Nostr notes by SamBent

Nostr event nevent1qqsypfd5kqegpt6yxkapwfa6w88wuz70887f42antth2w72e787d5xqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s3gq2dt

2026-10-27T19:11:36Z

Nostr event nevent1qqsgfqutveq6vq88a39g2rl2e8elqf2hhxrha0s6fjmr6mnsrjjztkqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sjchh35

2026-10-27T13:05:44Z

#OPSEC365 220/365 Every USB device has a unique serial number ...

2026-10-27T09:30:10Z

#OPSEC365 220/365

Every USB device has a unique serial number that identifies it.

When you plug a USB drive into a computer, the operating system logs the device's vendor ID, product ID, and serial number. That drive can be traced across every computer it's touched. Forensic analysis of machines reveals what USB devices have connected to them.

USB serial numbers are logged in Windows registry entries that persist after the device is removed.

#OPSEC365

Nostr event nevent1qqsxlfcwn79f94u3scxass45dmnrf3h3k5tudxl66n85w2v9j7m725qzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s3rex3e

2026-10-26T19:09:13Z

https://youtu.be/uMDHPK-xyAA

The darkest twitter (pitch) disables new accounts due to spam. ...

2026-10-26T13:41:22Z

The darkest twitter (pitch) disables new accounts due to spam.

Quality over quantity.

#OPSEC365 219/365 Vulnerability analysis in OPSEC doctrine ranks ...

2026-10-26T09:53:24Z

#OPSEC365 219/365

Vulnerability analysis in OPSEC doctrine ranks vulnerabilities on two axes: operational importance and susceptibility to collection. The highest-priority items are both important AND easy for your adversary to collect.

Low-importance data that's hard to collect isn't worth protecting. High-importance data that's trivially exposed is your immediate priority.

A list of vulnerabilities without ranking gives you no place to start. #OPSEC365

Nostr event nevent1qqsyqcasyy8f70fwl894gywa2lhcmzjzgp8q9yszwh4waf4atr9tstszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sktamqp

2026-10-25T19:28:26Z

https://youtu.be/V5ad6y5sixU

Nostr event nevent1qqsfjg2uep3u0jz79jtwelvurf2hfjxrdnmckd462j7wthhug9l3lqgzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s5vpm2y

2026-10-25T13:27:52Z

https://sambent.dev/sam/HiddenForge/releases/tag/v2.1.0

#OPSEC365 218/365 Shared links to cloud files often don't ...

2026-10-25T09:05:23Z

#OPSEC365 218/365

Shared links to cloud files often don't require authentication.

That Google Drive link you shared to collaborate on a document might be accessible to anyone with the URL. Some cloud storage defaults to link access that doesn't check who's clicking. URLs can be guessed, leaked, or discovered through browser history.

Check the sharing settings on cloud files before sending links and restrict access to specific accounts.

#OPSEC365

Nostr event nevent1qqs9dcvkas4phgr45l6q78gmu9r5vdmdx4y8rrggpame5qn5m2z47hczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8szyqvej

2026-10-24T19:42:44Z

https://youtu.be/XDsLDhKG8Cs

Nostr event nevent1qqsvm9sqkxskq0cn4cp7t5any0jc4q9mhvn5xcf77mjygfpfhk5sdmszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sen7u4j

2026-10-24T13:37:47Z

https://youtu.be/oFioqVeNGGg

#OPSEC365 217/365 Customer support is a backdoor for social ...

2026-10-24T09:23:18Z

#OPSEC365 217/365

Customer support is a backdoor for social engineers.

Attackers call support lines pretending to be you, using info gathered from social media and data breaches to pass security questions. They request password resets, account changes, or info that helps compromise your accounts.

Add extra security to accounts that allow it and expect that attackers will target support channels.

#OPSEC365

Nostr event nevent1qqsf2hu3m9f2rfml3sg8r5ngcwp0cp2jgqc0kcj096lsgwxx9a2879qzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sjdstj2

2026-10-23T19:43:16Z

https://youtu.be/-HGCGivMSUs

Nostr event nevent1qqsdxnh2f040vff0xj5m570vnp47l492te9t3xf4sdtu0x4w720j45gzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s68g4tc

2026-10-23T13:17:35Z

https://youtu.be/4Gry4U6L7l8

#OPSEC365 216/365 Temporary email services aren't as ...

