SA
Sam Bent
Agorist. Counter-economist. Privacy maximalist. Student of OPSEC. Anti-authoritarian. Free speech absolutist. Logician. Ex-Darknet Vendor. Youtuber.
#OPSEC365 230/365
Package dimensions and weight reveal clues about contents.
Shipping carriers photograph packages and log dimensions. That distinctive size and weight pattern for certain products is recognizable. Anyone intercepting shipping data can infer what you're receiving without opening the box.
A package's dimensions and weight are logged before it arrives. The contents are often inferrable before it's opened.
#OPSEC365
#OPSEC365 229/365
Cover stories for compartmentalized identities must be consistent and memorable.
If you maintain separate identities for different purposes, the details need to hold up under casual questioning. Birthdate, hometown, background details should be consistent every time. Inconsistency is the first sign that something isn't what it appears.
For any identity you maintain, document the details somewhere secure so you don't contradict yourself.
#OPSEC365
#OPSEC365 228/365
"Sign in with Google" is identity attribution.
Every OAuth call sends Google a timestamp, target service, device fingerprint, and IP. Across 20 services that maps your digital life. Cronk's anonymization spectrum: Identified data carries unique identifiers linkable across databases. SSO creates exactly that.
MITRE ATT&CK T1585: adversary personas span sites. SSO builds that profile for Google.
Use unique credentials per service. #OPSEC365
#OPSEC365 227/365
Applying for a replacement Social Security card creates a government record of your current address.
Every interaction with the Social Security Administration updates your file. The card replacement request documents your location at the time of application. This feeds into government databases used for various purposes.
Every federal interaction updates a file. Collectively they build an address history that follows you.
#OPSEC365
