iiinova — where your digital self keeps evolving

Sam_Bent @doingfedtime.bsky.social · 21/09/2026

Reddit wipes accounts made over Tor or a VPN. A user they cannot track is a user they cannot sell. Your privacy lowers your resale value, so they delete you. youtu.be/TdulsXno-Tw

031

Sam_Bent @doingfedtime.bsky.social · 21/09/2026

Hotel room awareness: visual sweep on arrival: behind wall art, TV bezels, smoke detectors, power outlets. Check WiFi for rogue APs. Use the peephole cover. Assume hotel safes are accessible to staff. Sensitive calls happen outside the room.

000

Sam_Bent @doingfedtime.bsky.social · 21/09/2026

#OPSEC365 184/365 Hotel rooms are a standard target for technical surveillance. Surveillance teams operating in an area choose hotels for privacy of movement.

100

Sam_Bent @doingfedtime.bsky.social · 20/09/2026

The head of Paris cybercrime warned the state will prosecute developers who refuse to cooperate,even when they broke no law. "Do what I say or go to prison." That is extortion, and the prosecutor is the real criminal. youtu.be/Y5GrbhB2HHQ

000

Sam_Bent @doingfedtime.bsky.social · 20/09/2026

Shared credentials produce shared behavioral attribution. If someone else watches content on your account implying a medical condition or political leaning, the inference attaches to your record. Netflix data has already been used in civil litigation.

000

Sam_Bent @doingfedtime.bsky.social · 20/09/2026

#OPSEC365 183/365 Sharing streaming credentials merges behavioral records under one identifier. The military OPSEC term for this is the mosaic effect: unremarkable data points combine to reveal health, political views, and psychological patterns.

101

Sam_Bent @doingfedtime.bsky.social · 19/09/2026

A darknet market that pulls fonts and assets from Google and Cloudflare is bridging the exact thing you use Tor to escape. Correlation, browser exploits, traffic analysis, all on the menu. Why trust operators who think that is fine. youtu.be/y6SaXUUxMVU

000

Sam_Bent @doingfedtime.bsky.social · 19/09/2026

#OPSEC365 182/365 Your VPN provider sees everything your ISP would have seen. You moved the trust, not the exposure. In 2020, seven "no-log" VPN providers leaked 1.2TB of user data including connection logs they claimed not to keep.

011

Sam_Bent @doingfedtime.bsky.social · 18/09/2026

Facebook sold Onavo as a VPN that protects you. It was spyware that logged what apps teens ran. Apple threw it out of the store. The guy who ran that privacy team now builds Signal's backups. Same trick, new logo. youtu.be/lxNOpIwjTxo

010

Sam_Bent @doingfedtime.bsky.social · 18/09/2026

These forensic watermarks survive most audio processing including format conversion and recompression. They're designed to catch leakers. If you're tempted to record and share content from your accounts, know the resulting file may uniquely identify you as the source.

000

Sam_Bent @doingfedtime.bsky.social · 18/09/2026

#OPSEC365 181/365 Audio watermarks can identify who leaked media. Netflix, Disney+, and movie studios embed inaudible watermarks in streaming audio that identify your account. If you record and share the content, the watermark traces the leak back to your specific stream.

100

Sam_Bent @doingfedtime.bsky.social · 17/09/2026

"Just one more thing" is a recognized elicitation flag. So is a warm general conversation that lands on a precise operational question at the close. If you notice broad talk followed by a specific afterthought, treat it like the lead question. Because it is.

000

Sam_Bent @doingfedtime.bsky.social · 17/09/2026

#OPSEC365 180/365 HUMINT collectors call it apparent withdrawal. The collector signals the conversation is ending, releases tension, then drops the real question as an afterthought. "One last thing before I let you go..." Your guard drops because the pressure seemed over.

100

Sam_Bent @doingfedtime.bsky.social · 16/09/2026

Nobody funds a site like this out of thin air. It's the community, and it's the darknet markets it hosts ads for. Which is also the exact reason Hugbunter would catch a case. Pretending that's legal is delusional. youtu.be/Vxplqgrs3bk

000

Sam_Bent @doingfedtime.bsky.social · 16/09/2026

NTTP 3-13.3 places HUMINT alongside SIGINT and OSINT in adversary collection discipline assessments. For personal threat modeling: map everyone in your life who has access to your critical info and assess how easily they could be socially engineered.

000

Sam_Bent @doingfedtime.bsky.social · 16/09/2026

#OPSEC365 179/365 HUMINT is the collection discipline most people forget to model against. Your adversary doesn't need to hack your devices if they can call your former employer, ask your neighbors, or socially engineer your friends for your new address.