2026-10-23T09:32:07Z

#OPSEC365 216/365

Temporary email services aren't as anonymous as they seem.

10minutemail, Guerrilla Mail, and similar services let you create throwaway addresses, but the services themselves log IP addresses and usage. Anyone with access to the service's logs can correlate your temporary address with your real identity through connection data.

For truly anonymous email, temporary services require additional layers of protection like Tor.

#OPSEC365

Nostr event nevent1qqswvfd73a6qnvhtrs385v4kqphemg2fq8xd4szdcqpx9m4gznc7ungzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slw47hh

2026-10-22T19:46:30Z

https://youtu.be/onYWQJsWFpk

Nostr event nevent1qqstjpm09dp3gsznf8av0tt0y73slsx0tfu8nncw9c75xp3lzym0l9czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sywkh76

2026-10-22T13:15:06Z

https://youtu.be/Ml99dXffRXk

#OPSEC365 215/365 Counter-surveillance starts with awareness of ...

2026-10-22T09:15:41Z

#OPSEC365 215/365

Counter-surveillance starts with awareness of who might be watching.

Professional surveillance involves multiple people, vehicle switches, and careful tradecraft. But most surveillance you'll encounter is amateur. A car that appears too often, someone who shows up at multiple places you go, or patterns that feel off deserve attention.

Practice being aware of your surroundings without being paranoid.

#OPSEC365

Nostr event nevent1qqs2hfymgnw37qdwwnlndr3yyvu2860yz8rqn679ccdc4j4he0d4smszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8stmzjg2

2026-10-21T19:10:02Z

https://youtu.be/3wlNemFwbwE

Nostr event nevent1qqs80qfghqma9ytzfqc9j43e7qfffr3fslall0uf94zyptzh0eqkkrczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sgnnmvn

2026-10-21T13:39:15Z

https://youtu.be/pfGRAJgUFIM

#OPSEC365 214/365 Granting contact access doesn't expose your ...

2026-10-21T09:41:57Z

#OPSEC365 214/365

Granting contact access doesn't expose your data. It exposes everyone else's.

Your address book is a social graph belonging to people who never consented. WhatsApp, LinkedIn, and TikTok have all used contact uploads to build graphs of non-users.

Cronk's aggregation problem: the app now knows your network position without you ever posting publicly.

A photo editor, game, or flashlight has no need for your contacts. Audit and revoke. #OPSEC365

Tor Project "We dislike mullvad donated to someone we ...

2026-10-20T19:23:45Z

Tor Project "We dislike mullvad donated to someone we dislike."

Also Tor: "We accept funding from the feds, and give DC talks about how cool it is that they talk to us."

Nostr event nevent1qqsw09rmzwzrmmvy88cchdmlzxuc47jqhpm9xy90wcpjqq3cvw4xx6qzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sxkp32r

2026-10-20T13:42:40Z

https://youtu.be/MUYjiETdVWQ

#OPSEC365 213/365 Your notification center is a summary of your ...

2026-10-20T09:12:00Z

#OPSEC365 213/365

Your notification center is a summary of your digital life visible on your lock screen.

Banking alerts, message previews, calendar reminders, and app notifications all appear where anyone glancing at your phone can see them. The locked screen shows a feed of your recent activity.

Review your notification settings and limit what shows when your phone is locked.

#OPSEC365

Nostr event nevent1qqsyqnypeak9sqn9cg792nkysv5cerdm4hhcu2vfvc32pw9ddnucwugzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s752w0h

2026-10-19T19:53:23Z

https://youtu.be/WN5uOMTGzPc

Nostr event nevent1qqsy37glc32gjavtdn40dzyetzhph9zw77v6w6mkg28jlvdty8z942szyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s3x34pz

2026-10-19T13:10:38Z

https://youtu.be/ooNmubCA680

#OPSEC365 212/365 Gait recognition is being marketed as a way to ...

2026-10-19T09:27:34Z

#OPSEC365 212/365

Gait recognition is being marketed as a way to identify you by how you walk.

