Nostr notes by SamBent

Nostr event nevent1qqs2qug0vny3eq908m27dgywjjhdszpnne359773rdpquuvlwmdt5sszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s9y2fxs

2026-10-16T19:08:56Z

#OPSEC365 209/365 Location stickers on social media stories ...

2026-10-16T09:51:26Z

#OPSEC365 209/365

Location stickers on social media stories reveal where you are in real time.

Instagram and Snapchat location tags show your current location to everyone viewing your story. Unlike posts, stories broadcast where you are right now, not where you were last week. Check-ins announce your presence to anyone following you.

Anyone watching can screenshot the tag before the story expires.

#OPSEC365

Nostr event nevent1qqs0psf49msxz7nrmtkj8nmmlr5a37wdjkh687lm9n2dvv0f6gluk2czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8shrsyv9

2026-10-15T19:04:35Z

https://youtu.be/2yw_fwoKXBM

Nostr event nevent1qqsgrdjrapm0e3uv07kdxx69lkte4l2lhms8c8ufws7hj279j0ugxhczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sytevq7

2026-10-15T13:19:10Z

https://youtu.be/9csp-sQrKnU

#OPSEC365 208/365 Remote work monitoring software may be tracking ...

2026-10-15T09:56:11Z

#OPSEC365 208/365

Remote work monitoring software may be tracking more than you realize.

Hubstaff, Time Doctor, ActivTrak, and similar tools capture screenshots, track keystrokes, monitor application usage, and sometimes record through webcams. Working from home with company monitoring means your employer can see everything on your work device.

Ask your employer what monitoring software runs on company devices and what it captures.

#OPSEC365

Every red flag in a toxic relationship is standard operating ...

2026-10-14T19:48:51Z

Every red flag in a toxic relationship is standard operating procedure for the federal government.

Nostr event nevent1qqsw4kxvka74xs5rx63dy32e0hv3asumgywtqc2dqvff36xuhkqdpsgzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sfe5nqs

2026-10-14T13:27:51Z

https://youtu.be/moH5DkuAFiQ

#OPSEC365 207/365 Lockheed Martin's Cyber Kill Chain breaks ...

2026-10-14T09:27:22Z

#OPSEC365 207/365

Lockheed Martin's Cyber Kill Chain breaks an adversary's progression into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives.

Most people only think about the final stages. By the time you notice, the adversary has been in reconnaissance for weeks.

Map your environment at the reconnaissance stage, not after the exploit lands. #OPSEC365

Nostr event nevent1qqsggq2q6vyrxvzw340jmss7ng7tcc9dgfxzkt8gpjknx3y0pd65a8gzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s5auuv0

2026-10-13T19:28:00Z

https://youtu.be/pZiG8r-diTM

Nostr event nevent1qqsvfahgcw9zy56hh3kgjykzgn2hh4vw0dqgjzssztphangajhqfseszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s5ny2d3

2026-10-13T13:28:34Z

https://youtu.be/Nt8tMiYo4PA

#OPSEC365 206/365 In 1991, P&G suspected a leak to the Wall ...

2026-10-13T09:13:19Z

#OPSEC365 206/365

In 1991, P&G suspected a leak to the Wall Street Journal. One grand jury subpoena to Cincinnati Bell swept every call from Cincinnati to WSJ's offices over months. Tens of millions of records came back, none belonging to a named suspect.

Grand jury subpoenas for phone records require no probable cause and no narrow targeting. The P&G case was widely reported by mainstream press after journalist outrage forced disclosure.

Nostr event nevent1qqst4mggrkujaulkthmct5tncpgptlhrklsfjl98dwgvccgkvrc8s4czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8schu7ct

2026-10-12T19:13:02Z

https://youtu.be/6aYWzhSl_TE

Nostr event nevent1qqs08dqf64ras2p9xjqrfnfafgseduuajzjqvhzsyk32ce8n2ndljyqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ss935sa

2026-10-12T13:32:11Z

https://youtu.be/xIquTIykpQM

#OPSEC365 205/365 Your neighbors can tell when your devices are ...

2026-10-12T09:56:31Z

#OPSEC365 205/365

Your neighbors can tell when your devices are active on WiFi.

A neighbor with passive monitoring sees your access point's beacon frames, the rough timing of connected-device activity, and changes in your network footprint as devices come and go. Modern phones randomize their MAC in probe requests and skip broadcasting saved SSIDs, so the phone leaks less than older posts suggest. The access point still gives plenty away.

#OPSEC365

Nostr event nevent1qqsp5rntztm8hcr6vxqylhz8ty4g2xcuz400wgkfp9mzj5d6defskfczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sjwwdym

2026-10-11T19:58:12Z

https://youtu.be/iRJPGu7-USI

Nostr event nevent1qqsxwkndqp7jx7fxa4emv4que5samgfs8we405dnvf20l5l84yg5zvqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sxt2x8a

2026-10-11T13:54:47Z

https://youtu.be/MdG46N_Z-Io

#OPSEC365 204/365 Sports betting apps collect extensive financial ...