100

Sam_Bent @doingfedtime.bsky.social · 15/09/2026

Encryption alone is a knife against a drone strike. Technically armed, still finished. The real move is a decoy convincing enough to survive a raid while the truth leaves no fingerprint at all. youtu.be/Ofm0xSD6nq0

000

Sam_Bent @doingfedtime.bsky.social · 15/09/2026

Energy companies sometimes offer rebates for smart thermostats in exchange for access to usage data. Read the terms carefully. For thermostats you own, consider disabling occupancy features or using local-only devices.

000

Sam_Bent @doingfedtime.bsky.social · 15/09/2026

#OPSEC365 178/365 Thermostat data reveals when your home is occupied. Smart thermostats from Nest, Ecobee, and Honeywell detect occupancy through sensors and adjust temperature accordingly. That data flows to the cloud.

100

Sam_Bent @doingfedtime.bsky.social · 14/09/2026

A Milwaukee cop ran Flock cameras to stalk his ex 170 times in two months. An SF officer posted his surveillance flex on Instagram. This is the access model working as designed. youtu.be/fGIWOTXTfHw

000

Sam_Bent @doingfedtime.bsky.social · 14/09/2026

TPMS tracking is less common than license plate readers but the capability exists. Each sensor has a unique ID that persists until you replace the tires. While not a mainstream monitoring concern yet, researchers have demonstrated tracking vehicles using these signals.

010

Sam_Bent @doingfedtime.bsky.social · 14/09/2026

#OPSEC365 177/365 Tire pressure sensors broadcast your vehicle's presence. TPMS sensors in your tires transmit unique identifiers that can be read from nearby. Devices exist that log these IDs as vehicles pass, creating a movement record distinct from license plate readers.

110

Sam_Bent @doingfedtime.bsky.social · 13/09/2026

The state gave child attackers suspended sentences, then jailed the woman who called one of them a pig. Now the same people want to read every private message you send. Protecting children was never the point. youtu.be/_NY3h-0c5Sg

001

Sam_Bent @doingfedtime.bsky.social · 13/09/2026

Some apps have committed to not sharing data with law enforcement, but terms of service change and companies get acquired. Local-only tracking apps like Drip don't upload data to servers. For maximum privacy, use a calendar or notes app that syncs only to your own devices.

000

Sam_Bent @doingfedtime.bsky.social · 13/09/2026

#OPSEC365 176/365 Pregnancy and fertility apps share your most intimate health data. Flo, Ovia, and similar period tracking apps have been caught sharing data with Facebook and marketing partners. When Roe v. Wade was overturned, concerns emerged about this data being used for prosecution.

100

Sam_Bent @doingfedtime.bsky.social · 12/09/2026

Google Photos licenses your memories back to you until the day it decides not to. You rent access to your own data. youtu.be/KGaKGzGOGKg

000

Sam_Bent @doingfedtime.bsky.social · 12/09/2026

Attackers who compromise your email can search for reset emails to identify which services you use and then reset those passwords. Clear out old reset emails to reduce this attack surface. Enable two-factor authentication so email access alone can't compromise accounts.

000

Sam_Bent @doingfedtime.bsky.social · 12/09/2026

#OPSEC365 175/365 Password reset emails create a trail of your account activity. Every password reset request generates an email in your inbox and a log entry at the service. That trail shows when you got locked out, accounts you have, and roughly how you use them.

100

Sam_Bent @doingfedtime.bsky.social · 11/09/2026

They do not need to arrest you anymore. They just tell your bank you asked the wrong questions and your account disappears. A journalist in Germany learned this for doubting the lockdowns. Left wing, right wing, does not matter. youtu.be/vcg9eMh1Uuw

001

Sam_Bent @doingfedtime.bsky.social · 11/09/2026

Some petitions let you hide your signature from public view while still counting it. Read the privacy settings before signing. Your email address goes to the petition organizer and often to the platform's marketing partners.

010

Sam_Bent @doingfedtime.bsky.social · 11/09/2026

#OPSEC365 174/365 Online petitions link your name to political positions permanently. Change.org, MoveOn, and similar platforms collect and often publish signer names. That petition you signed in 2016 is still attached to your identity.

110

Sam_Bent @doingfedtime.bsky.social · 11/09/2026

The difference between a drug dealer and a pharmaceutical company is the pharmaceutical company donates to campaigns.

000

Sam_Bent @doingfedtime.bsky.social · 10/09/2026

The average person commits three felonies a day. Not because you're bad, but because the federal code is so vast and vague that Harvey Silvergate says compliance is impossible. You're already a criminal. They haven't picked you yet. youtu.be/RUxL-KMCeHk

011

Sam_Bent @doingfedtime.bsky.social · 10/09/2026

Plaid was acquired by Visa and is used by thousands of apps. Your financial data passing through these intermediaries creates additional breach surfaces. If you use aggregators, review what access you've granted and remove apps you no longer use.