Your stride length, pace, arm swing, and posture create a signature that does not change when you cover your face. Watrix, a Chinese vendor, has publicly claimed 50-meter identification at 94% accuracy with the face fully covered. That figure comes from the company itself and has not been independently validated in peer-reviewed research.

#OPSEC365

Nostr event nevent1qqstdx0jze02607fltk0hkjslc2dy0n3wr0dq9zhxyeqyuz0hwjts3gzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8suz8d22

2026-10-18T19:56:15Z

https://youtu.be/j0VdLBIjNRQ

Regulation was written by the people it's supposed to ...

2026-10-18T13:55:32Z

Regulation was written by the people it's supposed to regulate, and it's been that way since the beginning.

#OPSEC365 211/365 Shared computers retain browsing history across ...

2026-10-18T09:00:17Z

#OPSEC365 211/365

Shared computers retain browsing history across users.

Family computers, library terminals, and shared workstations keep history unless actively cleared. Private browsing helps during the session but doesn't erase what you did before remembering to use it. The next person at that computer can see what you browsed.

Always use private browsing on shared computers and clear history if you forget.

#OPSEC365

Nostr event nevent1qqs2qug0vny3eq908m27dgywjjhdszpnne359773rdpquuvlwmdt5sszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s9y2fxs

2026-10-16T19:08:56Z

https://youtu.be/ekp_KuC255A

Things happen, we learn and adapt. The most important lesson in ...

2026-10-16T13:32:33Z

Things happen, we learn and adapt.

The most important lesson in life is to not make the same mistake twice.

Hope all the best for Dread, and Paris.

If the site ever shuts down, I will publish my archived backup.

#OPSEC365 209/365 Location stickers on social media stories ...

2026-10-16T09:51:26Z

#OPSEC365 209/365

Location stickers on social media stories reveal where you are in real time.

Instagram and Snapchat location tags show your current location to everyone viewing your story. Unlike posts, stories broadcast where you are right now, not where you were last week. Check-ins announce your presence to anyone following you.

Anyone watching can screenshot the tag before the story expires.

#OPSEC365

Nostr event nevent1qqs0psf49msxz7nrmtkj8nmmlr5a37wdjkh687lm9n2dvv0f6gluk2czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8shrsyv9

2026-10-15T19:04:35Z

https://youtu.be/2yw_fwoKXBM

Nostr event nevent1qqsgrdjrapm0e3uv07kdxx69lkte4l2lhms8c8ufws7hj279j0ugxhczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sytevq7

2026-10-15T13:19:10Z

https://youtu.be/9csp-sQrKnU

#OPSEC365 208/365 Remote work monitoring software may be tracking ...

2026-10-15T09:56:11Z

#OPSEC365 208/365

Remote work monitoring software may be tracking more than you realize.

Hubstaff, Time Doctor, ActivTrak, and similar tools capture screenshots, track keystrokes, monitor application usage, and sometimes record through webcams. Working from home with company monitoring means your employer can see everything on your work device.

Ask your employer what monitoring software runs on company devices and what it captures.

#OPSEC365

Every red flag in a toxic relationship is standard operating ...

2026-10-14T19:48:51Z

Every red flag in a toxic relationship is standard operating procedure for the federal government.

Nostr event nevent1qqsw4kxvka74xs5rx63dy32e0hv3asumgywtqc2dqvff36xuhkqdpsgzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sfe5nqs

2026-10-14T13:27:51Z

https://youtu.be/moH5DkuAFiQ

#OPSEC365 207/365 Lockheed Martin's Cyber Kill Chain breaks ...

2026-10-14T09:27:22Z

#OPSEC365 207/365

Lockheed Martin's Cyber Kill Chain breaks an adversary's progression into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives.

Most people only think about the final stages. By the time you notice, the adversary has been in reconnaissance for weeks.

Map your environment at the reconnaissance stage, not after the exploit lands. #OPSEC365

Nostr event nevent1qqsggq2q6vyrxvzw340jmss7ng7tcc9dgfxzkt8gpjknx3y0pd65a8gzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s5auuv0

2026-10-13T19:28:00Z

https://youtu.be/pZiG8r-diTM

Nostr event nevent1qqsvfahgcw9zy56hh3kgjykzgn2hh4vw0dqgjzssztphangajhqfseszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s5ny2d3

2026-10-13T13:28:34Z

https://youtu.be/Nt8tMiYo4PA

#OPSEC365 206/365 In 1991, P&G suspected a leak to the Wall ...

