About 10 months ago I paid $1,000 for this.

Prices are insane.

#OPSEC365 236/365

Messaging apps harvest phone numbers from your contacts to build user databases.

When Signal, WhatsApp, or Telegram checks which of your contacts use the service, they're uploading phone numbers to their servers. Even if your contacts never joined, their numbers exist in the platform's database because you uploaded your address book.

Every contact you upload gives that platform the phone number of someone who never agreed to be in their database.

#OPSEC365

Monero vs zcash

It's not even close.

#OPSEC365 235/365

OPSEC countermeasures either eliminate a vulnerability or reduce risk to acceptable level. Doctrine selects them on cost-benefit. Some vulnerabilities can't be eliminated.

Document them so you consciously accept the residual risk rather than unknowingly carry it. Conscious acceptance of residual risk is a legitimate OPSEC outcome; carrying risk you never evaluated is not.

Audit your residual-risk list at least annually. #OPSEC365

#OPSEC365 234/365

Dental records are used for identification when other methods fail.

X-rays, fillings, and unique dental work patterns can identify remains when fingerprints and DNA aren't available. Your dentist maintains these records indefinitely.

Records often stay in your former dentist's office long after you switch providers.

#OPSEC365

#OPSEC365 233/365

Electric vehicle charging stations log your vehicle and payment information.

ChargePoint, Electrify America, and Tesla Superchargers all track which vehicle charged, when, and where. This creates a movement record tied to your account. Combined with other data, your EV's charging history maps your regular locations and travel patterns.

EV charging records have been used in divorce proceedings to dispute claimed whereabouts.

#OPSEC365

#OPSEC365 232/365

Schools collect extensive data about your children.

Student information systems track grades, attendance, behavior incidents, health records, family contact information, and sometimes biometric data for lunch programs. This data is shared with district offices, state agencies, and ed-tech vendors with varying privacy practices.

Ask your school district what data they collect and who has access to it.

#OPSEC365

#OPSEC365 231/365

Restaurant reservation apps track where and when you dine.

OpenTable, Resy, and Yelp Reservations log your dining history, party size, and timing. This feeds profiles sold to marketers. Your patterns reveal spending habits, food preferences, and potentially who you're meeting based on party size changes.

Reservation history reveals spending, dining companions inferred from party size, and weekly patterns.

#OPSEC365

Civil forfeiture let's them keep up to 80% of what they take from you without ever charging you.

He only got charged because he didn't share.

#OPSEC365 230/365

Package dimensions and weight reveal clues about contents.

Shipping carriers photograph packages and log dimensions. That distinctive size and weight pattern for certain products is recognizable. Anyone intercepting shipping data can infer what you're receiving without opening the box.

A package's dimensions and weight are logged before it arrives. The contents are often inferrable before it's opened.

#OPSEC365

#OPSEC365 229/365

Cover stories for compartmentalized identities must be consistent and memorable.

If you maintain separate identities for different purposes, the details need to hold up under casual questioning. Birthdate, hometown, background details should be consistent every time. Inconsistency is the first sign that something isn't what it appears.

For any identity you maintain, document the details somewhere secure so you don't contradict yourself.

#OPSEC365