2026-10-11T09:14:48Z

#OPSEC365 204/365

Sports betting apps collect extensive financial and behavioral data.

DraftKings, FanDuel, and state gambling apps require identity verification including SSN, track your betting patterns, and retain detailed financial records. This data reveals your income level, risk tolerance, and potentially problematic behavior patterns.

State gambling regulators share player data with law enforcement. The financial records are subpoenable.

#OPSEC365

Nostr event nevent1qqs0ekaazvpkm4c5yjlqn3wvhp7nhkumxw6dfcf3d0erlwhuhk4fvzczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ssz3vww

2026-10-10T19:54:40Z

https://youtu.be/U_6LZSd0KFk

Nostr event nevent1qqs2mh5c0ept870qrv6plsq94rma7c3hy6d7kve0mez4j4m2vn4dchczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s60pjue

2026-10-10T13:07:58Z

https://youtu.be/yWgwm2IqMqU

#OPSEC365 203/365 Wedding websites broadcast personal details to ...

2026-10-10T09:24:44Z

#OPSEC365 203/365

Wedding websites broadcast personal details to anyone who finds them.

The Knot, Zola, and personal wedding sites include full names, dates, venues, registries linking to home addresses, and often how the couple met. These sites are indexed by search engines and rarely secured with passwords.

The full names, venues, and registries stay publicly searchable for years.

#OPSEC365

Nostr event nevent1qqsga53m5uajapw7q6y6zm6zsfnktsgjqf87xu5zvq94v53lpcucmzszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slgt8hw

2026-10-09T19:39:57Z

https://youtu.be/DD4GcBgSBVs

Nostr event nevent1qqsx2gfkjz303vhdqqf9w5mvlz9zuenzc6yqla9rg6guyx8lpvaqeeczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sgcgyea

2026-10-09T13:05:35Z

https://youtu.be/TdulsXno-Tw

#OPSEC365 202/365 In 1980 a Los Alamos scientist visited a ...

2026-10-09T09:19:08Z

#OPSEC365 202/365

In 1980 a Los Alamos scientist visited a Chinese institute. He deflected classified questions for hours. They threw a cocktail party in his honor: toasts, applause, drinks. After enough rounds he offered an analogy about neutron bomb thresholds.

Hadnagy documents this case. The alcohol, the flattery, and the pressure of being toasted each lowered the scientist's threshold one step at a time. Conferences and happy hours are collection environments.

Nostr event nevent1qqs0ne0cmslpdtcwppdu9drnvwu9nwz70880ms69zdp7t2cl2fkhhmszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8ssjcgys

2026-10-08T19:56:38Z

https://youtu.be/Y5GrbhB2HHQ

Nostr event nevent1qqsvd8xvu3ze4hwncrw3n0j9xvu6kwjfy3sdwg4ltrcaxm6ylfrahlszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8stesta4

2026-10-08T13:13:57Z

https://youtu.be/y6SaXUUxMVU

#OPSEC365 201/365 Timestamps reveal your timezone regardless of ...

2026-10-08T09:30:12Z

#OPSEC365 201/365

Timestamps reveal your timezone regardless of what you claim.

When you post at what you say is 9am but the metadata shows UTC offset, anyone can calculate your actual timezone. Photo timestamps, email headers, social media posts all carry timezone information. Someone tracking you can determine your general location from when you're active.

Consistent 3am activity on a US-based account suggests a different timezone than the one you claim.

#OPSEC365

Nostr event nevent1qqszd4lnqqc9sh4th9yx60ydvthchxxh9007wvaexvwcg8etqs0yueqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8s7ywxt6

2026-10-07T19:06:02Z

https://youtu.be/lxNOpIwjTxo

Nostr event nevent1qqs9gsxqn08cn2erpulh39ptfq68qnyhdqe40qq8nqxe9aepqjxdf2czyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sr2vadd

2026-10-07T13:15:33Z

https://youtu.be/dOrjOPBRcf4

#OPSEC365 200/365 Forwarded emails often contain more metadata ...

2026-10-07T09:17:54Z

#OPSEC365 200/365

Forwarded emails often contain more metadata than the person forwarding intended to share.

Email headers include the original sender's IP address, email client, timezone, and the full chain of who received and forwarded the message. The person you forward to can extract information about everyone in the thread.

Check email headers before forwarding sensitive messages and consider copying content to a new email instead.

#OPSEC365

Nostr event nevent1qqs8newf450x2prg5knfx640jurgnzzrkxnurf5l82w3n2n2dajx5fqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8saef7l5

2026-10-06T19:05:04Z

https://youtu.be/Vxplqgrs3bk

Nostr event nevent1qqsvz543mmptdrwangacl7emmysdt7rl6xxuuk3x5v7qfwzvadm9dlczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slcvt74

2026-10-06T13:36:58Z

https://youtu.be/Ofm0xSD6nq0

#OPSEC365 199/365 Under 18 U.S.C. §3123, an investigator ...