2026-10-13T09:13:19Z

#OPSEC365 206/365

In 1991, P&G suspected a leak to the Wall Street Journal. One grand jury subpoena to Cincinnati Bell swept every call from Cincinnati to WSJ's offices over months. Tens of millions of records came back, none belonging to a named suspect.

Grand jury subpoenas for phone records require no probable cause and no narrow targeting. The P&G case was widely reported by mainstream press after journalist outrage forced disclosure.

Nostr event nevent1qqst4mggrkujaulkthmct5tncpgptlhrklsfjl98dwgvccgkvrc8s4czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8schu7ct

2026-10-12T19:13:02Z

https://youtu.be/6aYWzhSl_TE

Nostr event nevent1qqs08dqf64ras2p9xjqrfnfafgseduuajzjqvhzsyk32ce8n2ndljyqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ss935sa

2026-10-12T13:32:11Z

https://youtu.be/xIquTIykpQM

#OPSEC365 205/365 Your neighbors can tell when your devices are ...

2026-10-12T09:56:31Z

#OPSEC365 205/365

Your neighbors can tell when your devices are active on WiFi.

A neighbor with passive monitoring sees your access point's beacon frames, the rough timing of connected-device activity, and changes in your network footprint as devices come and go. Modern phones randomize their MAC in probe requests and skip broadcasting saved SSIDs, so the phone leaks less than older posts suggest. The access point still gives plenty away.

#OPSEC365

Nostr event nevent1qqsp5rntztm8hcr6vxqylhz8ty4g2xcuz400wgkfp9mzj5d6defskfczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sjwwdym

2026-10-11T19:58:12Z

https://youtu.be/iRJPGu7-USI

Nostr event nevent1qqsxwkndqp7jx7fxa4emv4que5samgfs8we405dnvf20l5l84yg5zvqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sxt2x8a

2026-10-11T13:54:47Z

https://youtu.be/MdG46N_Z-Io

#OPSEC365 204/365 Sports betting apps collect extensive financial ...

2026-10-11T09:14:48Z

#OPSEC365 204/365

Sports betting apps collect extensive financial and behavioral data.

DraftKings, FanDuel, and state gambling apps require identity verification including SSN, track your betting patterns, and retain detailed financial records. This data reveals your income level, risk tolerance, and potentially problematic behavior patterns.

State gambling regulators share player data with law enforcement. The financial records are subpoenable.

#OPSEC365

Nostr event nevent1qqs0ekaazvpkm4c5yjlqn3wvhp7nhkumxw6dfcf3d0erlwhuhk4fvzczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ssz3vww

2026-10-10T19:54:40Z

https://youtu.be/U_6LZSd0KFk

Nostr event nevent1qqs2mh5c0ept870qrv6plsq94rma7c3hy6d7kve0mez4j4m2vn4dchczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s60pjue

2026-10-10T13:07:58Z

https://youtu.be/yWgwm2IqMqU

#OPSEC365 203/365 Wedding websites broadcast personal details to ...

2026-10-10T09:24:44Z

#OPSEC365 203/365

Wedding websites broadcast personal details to anyone who finds them.

The Knot, Zola, and personal wedding sites include full names, dates, venues, registries linking to home addresses, and often how the couple met. These sites are indexed by search engines and rarely secured with passwords.

The full names, venues, and registries stay publicly searchable for years.

#OPSEC365

Nostr event nevent1qqsga53m5uajapw7q6y6zm6zsfnktsgjqf87xu5zvq94v53lpcucmzszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slgt8hw

2026-10-09T19:39:57Z

https://youtu.be/DD4GcBgSBVs

Nostr event nevent1qqsx2gfkjz303vhdqqf9w5mvlz9zuenzc6yqla9rg6guyx8lpvaqeeczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sgcgyea

2026-10-09T13:05:35Z

https://youtu.be/TdulsXno-Tw

#OPSEC365 202/365 In 1980 a Los Alamos scientist visited a ...

