#OPSEC365 133/365 Political petition signatures are often public records. Ballot initiatives, recall campaigns, and referendums require verified signatures. In many states, the full list of signers including names and addresses is available to journalists, researchers, and opponents of the measure you supported. Before you sign a political petition, ask whether the signature list will be public. #OPSEC365

RandomX turned every Ryzen CPU into a mining rig and made Bitmain's R&D department irrelevant.

#OPSEC365 132/365 Your phone's location is tracked by cell towers even when GPS is off. Carriers log which towers your phone connects to, triangulating your position to within a few hundred meters. This data is retained for years and accessed by law enforcement tens of thousands of times annually through court orders, and sometimes without them. Your carrier has logged your location continuously since the day you activated the SIM. #OPSEC365

#OPSEC365 131/365 HOA records contain more about you than you'd expect. Meeting minutes mentioning disputes, violations you've received, assessments you've paid or contested, architectural changes you've requested. Neighbors can often access these records. In legal disputes, they're discoverable. If you live in an HOA community, find out what records exist about your property and activities. #OPSEC365

Jerry finally has a campaign that actually works, because privacy sells itself when everything else is compromised.

#OPSEC365 130/365 Shostack and the Verizon RISK model organize adversaries into four categories: organized crime (financial), state-affiliated (political), activists (ideological), personal adversaries (relational). Each has different targets, techniques, and timelines. One generic threat model cannot cover all four. #OPSEC365

#OPSEC365 129/365 Medical devices transmit health data you might not realize is being collected. CPAP machines report your sleep patterns to insurance companies who verify usage for coverage. Insulin pumps log glucose readings and dosing. Pacemakers store cardiac data accessible to manufacturers and doctors. This data can be subpoenaed and has been used in criminal cases. Understand what data your medical devices collect and who has access to it. #OPSEC365

Rowhammer: flipping bits in DRAM by repeatedly accessing adjacent memory. "We show that accessing DRAM at high frequency can cause bit flips in nearby rows, allowing privilege escalation." Flipping Bits in Memory Without Accessing Them: An Experimental Study of DRAM Disturbance Errors by Yoongu Kim et al. (2014) https://users.ece.cmu.edu/~yoonguk/papers/kim-isca14.pdf

#OPSEC365 128/365 Shipping notification services know your address and delivery patterns. UPS My Choice, FedEx Delivery Manager, and USPS Informed Delivery centralize package tracking. They see what you're ordering, from whom, how often, and your home address. Sign up once and they have a unified view of your receiving habits. Even if you only use one of them, opting in puts your address into another marketing database. #OPSEC365

Real fuck you money doesn't ask permission from exchanges, doesn't report to the IRS, doesn't get blacklisted by Chainalysis, and doesn't care what any government thinks about your transactions. Buy Monero

gTLDs get seized. Darkwebdaily.live is dead. Long live

darknetlist.is — live tor link directory

A Tor link directory rebuilt every thirty minutes from a fresh SOCKS circuit. Static HTML, readable on Tor Browser at the Safest setting.

#OPSEC365 127/365 When you upload your resume to job boards, it enters databases you'll never fully escape. Indeed, Monster, ZipRecruiter, and countless smaller boards retain resumes indefinitely. That version of your resume from 2015 with your old address and phone number still exists somewhere. Recruiters buy access to search these archives. The version with your old address and phone number is still in job board archives from years ago. #OPSEC365