#OPSEC365 139/365
Subscription boxes reveal your interests and spending patterns.
Monthly deliveries of beauty products, pet supplies, snacks, or hobby items are logged by payment processors, shipping services, and the companies themselves. The pattern of what you receive monthly builds a detailed consumer profile.
Every subscription box company you forgot to cancel still has your address on file and ships to it monthly.
#OPSEC365
#OPSEC365 138/365
One of the cleanest elicitation moves is the deliberate misstatement. The collector says something slightly wrong about your project. Your instinct is to correct them.
Hadnagy documents this: the correction gives accurate details and often reveals far more than the false claim was designed to extract. Your need to be accurate is weaponized against you.
#OPSEC365 137/365
Your car is a sealed room with a permanent microphone, persistent corporate connectivity, and a legal identity tied to the VIN.
BMW, GM OnStar, and Tesla process voice commands server-side. Queries are logged against your registration. NTTP 3-13.3M: protect your Critical Information List. What you discuss while driving belongs on it.
Cronk's SEPARATE strategy: isolate contexts by trust level. Your infotainment is not a secure comms environment. #OPSEC365
#OPSEC365 136/365
Security camera footage of you exists in dozens of databases.
Convenience stores, ATMs, gas stations, office buildings, and parking garages all record continuously. Most footage is overwritten in days or weeks, but clips of interest get saved indefinitely. You're recorded hundreds of times daily in any urban area.
Walk through your typical day and count how many cameras might have captured you.
#OPSEC365
#OPSEC365 135/365
Probate records reveal the details of estates and inheritances.
When someone dies, the probate process makes public their assets, debts, beneficiaries, and the distribution of their estate. Your inheritance appears in court records alongside the details of what everyone else received. Family financial structures become publicly documented.
If you've inherited assets through probate, search the court records and see what's public.
#OPSEC365
I find commercial, regulated, fake rebellion to be one of the most distasteful psyops.
People have fallen so far even acts of rebellion are corporatized, and state approved.
#OPSEC365 134/365
Vehicle registration renewals follow predictable annual patterns.
DMV records show when your registration expires, your address, vehicle details, and sometimes lien holder information. Registration renewal dates become predictable events in your administrative calendar, and the address on file is often your home.
Your vehicle registration address is in DMV records accessible to law enforcement and, in many states, to anyone who requests it.
#OPSEC365
GSM and cellular network security weaknesses.
"The GSM encryption algorithms can be cracked in real time with modest computing power."
A Practical Attack on GSM Authentication by various researchers (2010)
https://eprint.iacr.org/2010/428.pdf
#OPSEC365 133/365
Political petition signatures are often public records.
Ballot initiatives, recall campaigns, and referendums require verified signatures. In many states, the full list of signers including names and addresses is available to journalists, researchers, and opponents of the measure you supported.
Before you sign a political petition, ask whether the signature list will be public.
#OPSEC365