2026-10-09T09:19:08Z

#OPSEC365 202/365

In 1980 a Los Alamos scientist visited a Chinese institute. He deflected classified questions for hours. They threw a cocktail party in his honor: toasts, applause, drinks. After enough rounds he offered an analogy about neutron bomb thresholds.

Hadnagy documents this case. The alcohol, the flattery, and the pressure of being toasted each lowered the scientist's threshold one step at a time. Conferences and happy hours are collection environments.

Nostr event nevent1qqs0ne0cmslpdtcwppdu9drnvwu9nwz70880ms69zdp7t2cl2fkhhmszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ssjcgys

2026-10-08T19:56:38Z

https://youtu.be/Y5GrbhB2HHQ

Nostr event nevent1qqsvd8xvu3ze4hwncrw3n0j9xvu6kwjfy3sdwg4ltrcaxm6ylfrahlszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8stesta4

2026-10-08T13:13:57Z

https://youtu.be/y6SaXUUxMVU

#OPSEC365 201/365 Timestamps reveal your timezone regardless of ...

2026-10-08T09:30:12Z

#OPSEC365 201/365

Timestamps reveal your timezone regardless of what you claim.

When you post at what you say is 9am but the metadata shows UTC offset, anyone can calculate your actual timezone. Photo timestamps, email headers, social media posts all carry timezone information. Someone tracking you can determine your general location from when you're active.

Consistent 3am activity on a US-based account suggests a different timezone than the one you claim.

#OPSEC365

Nostr event nevent1qqszd4lnqqc9sh4th9yx60ydvthchxxh9007wvaexvwcg8etqs0yueqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s7ywxt6

2026-10-07T19:06:02Z

https://youtu.be/lxNOpIwjTxo

Nostr event nevent1qqs9gsxqn08cn2erpulh39ptfq68qnyhdqe40qq8nqxe9aepqjxdf2czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sr2vadd

2026-10-07T13:15:33Z

https://youtu.be/dOrjOPBRcf4

#OPSEC365 200/365 Forwarded emails often contain more metadata ...

2026-10-07T09:17:54Z

#OPSEC365 200/365

Forwarded emails often contain more metadata than the person forwarding intended to share.

Email headers include the original sender's IP address, email client, timezone, and the full chain of who received and forwarded the message. The person you forward to can extract information about everyone in the thread.

Check email headers before forwarding sensitive messages and consider copying content to a new email instead.

#OPSEC365

Nostr event nevent1qqs8newf450x2prg5knfx640jurgnzzrkxnurf5l82w3n2n2dajx5fqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8saef7l5

2026-10-06T19:05:04Z

https://youtu.be/Vxplqgrs3bk

Nostr event nevent1qqsvz543mmptdrwangacl7emmysdt7rl6xxuuk3x5v7qfwzvadm9dlczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slcvt74

2026-10-06T13:36:58Z

https://youtu.be/Ofm0xSD6nq0

#OPSEC365 199/365 Under 18 U.S.C. §3123, an investigator ...

2026-10-06T09:15:19Z

#OPSEC365 199/365

Under 18 U.S.C. §3123, an investigator certifies only that information 'is relevant to an ongoing criminal investigation.' Basic toll records come by subpoena. No warrant. No notification.

Court supervision ends when the order issues. This is standard procedure practiced by every federal investigative agency.

Nostr event nevent1qqs8kjk2ltu784zyjvc3v7n5hpm4g7fwsmm395cjfp3r3vzzfacyghszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8spgqwef

2026-10-05T19:32:50Z

https://youtu.be/fGIWOTXTfHw

Nostr event nevent1qqsr0dc9gvrcrvp3zssmxk5u74nd6klvpxulfntt3zftdnl3up2y2vczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8smxfr8g

2026-10-05T13:52:24Z

https://youtu.be/_NY3h-0c5Sg

#OPSEC365 198/365 Digital receipts map your purchase history more ...

2026-10-05T09:26:07Z

#OPSEC365 198/365

Digital receipts map your purchase history more precisely than paper ever could.

Email receipts are searchable, timestamped, and never lost in a drawer. That complete purchase history going back years reveals your financial situation, preferences, and lifestyle in fine detail to anyone who accesses your email.

Your inbox is a complete purchase history. Anyone with access to your email has access to everything you've bought.