000

Sam_Bent @doingfedtime.bsky.social · 10/09/2026

#OPSEC365 173/365 Financial aggregator apps have read access to all your bank accounts. Mint, YNAB, Copilot, and similar budgeting apps use Plaid or direct bank credentials to pull your complete transaction history. Every purchase, every deposit, every transfer goes through their servers.

100

Sam_Bent @doingfedtime.bsky.social · 09/09/2026

Protection means surveillance. Security means control. Lawful access means reading your stuff. They picked every word to hide the surveillance state sitting underneath it. youtu.be/TRnOVyh5hl4

000

Sam_Bent @doingfedtime.bsky.social · 09/09/2026

Snap Spectacles use a more visible ring of LEDs around the lens. Meta uses a single small dot, and v2 added a tamper interlock that blocks recording if the LED is obstructed. Aftermarket mods and tape covers have been documented.

000

Sam_Bent @doingfedtime.bsky.social · 09/09/2026

#OPSEC365 172/365 Smart glasses put always-on cameras at eye level in public spaces. Ray-Ban Meta glasses, Snap Spectacles, and similar devices record video and audio from the wearer's perspective. The people around them often do not realize they are being recorded.

100

Sam_Bent @doingfedtime.bsky.social · 08/09/2026

"Statists advocate creating a bigger criminal, a great monster institution which will terrify nearly everyone, innocent or guilty, into submission. This organization will extract some form of acceptance from its 'citizens' and yet plunder them at will (taxation)." — Agorist Primer

000

Sam_Bent @doingfedtime.bsky.social · 08/09/2026

Law enforcement pads every bust to make the headline bigger. One flip and the raid list writes itself. Nobody in that group needed to snitch on purpose. One scared person did it for them. youtu.be/CV5J-usji04

000

Sam_Bent @doingfedtime.bsky.social · 08/09/2026

Check your organization's data retention policy if you can find it. Assume anything written on corporate systems is permanent and discoverable. Personal conversations don't belong on work platforms despite retention settings. The delete button doesn't delete from backup systems.

000

Sam_Bent @doingfedtime.bsky.social · 08/09/2026

#OPSEC365 171/365 Work chat messages are retained longer than you think. Slack, Microsoft Teams, and corporate email have retention policies that keep everything for years. Legal holds during litigation preserve messages indefinitely.

100

Sam_Bent @doingfedtime.bsky.social · 07/09/2026

A stranger studies your entire posting history, then argues you into agreeing. One in five times it works. A targeting system wearing a username. youtu.be/f-QdqKS61Jg

000

Sam_Bent @doingfedtime.bsky.social · 07/09/2026

Username correlation is one of the most reliable OSINT pivots because people rarely vary their handles. An investigator who finds your Reddit username can likely find your Steam, your GitHub, and your decade-old forum posts.

000

Sam_Bent @doingfedtime.bsky.social · 07/09/2026

#OPSEC365 170/365 The username you picked in 2009 is still connecting your accounts today. Sherlock and Maigret query 1,000+ platforms simultaneously. If you used the same handle on Reddit, Steam, GitHub, and a forum from 15 years ago, tools like WhatsMyName surface all of it in minutes.

100

Sam_Bent @doingfedtime.bsky.social · 06/09/2026

There is no backdoor that only lets the good guys in. Weaken encryption for iCloud and you weaken it for criminal hackers and foreign spies too. The lock does not check a badge before it opens. youtu.be/7ZGNgt2levs

000

Sam_Bent @doingfedtime.bsky.social · 06/09/2026

Home Assistant running locally stores data you control. Cloud platforms like SmartThings, Google Home, and Alexa store interaction history on their servers. If you value privacy, local-only automation is possible but requires more technical setup.

000

Sam_Bent @doingfedtime.bsky.social · 06/09/2026

#OPSEC365 169/365 Smart home platforms log every command and interaction. Lights turned on, locks engaged, thermostats adjusted. The complete history of your home automation activity is recorded in the cloud. When you went to bed, when you left, how long you were gone.

100

Sam_Bent @doingfedtime.bsky.social · 05/09/2026

The sound of financial privacy working exactly as designed.

000

Sam_Bent @doingfedtime.bsky.social · 05/09/2026

Paper please would be a step up. Now it's app please. An agent looks at his phone, it says you're not a citizen, and your birth certificate means nothing. youtu.be/r57V4-3gZws

001