10-03 13:42:57 UTC

https://youtu.be/f-QdqKS61Jg
https://media.sambent.dev/video/581df042509e6e4c.mp4

2026-10-03 09:02:05 UTC

#OPSEC365 196/365
Health insurance claims reveal your medical history to multiple parties.
Every claim goes to the insurer, gets reported to industry databases like MIB, and may be shared with employers for self-insured plans. Procedures, diagnoses, and medications become part of your permanent health record beyond your doctor's office.
The MIB shares claim history across insurers. One claim can affect your rates with carriers you've never used.
#OPSEC365

2026-10-02 19:32:32 UTC

https://youtu.be/7ZGNgt2levs
https://media.sambent.dev/video/472d28a776dcf8a4.mp4

2026-10-02 13:01:20 UTC

https://youtu.be/r57V4-3gZws
https://media.sambent.dev/video/04fd289b93ed305c.mp4

2026-10-02 09:16:12 UTC

#OPSEC365 195/365
Password managers often include emergency access features.
Bitwarden, 1Password, and LastPass let you designate emergency contacts who can request access to your vault after a waiting period. If you've enabled this, someone else can potentially reach all your credentials.
If you turned it on and forgot, a designated contact may be one request and one waiting period away from everything.
#OPSEC365

2026-10-01 19:56:24 UTC

https://youtu.be/RUxL-KMCeHk
https://media.sambent.dev/video/11c131d7af15432e.mp4

2026-10-01 09:57:58 UTC

#OPSEC365 194/365
Smart doorbells record conversations from people walking past.
Ring and Nest cameras with audio capture snippets of conversation from neighbors, delivery workers, and passersby. That private conversation you had on the sidewalk might be recorded in someone else's cloud storage without your knowledge or consent.
A Ring camera covers the street, the neighbor's driveway, and anyone who walks past, not just the front door.
#OPSEC365

2026-09-30 19:40:24 UTC

https://youtu.be/rwTo6wvX768
https://media.sambent.dev/video/25ba6f5114fe89f6.mp4

2026-09-30 13:18:00 UTC

This has existed for over 10 years.
None of this is about protection or any cause that has to do with protecting you.
Notice how both still exist?
It was never about either of those things, just like ID confiscation (aka 'age verification) isn't about age.
There is a reason signaltrace, axon and flock appeared as they did.
https://media.sambent.dev/img/e4c49f24deb24880.jpg

2026-09-30 09:10:15 UTC

#OPSEC365 193/365
Cross-cut shredding is not enough for high-sensitivity documents.
After the 1979 seizure of the US embassy in Tehran, Iranian student militants painstakingly reassembled strip-shredded classified documents by hand and published them in dozens of volumes. Modern reconstruction software does the same job for cross-cut shreds in minutes.
For anything that matters, burn it or use a micro-cut shredder rated P-5 or higher.
#OPSEC365

2026-09-29 19:51:02 UTC

https://youtu.be/MBtgSCG2yBo
https://media.sambent.dev/video/0601609bad733555.mp4

2026-09-29 09:55:54 UTC

#OPSEC365 192/365
Video call recordings capture everything in frame and earshot.
Zoom and Teams meetings get recorded, often by default in corporate settings. Your facial expressions, background, voice, and any visible documents are preserved. Meetings you thought were ephemeral may sit in cloud storage accessible to IT and management.
Side conversations and visible documents end up in storage you don't control.
#OPSEC365

2026-09-28 13:37:53 UTC

Stack XMR while normies argue about which surveillance coin will pump next.
https://media.sambent.dev/img/259abfb3963c0a8d.jpg

2026-09-28 09:48:16 UTC

#OPSEC365 191/365
Your employer tracks who clicks on phishing simulations.
Corporate security teams send fake phishing emails to test employees. If you click the link, that failure is logged. Repeat offenders get flagged for additional training or worse. Your click rate on simulated attacks becomes part of your employment record.
Treat every suspicious email at work as potentially a test of your security awareness.
#OPSEC365

2026-09-27 09:16:58 UTC

#OPSEC365 190/365
Downloading your social media archive reveals more than you posted.
Facebook, Twitter, and Instagram archive downloads include messages, login locations, advertiser categories you're sorted into, facial recognition templates, and data you never knew was collected. The archive is more revealing than your public profile.
Download your data archive from each platform and see what they've collected about you.
#OPSEC365

2026-09-26 09:50:02 UTC

#OPSEC365 189/365
Your Bluetooth device name is a persistent surveillance identifier.
In a noted ISS exercise, Jenkins scanned Bluetooth signals on a train and noted five device names. An hour later at an art gallery, one name reappeared. A monitoring operator was on the train.