#OPSEC365

Nostr event nevent1qqspzlln0kpgup9kky66hgd7jl3fx2h5ns7kajy77wm8wuw7eytrtuczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8snswmez

2026-10-04T19:27:17Z

https://youtu.be/KGaKGzGOGKg

Nostr event nevent1qqsq5uzm5ys69auxqsau9jzgn29rs7hw3qjl68r8f8q5aes200hrhkgzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s99wjyc

2026-10-04T13:25:59Z

https://youtu.be/TRnOVyh5hl4

#OPSEC365 197/365 Public records don't expire and they ...

2026-10-04T09:04:54Z

#OPSEC365 197/365

Public records don't expire and they don't forget.

Every property you've owned is in the county assessor's database with your name and address. Business registrations list you as agent. A dismissed court case is still indexed on PACER and CourtListener. A lien from 2011 is still there.

Aggregator copies survive even after an official record is sealed.

#OPSEC365

Nostr event nevent1qqs8ue8sp4gafh82ad9pxjazj9vk8juwkh5ax4a9f23a2ssercc0axgzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8snee38e

2026-10-03T19:17:01Z

https://youtu.be/CV5J-usji04

Nostr event nevent1qqsqtaezrc5yau4dam3496x7q87zsnd6c9pjrwpq6q3lfuyn0g79pdqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slvcvdu

2026-10-03T13:42:57Z

https://youtu.be/f-QdqKS61Jg

#OPSEC365 196/365 Health insurance claims reveal your medical ...

2026-10-03T09:02:05Z

#OPSEC365 196/365

Health insurance claims reveal your medical history to multiple parties.

Every claim goes to the insurer, gets reported to industry databases like MIB, and may be shared with employers for self-insured plans. Procedures, diagnoses, and medications become part of your permanent health record beyond your doctor's office.

The MIB shares claim history across insurers. One claim can affect your rates with carriers you've never used.

#OPSEC365

Nostr event nevent1qqsp0jgxmcjertqmxsk33z3xvjugyjyv068aq9xsyar9eskfg35866szyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s47h80a

2026-10-02T19:32:32Z

https://youtu.be/7ZGNgt2levs

Nostr event nevent1qqs2jyzyjku6c9rv5cc0fkpmgcgmllc597499k2quhlwrhftupyqdsczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sxmrf65

2026-10-02T13:01:20Z

https://youtu.be/r57V4-3gZws

#OPSEC365 195/365 Password managers often include emergency ...

2026-10-02T09:16:12Z

#OPSEC365 195/365

Password managers often include emergency access features.

Bitwarden, 1Password, and LastPass let you designate emergency contacts who can request access to your vault after a waiting period. If you've enabled this, someone else can potentially reach all your credentials.

If you turned it on and forgot, a designated contact may be one request and one waiting period away from everything.

#OPSEC365

Nostr event nevent1qqsqfssvmudc2cjzv0yut8pup3d7tcp806z37xsj2xazugar304axwqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s90xe6t

2026-10-01T19:56:24Z

https://youtu.be/RUxL-KMCeHk

#OPSEC365 194/365 Smart doorbells record conversations from ...

2026-10-01T09:57:58Z

#OPSEC365 194/365

Smart doorbells record conversations from people walking past.

Ring and Nest cameras with audio capture snippets of conversation from neighbors, delivery workers, and passersby. That private conversation you had on the sidewalk might be recorded in someone else's cloud storage without your knowledge or consent.

A Ring camera covers the street, the neighbor's driveway, and anyone who walks past, not just the front door.

#OPSEC365

Nostr event nevent1qqs0zt0clgs369jhkfez9vmkwgs3n5deqyf4qey44gttjf0usdczw6qzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s0wmeza

2026-09-30T19:40:24Z

https://youtu.be/rwTo6wvX768

This has existed for over 10 years. None of this is about ...

2026-09-30T13:18:00Z

This has existed for over 10 years.

None of this is about protection or any cause that has to do with protecting you.

Notice how both still exist?

It was never about either of those things, just like ID confiscation (aka 'age verification) isn't about age.

There is a reason signaltrace, axon and flock appeared as they did.

#OPSEC365 193/365 Cross-cut shredding is not enough for ...

2026-09-30T09:10:15Z

#OPSEC365 193/365

Cross-cut shredding is not enough for high-sensitivity documents.