2026-10-06T09:15:19Z

#OPSEC365 199/365

Under 18 U.S.C. §3123, an investigator certifies only that information 'is relevant to an ongoing criminal investigation.' Basic toll records come by subpoena. No warrant. No notification.

Court supervision ends when the order issues. This is standard procedure practiced by every federal investigative agency.

Nostr event nevent1qqs8kjk2ltu784zyjvc3v7n5hpm4g7fwsmm395cjfp3r3vzzfacyghszyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8spgqwef

2026-10-05T19:32:50Z

https://youtu.be/fGIWOTXTfHw

Nostr event nevent1qqsr0dc9gvrcrvp3zssmxk5u74nd6klvpxulfntt3zftdnl3up2y2vczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8smxfr8g

2026-10-05T13:52:24Z

https://youtu.be/_NY3h-0c5Sg

#OPSEC365 198/365 Digital receipts map your purchase history more ...

2026-10-05T09:26:07Z

#OPSEC365 198/365

Digital receipts map your purchase history more precisely than paper ever could.

Email receipts are searchable, timestamped, and never lost in a drawer. That complete purchase history going back years reveals your financial situation, preferences, and lifestyle in fine detail to anyone who accesses your email.

Your inbox is a complete purchase history. Anyone with access to your email has access to everything you've bought.

#OPSEC365

#OPSEC365 197/365 Public records don't expire and they ...

2026-10-04T09:04:54Z

#OPSEC365 197/365

Public records don't expire and they don't forget.

Every property you've owned is in the county assessor's database with your name and address. Business registrations list you as agent. A dismissed court case is still indexed on PACER and CourtListener. A lien from 2011 is still there.

Aggregator copies survive even after an official record is sealed.

#OPSEC365

Nostr event nevent1qqsqtaezrc5yau4dam3496x7q87zsnd6c9pjrwpq6q3lfuyn0g79pdqzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8slvcvdu

2026-10-03T13:42:57Z

https://youtu.be/f-QdqKS61Jg

Nostr event nevent1qqs2jyzyjku6c9rv5cc0fkpmgcgmllc597499k2quhlwrhftupyqdsczyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8sxmrf65

2026-10-02T13:01:20Z

https://youtu.be/r57V4-3gZws

Nostr event nevent1qqs06kcnskwfy24747w0jhjnm633p690nucjtdxggm99rs7j6lw0u2szyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8snhv30n

2026-10-01T13:59:07Z

https://youtu.be/VZ-7t1fN7eI

#OPSEC365 189/365 Your Bluetooth device name is a persistent ...

2026-09-26T09:50:02Z

#OPSEC365 189/365

Your Bluetooth device name is a persistent surveillance identifier.

In a noted ISS exercise, Jenkins scanned Bluetooth signals on a train and noted five device names. An hour later at an art gallery, one name reappeared. A monitoring operator was on the train.

Nostr event nevent1qqs9h9sqnjy8nzu8k83yf7c0yls6d88k9fpzqeuae7hhasr0p8eft8gzyqncdsf5zjzn0233gg3zenxpkm70fp3kg09832tztkg6496g6rj8squzeuk

2026-09-04T19:03:59Z

https://youtu.be/nmkk_bmohJ0

The dosage increases every year and nobody questions the ...

2026-08-28T19:52:07Z

The dosage increases every year and nobody questions the prescription because questioning it is the first symptom they trained out of you.

Researchers pulled a 256-bit key out of a device by filming its ...

2026-08-27T19:56:09Z

Researchers pulled a 256-bit key out of a device by filming its power LED. The status light flickers with the chip's power draw, and that leaks the key. A full ECDSA key was recovered from 16m away through a window via a hijacked camera. https://www.nassiben.com/video-based-crypta

And suddenly I'm glad that I'm not going to defcon this ...

2026-08-13T13:40:41Z

And suddenly I'm glad that I'm not going to defcon this year.

I have no issue waiting and watching the talks to avoid shit like this.

How it started:

"The Electronic Frontier Foundation was formed in 1990 by John Gilmore, John Perry Barlow and Mitch Kapor.

The foundation was a response to concerns that law enforcement and policymakers lacked sufficient knowledge

about the internet to make decisions or policies that respected people's rights."

How it's going: "get your purple beard done, and let's talk about compliance at fedcon".

Switzerland's government is forcing every VPN and encrypted ...

2025-11-18T03:00:10Z

Switzerland's government is forcing every VPN and encrypted messenger with 5,000+ users to

collect your passport and decrypt your communications on demand.

This bypasses their famous direct democracy entirely.

Watch: https://youtu.be/6aYWzhSl_TE