#OPSEC365 234/365 Dental records are used for identification when other methods fail. X-rays, fillings, and unique dental work patterns can identify remains when fingerprints and DNA aren't available. Your dentist maintains these records indefinitely. Records often stay in your former dentist's office long after you switch providers. #OPSEC365

#OPSEC365 233/365 Electric vehicle charging stations log your vehicle and payment information. ChargePoint, Electrify America, and Tesla Superchargers all track which vehicle charged, when, and where. This creates a movement record tied to your account. Combined with other data, your EV's charging history maps your regular locations and travel patterns. EV charging records have been used in divorce proceedings to dispute claimed whereabouts. #OPSEC365

#OPSEC365 232/365 Schools collect extensive data about your children. Student information systems track grades, attendance, behavior incidents, health records, family contact information, and sometimes biometric data for lunch programs. This data is shared with district offices, state agencies, and ed-tech vendors with varying privacy practices. Ask your school district what data they collect and who has access to it. #OPSEC365

#OPSEC365 231/365 Restaurant reservation apps track where and when you dine. OpenTable, Resy, and Yelp Reservations log your dining history, party size, and timing. This feeds profiles sold to marketers. Your patterns reveal spending habits, food preferences, and potentially who you're meeting based on party size changes. Reservation history reveals spending, dining companions inferred from party size, and weekly patterns. #OPSEC365

Civil forfeiture let's them keep up to 80% of what they take from you without ever charging you. He only got charged because he didn't share.

#OPSEC365 230/365 Package dimensions and weight reveal clues about contents. Shipping carriers photograph packages and log dimensions. That distinctive size and weight pattern for certain products is recognizable. Anyone intercepting shipping data can infer what you're receiving without opening the box. A package's dimensions and weight are logged before it arrives. The contents are often inferrable before it's opened. #OPSEC365

#OPSEC365 229/365 Cover stories for compartmentalized identities must be consistent and memorable. If you maintain separate identities for different purposes, the details need to hold up under casual questioning. Birthdate, hometown, background details should be consistent every time. Inconsistency is the first sign that something isn't what it appears. For any identity you maintain, document the details somewhere secure so you don't contradict yourself. #OPSEC365

#OPSEC365 228/365 "Sign in with Google" is identity attribution. Every OAuth call sends Google a timestamp, target service, device fingerprint, and IP. Across 20 services that maps your digital life. Cronk's anonymization spectrum: Identified data carries unique identifiers linkable across databases. SSO creates exactly that. MITRE ATT&CK T1585: adversary personas span sites. SSO builds that profile for Google. Use unique credentials per service. #OPSEC365

#OPSEC365 227/365 Applying for a replacement Social Security card creates a government record of your current address. Every interaction with the Social Security Administration updates your file. The card replacement request documents your location at the time of application. This feeds into government databases used for various purposes. Every federal interaction updates a file. Collectively they build an address history that follows you. #OPSEC365

#OPSEC365 226/365 Deleting files before disposing of a computer doesn't remove them from the drive. Standard deletion just removes the file system pointer while the data remains until overwritten. Anyone with recovery tools can retrieve files from donated, sold, or discarded computers. Your old tax returns, photos, and documents are likely recoverable. Wipe drives before disposal: DBAN for HDDs, the vendor's secure-erase for SSDs. #OPSEC365

#OPSEC365 225/365 Disabling read receipts doesn't always prevent the sender from knowing you read the message. Some messaging apps send read receipts at the protocol level regardless of user settings. Others show typing indicators, presence status, or last seen timestamps that confirm you're active. The perception of privacy from turning off receipts may be false. Test whether your messaging apps respect receipt settings in practice. #OPSEC365

Proton put's out a memo... - 'it's a heat piece'. - ' it's a psyop'. - 'marxist/communist'. - '404...outlet for disgruntled employees'. Interesting reactions.

#OPSEC365 224/365 Smartwatch health data reveals intimate patterns about your body. Heart rate variability, sleep stages, menstrual cycle predictions, stress levels, and workout intensity are all captured by Apple Watch, Fitbit, and Garmin. This biometric data syncs to cloud servers open to the company and to subpoenas. What your wrist records about your body is no longer only yours. #OPSEC365

Wyoming charters banks that can't lend deposits, wrote the first DAO law, and files LLCs nobody's name is on. It's also the top US state for "monero" searches over five years, with 588,753 people to do it. Not a coincidence I'd bet against.

#OPSEC365 223/365 Chip cards are more secure but just as trackable as magnetic swipe. EMV chips prevent card cloning at the point of sale, but the transaction still goes through the payment network with your card number, merchant details, and timestamp. The security improvement doesn't affect the privacy implications of card-based payments. Don't confuse chip security with transaction privacy. #OPSEC365

#OPSEC365 222/365 Airplane mode doesn't disable all radios on all devices. WiFi and Bluetooth can be re-enabled manually while airplane mode is active, and often are by default. GPS is passive (receive-only) and is never disabled by airplane mode. Cell tower location can still be cached. Verify which radios your specific device silences before relying on it. #OPSEC365

#OPSEC365 221/365 Phone motion sensors leak more than you would expect. Academic research shows a phone's gyroscope and accelerometer can infer keystrokes typed on that same phone, identify a person by their walking gait, and pick out individual speakers in a room. Most of this stays lab-grade, but motion sensors get far less permission scrutiny than the mic or camera that would do the same job more directly. Treat motion sensor access like microphone access. #OPSEC365