After the 1979 seizure of the US embassy in Tehran, Iranian student militants painstakingly reassembled strip-shredded classified documents by hand and published them in dozens of volumes. Modern reconstruction software does the same job for cross-cut shreds in minutes.

For anything that matters, burn it or use a micro-cut shredder rated P-5 or higher.

#OPSEC365

Nostr event nevent1qqs9cjrya5l59hc43n0nc660h76pvz6udq4ycntuayqca63my6r0v7szyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sadesgy

2026-09-29T19:51:02Z

https://youtu.be/MBtgSCG2yBo

#OPSEC365 192/365 Video call recordings capture everything in ...

2026-09-29T09:55:54Z

#OPSEC365 192/365

Video call recordings capture everything in frame and earshot.

Zoom and Teams meetings get recorded, often by default in corporate settings. Your facial expressions, background, voice, and any visible documents are preserved. Meetings you thought were ephemeral may sit in cloud storage accessible to IT and management.

Side conversations and visible documents end up in storage you don't control.

#OPSEC365

Stack XMR while normies argue about which surveillance coin will ...

2026-09-28T13:37:53Z

Stack XMR while normies argue about which surveillance coin will pump next.

#OPSEC365 191/365 Your employer tracks who clicks on phishing ...

2026-09-28T09:48:16Z

#OPSEC365 191/365

Your employer tracks who clicks on phishing simulations.

Corporate security teams send fake phishing emails to test employees. If you click the link, that failure is logged. Repeat offenders get flagged for additional training or worse. Your click rate on simulated attacks becomes part of your employment record.

Treat every suspicious email at work as potentially a test of your security awareness.

#OPSEC365

#OPSEC365 190/365 Downloading your social media archive reveals ...

2026-09-27T09:16:58Z

#OPSEC365 190/365

Downloading your social media archive reveals more than you posted.

Facebook, Twitter, and Instagram archive downloads include messages, login locations, advertiser categories you're sorted into, facial recognition templates, and data you never knew was collected. The archive is more revealing than your public profile.

Download your data archive from each platform and see what they've collected about you.

#OPSEC365

#OPSEC365 189/365 Your Bluetooth device name is a persistent ...

2026-09-26T09:50:02Z

#OPSEC365 189/365

Your Bluetooth device name is a persistent surveillance identifier.

In a noted ISS exercise, Jenkins scanned Bluetooth signals on a train and noted five device names. An hour later at an art gallery, one name reappeared. A monitoring operator was on the train.

Nostr event nevent1qqsynskv86a3hzx0mlrk7sq4nhsk6se4yzgld7nspnkt8rwnt4wxwagzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8srawdel

2026-09-25T19:52:41Z

https://youtu.be/N_FWgUA85aI

#OPSEC365 188/365 ATM cameras record your face alongside your ...

2026-09-25T09:20:16Z

#OPSEC365 188/365

ATM cameras record your face alongside your transaction.

Banks use cameras at ATMs for security, capturing high-quality footage of anyone making a withdrawal or deposit. This footage includes timestamps that correlate exactly with your transaction records. The combination creates a verified record of your presence at that location.

ATM cameras produce timestamped facial imagery that correlates exactly with your transaction record.

#OPSEC365

#OPSEC365 187/365 Venmo's default settings make your friends ...

2026-09-24T09:30:49Z

#OPSEC365 187/365

Venmo's default settings make your friends list and transactions visible to anyone.

Even with private payments, your list of Venmo contacts is publicly searchable unless you change settings. This social graph reveals your relationships, roommates, partners, and anyone else you regularly exchange money with.

Check your Venmo privacy settings and make your friends list private.

#OPSEC365

#OPSEC365 186/365 Your network is visible even when your profile ...

2026-09-23T09:00:54Z

#OPSEC365 186/365

Your network is visible even when your profile is locked.

Maltego runs a transform on your name and maps every connected entity: your employer, your family, your co-authors, the forums you both post in. Gephi visualizes graph and marks you as a central node. The people around you are not private.

The map of who you know is data, and that data sits in tools anyone can run.

#OPSEC365

#OPSEC365 185/365 Car warranty and maintenance records track your ...