2026-09-25 19:52:41 UTC

https://youtu.be/N_FWgUA85aI
https://media.sambent.dev/video/b00ad13d29511efe.mp4

2026-09-25 09:20:16 UTC

#OPSEC365 188/365
ATM cameras record your face alongside your transaction.
Banks use cameras at ATMs for security, capturing high-quality footage of anyone making a withdrawal or deposit. This footage includes timestamps that correlate exactly with your transaction records. The combination creates a verified record of your presence at that location.
ATM cameras produce timestamped facial imagery that correlates exactly with your transaction record.
#OPSEC365

2026-09-24 09:30:49 UTC

#OPSEC365 187/365
Venmo's default settings make your friends list and transactions visible to anyone.
Even with private payments, your list of Venmo contacts is publicly searchable unless you change settings. This social graph reveals your relationships, roommates, partners, and anyone else you regularly exchange money with.
Check your Venmo privacy settings and make your friends list private.
#OPSEC365

2026-09-23 09:00:54 UTC

#OPSEC365 186/365
Your network is visible even when your profile is locked.
Maltego runs a transform on your name and maps every connected entity: your employer, your family, your co-authors, the forums you both post in. Gephi visualizes graph and marks you as a central node. The people around you are not private.
The map of who you know is data, and that data sits in tools anyone can run.
#OPSEC365

2026-09-23 02:58:56 UTC

#OPSEC365 185/365
Car warranty and maintenance records track your vehicle's history.
Every dealer visit, oil change, and repair is logged in manufacturer databases by VIN. Mileage, service intervals, and reported issues persist in the vehicle's permanent record.
When you sell the car, that history transfers to the new owner and affects resale value. Mileage discrepancies and service patterns follow the VIN to the next owner.
#OPSEC365

2026-09-21 09:56:19 UTC

#OPSEC365 184/365
Hotel rooms are a standard target for technical surveillance.
Surveillance teams operating in an area choose hotels for privacy of movement. From the target's perspective: rooms change occupants daily, maintenance provides routine access cover, and any prior occupant had unrestricted time inside.

2026-09-20 09:00:49 UTC

#OPSEC365 183/365
Sharing streaming credentials merges behavioral records under one identifier.
The military term is the mosaic effect: unremarkable data points combine to reveal health, political views, and psychological patterns. Shane Harris's The Watchers describes analysts wanting 'what they bought, what they read, where they traveled.' Your streaming history is the modern version.
Use a separate account per household member so records don't merge.
#OPSEC365

2026-09-19 09:48:46 UTC

#OPSEC365 182/365
Your VPN provider sees everything your ISP would have seen. You moved the trust, not the exposure. In 2020, seven "no-log" VPN providers leaked 1.2TB of user data including connection logs they claimed not to keep.
Choose a VPN based on jurisdiction, independent audits, and revenue model.
#OPSEC365

2026-09-18 09:24:51 UTC

#OPSEC365 181/365
Audio watermarks can identify who leaked media.
Netflix, Disney+, and movie studios embed inaudible watermarks in streaming audio that identify your account. If you record and share the content, the watermark traces the leak back to your specific stream.
Netflix embeds per-stream watermarks. Sharing a recording identifies your account to the millisecond.
#OPSEC365

2026-09-17 09:06:16 UTC

#OPSEC365 180/365
HUMINT collectors call it apparent withdrawal. The collector signals the conversation is ending, releases tension, then drops the real question as an afterthought. "One last thing before I let you go..."
Your guard drops because the pressure seemed over. The question that follows is the one they came for. The entire preceding conversation was setup.

2026-09-16 09:38:01 UTC

#OPSEC365 179/365
HUMINT is the collection discipline most people forget to model against. Your adversary doesn't need to hack your devices if they can call your former employer, ask your neighbors, or socially engineer your friends for your new address.
Military OPSEC doctrine explicitly lists human intelligence as a primary threat vector. Your digital defenses are irrelevant if your human network leaks.
#OPSEC365

2026-09-15 09:22:53 UTC

#OPSEC365 178/365
Thermostat data reveals when your home is occupied.
Smart thermostats from Nest, Ecobee, and Honeywell detect occupancy through sensors and adjust temperature accordingly. That data flows to the cloud. The pattern of your home heating and cooling maps exactly when someone is home and when the house is empty.
Nest knows when your house is empty because occupancy sensors feed the algorithm. That data sits on Google's servers.
#OPSEC365

2026-09-14 13:27:32 UTC

https://youtu.be/vcg9eMh1Uuw
https://media.sambent.dev/video/1c285980e786aeb8.mp4

2026-09-13 09:27:37 UTC

#OPSEC365 176/365
Pregnancy and fertility apps share your most intimate health data.
Flo, Ovia, and similar period tracking apps have been caught sharing data with Facebook and marketing partners. When Roe v. Wade was overturned, concerns emerged about this data being used for prosecution.
Review privacy settings on any health tracking apps that collect reproductive data.
#OPSEC365