#OPSEC365 126/365 Your LinkedIn profile is a dossier you wrote about yourself. Employment history with dates, education, certifications, skills, connections, endorsements, group memberships, and activity patterns. Recruiters and employers see it. So do social engineers, competitive intelligence firms, and anyone researching you professionally. View your LinkedIn profile as if you're trying to learn about a stranger and see what stands out. #OPSEC365

#OPSEC365 125/365 Corporate wellness programs track your health data in exchange for insurance discounts. Step challenges using company fitness trackers, health assessments, biometric screenings, and voluntary surveys all feed databases your employer and their insurance partners can access. The incentives aren't free money, they're payment for your health data. Employers on self-insured plans have incentives to know which employees are sick. #OPSEC365

Power analysis side-channel attacks on cryptographic hardware. "Measuring power consumption during cryptographic operations can reveal secret keys." Differential Power Analysis by Paul Kocher, Joshua Jaffe, and Benjamin Jun (1999) https://www.paulkocher.com/doc/DifferentialPowerAnalysis.pdf

Rome fell when the government debased the currency and tracked citizens through tax collectors, two thousand years later, CBDCs promise to automate both at scale, and Monero is the only exit.

#OPSEC365 124/365 RFID chips in your wallet and pocket can be scanned without your knowledge. Transit cards, hotel keycards, office badges, and many credit cards hold RFID or NFC chips readable at short range with a $30 reader. Walk past one and the unique ID gets logged with no visible interaction. US e-passports differ: shielded in a metal cover, locked by an optical key printed inside, unreadable while closed. The rest of your pocket isn't. #OPSEC365

Put your tax bill next to what you actually got for it and tell me that's a fair deal with a straight face.

Hindsight hits different when you're reading your own transaction history in a federal indictment.

Acoustic cryptanalysis. Extracting keys by listening to CPUs. "Different operations produce different acoustic signatures that can reveal secret keys." RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis by Daniel Genkin et al. (2013)

Acoustic cryptanalysis

Buy direct from the rancher and everyone between you and him loses their cut. That's why they made it difficult.

#OPSEC365 122/365 Private jets and most aircraft can be tracked in real time by anyone. ADS-B transponders broadcast location data that hobbyist receivers capture and publish on sites like FlightAware and ADS-B Exchange. Elon Musk's jet, Taylor Swift's jet, and probably the aircraft you flew on last week are all trackable by anyone curious enough to look. Search a tail number on flightaware.com and see where that plane has been. #OPSEC365

#OPSEC365 121/365 Federal political donations over two hundred dollars become permanent public records. The FEC database lists your name, address, employer, and occupation alongside every federal political contribution you make above the threshold. This data is searchable by anyone and often integrated into data broker profiles. Federal political donations above $200 are permanently public record: name, address, employer, and amount, searchable by anyone. #OPSEC365

Monero's privacy is only as decentralized as its node network, and every node you don't run is one more opportunity for a honeypot operator to correlate metadata, be the infrastructure you want to exist.

The Downfall of the EFF is sad to see.

#OPSEC365 120/365 Photos of your pets often reveal your location and routine. That daily walk photo has metadata showing your neighborhood route. The vet check-in confirms your area. The microchip registration contains your address. Pet accounts geotagged at dog parks reveal where you spend weekends. Pet photos carry the same GPS metadata as anything else you post, plus the pattern of your walking routes and vet schedule. #OPSEC365

#OPSEC365 119/365 Home security companies know when your alarm is armed, which doors open, and when motion is detected. ADT, Ring, SimpliSafe, and others store activity logs on their servers. Employees can access footage and sensor data. Law enforcement requests it regularly. One ADT technician accessed 220 customers' camera feeds over 9,600 times before anyone noticed. A single insider at a single vendor. #OPSEC365

Opening port 18080 lets you seed the blockchain like a torrent, and the network gets stronger every time someone does.