2026-09-23T02:58:56Z

#OPSEC365 185/365

Car warranty and maintenance records track your vehicle's history.

Every dealer visit, oil change, and repair is logged in manufacturer databases by VIN. Mileage, service intervals, and reported issues persist in the vehicle's permanent record.

When you sell the car, that history transfers to the new owner and affects resale value. Mileage discrepancies and service patterns follow the VIN to the next owner.

#OPSEC365

#OPSEC365 184/365 Hotel rooms are a standard target for technical ...

2026-09-21T09:56:19Z

#OPSEC365 184/365

Hotel rooms are a standard target for technical surveillance.

Surveillance teams operating in an area choose hotels for privacy of movement. From the target's perspective: rooms change occupants daily, maintenance provides routine access cover, and any prior occupant had unrestricted time inside.

#OPSEC365 183/365 Sharing streaming credentials merges behavioral ...

2026-09-20T09:00:49Z

#OPSEC365 183/365

Sharing streaming credentials merges behavioral records under one identifier.

The military term is the mosaic effect: unremarkable data points combine to reveal health, political views, and psychological patterns. Shane Harris's The Watchers describes analysts wanting 'what they bought, what they read, where they traveled.' Your streaming history is the modern version.

Use a separate account per household member so records don't merge.

#OPSEC365

#OPSEC365 182/365 Your VPN provider sees everything your ISP ...

2026-09-19T09:48:46Z

#OPSEC365 182/365

Your VPN provider sees everything your ISP would have seen. You moved the trust, not the exposure. In 2020, seven "no-log" VPN providers leaked 1.2TB of user data including connection logs they claimed not to keep.

Choose a VPN based on jurisdiction, independent audits, and revenue model.

#OPSEC365

#OPSEC365 181/365 Audio watermarks can identify who leaked media. ...

2026-09-18T09:24:51Z

#OPSEC365 181/365

Audio watermarks can identify who leaked media.

Netflix, Disney+, and movie studios embed inaudible watermarks in streaming audio that identify your account. If you record and share the content, the watermark traces the leak back to your specific stream.

Netflix embeds per-stream watermarks. Sharing a recording identifies your account to the millisecond.

#OPSEC365

#OPSEC365 180/365 HUMINT collectors call it apparent withdrawal. ...

2026-09-17T09:06:16Z

#OPSEC365 180/365

HUMINT collectors call it apparent withdrawal. The collector signals the conversation is ending, releases tension, then drops the real question as an afterthought. "One last thing before I let you go..."

Your guard drops because the pressure seemed over. The question that follows is the one they came for. The entire preceding conversation was setup.

#OPSEC365 179/365 HUMINT is the collection discipline most people ...

2026-09-16T09:38:01Z

#OPSEC365 179/365

HUMINT is the collection discipline most people forget to model against. Your adversary doesn't need to hack your devices if they can call your former employer, ask your neighbors, or socially engineer your friends for your new address.

Military OPSEC doctrine explicitly lists human intelligence as a primary threat vector. Your digital defenses are irrelevant if your human network leaks.

#OPSEC365

#OPSEC365 178/365 Thermostat data reveals when your home is ...

2026-09-15T09:22:53Z

#OPSEC365 178/365

Thermostat data reveals when your home is occupied.

Smart thermostats from Nest, Ecobee, and Honeywell detect occupancy through sensors and adjust temperature accordingly. That data flows to the cloud. The pattern of your home heating and cooling maps exactly when someone is home and when the house is empty.

Nest knows when your house is empty because occupancy sensors feed the algorithm. That data sits on Google's servers.

#OPSEC365

Nostr event nevent1qqsdp0smrdt32jyfkndj83ndt02rnezzzw9treeqwjw6jfy7h929fzqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s7hyf2d

2026-09-14T13:27:32Z

https://youtu.be/vcg9eMh1Uuw

#OPSEC365 176/365 Pregnancy and fertility apps share your most ...

2026-09-13T09:27:37Z

#OPSEC365 176/365

Pregnancy and fertility apps share your most intimate health data.

Flo, Ovia, and similar period tracking apps have been caught sharing data with Facebook and marketing partners. When Roe v. Wade was overturned, concerns emerged about this data being used for prosecution.

Review privacy settings on any health tracking apps that collect reproductive data.

#OPSEC365