SamBent
Sam Bent

Agorist. Counter-economist. Privacy maximalist. Student of OPSEC. Anti-authoritarian. Free speech absolutist. Logician. Ex-Darknet Vendor. Youtuber.

Public Key

npub1y7rvzdq5s5m65v2zygkvesdkln6gvdjrefu2jcjajx4fwjxsu3uqyhd0r3

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsz0pkpxs2g2da2x9pzytxvcxm0eayxxepu579fvfwer25hfrgwg7qp8fmhxue69uhkvet9v3ejumn0wd68yctjvd5xjan9wvhxxmmd9ahx7ar9wvhhgun9dejxjmn89aex2ur0wd68xtm5dajxz7gpp4mhxue69uhkummn9ekx7mq7nynp8

Publishing to

feeds.nostrarchives.com/notes/trending/reposts/today

nos.lol

nostr.mom

Author Public Key

npub1y7rvzdq5s5m65v2zygkvesdkln6gvdjrefu2jcjajx4fwjxsu3uqyhd0r3

Show more details

Last Notes

2026-09-04 11:46:15 CEST

#OPSEC365 167/365
Essential Elements of Friendly Information (EEFI) is the military term for the specific questions your adversary is trying to answer about you. You don't protect everything. You protect what answers their collection requirements.
For DV survivors, the adversary EEFI is your location. For executives, it is your travel schedule. Defining EEFI for your own threat picture is a step most personal threat models skip entirely.
#OPSEC365

2026-09-01 21:29:22 CEST

The cryptography did its job here. This was a networking problem, and networking problems get patched.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/380d2c4fea6ce8d0.mp4

2026-09-01 15:58:45 CEST

https://youtu.be/dOrjOPBRcf4
https://media.sambent.dev/video/7cca23bbf322d5e4.mp4

2026-09-01 11:42:02 CEST

#OPSEC365 164/365
Event tickets are no longer anonymous.
Ticketmaster and AXS link tickets to your identity, track resales, and can invalidate tickets transferred outside their systems. Concert attendance creates a permanent record tied to your account. Some venues use facial recognition to match ticketholders at entry.
Ticketmaster has produced attendance records in federal investigations.
#OPSEC365

2026-08-29 21:26:40 CEST

Harmful to the banking system sounds like the best investment thesis available.
https://media.sambent.dev/img/afa09ad065d42fc1.jpg

2026-08-29 15:13:32 CEST

If this ever runs against you,
it is because a government decided you personally
were worth eight figures.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/e5011a9e8a6ee9c6.mp4

2026-08-29 11:06:00 CEST

#OPSEC365 161/365
Malicious charging cables can look exactly like legitimate ones.
The O.MG cable looks like a standard Apple cable but contains a hidden chip that can steal data, inject keystrokes, or provide remote access. You cannot tell the difference by looking at it. Hak5 sells them commercially at roughly $120 to $180.
Only use your own cables from trusted sources and never borrow charging cables from strangers.
#OPSEC365

2026-08-28 21:52:07 CEST

The dosage increases every year and nobody questions the prescription because questioning it is the first symptom they trained out of you.
https://media.sambent.dev/img/db4671c02ac7fbab.jpg

2026-08-28 15:20:32 CEST

https://youtu.be/OqzMrhcMcUM
https://media.sambent.dev/video/44f6fc57e9dc449d.mp4

2026-08-27 21:56:09 CEST

Researchers pulled a 256-bit key out of a device by filming its power LED. The status light flickers with the chip's power draw, and that leaks the key. A full ECDSA key was recovered from 16m away through a window via a hijacked camera. https://www.nassiben.com/video-based-crypta

2026-08-27 15:50:50 CEST

Proof, Ben-Gurion University 2023: https://www.nassiben.com/video-based-crypta

2026-08-27 11:31:35 CEST

#OPSEC365 159/365
Geofence warrants let police request data on everyone in an area.
Law enforcement asks Google, Apple, or carriers for information on every device present at a location during a time window. If you were near a crime scene, your data gets pulled regardless of your involvement. Being in the wrong place at the wrong time creates a record.
Geofence warrants have swept up innocent people who were simply near a crime scene.
#OPSEC365

2026-08-26 21:23:05 CEST

To reach your IP the attacker needs:
a thousand high speed Tor relays plus five thousand fake Monero nodes,
all aimed at one person,
and the paper still only gives
them a 46 percent shot.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/d4c19da72c3e393d.mp4

2026-08-26 11:44:43 CEST

#OPSEC365 158/365
Rideshare drivers rate you and leave notes other drivers can see.
Your Uber or Lyft rating and any internal flags affect whether drivers accept your requests. Under GDPR and CCPA, you can formally request every data point these companies hold, including driver notes, trip history, complaints, and internal risk scores.
Knowing your score and what's recorded about you is the first step.
#OPSEC365

2026-08-25 15:09:51 CEST

I did not simulate this. Two real nodes behind a Tor container, one talking, one writing down everything it heard.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/3590ddec72c17cee.mp4

2026-08-25 11:27:53 CEST

#OPSEC365 157/365
Linking gaming accounts is voluntary identity consolidation. It's MITRE ATT&CK T1585 (Establish Accounts) working against you.
PSN to Twitch, Steam to Discord, Xbox to Google: a cross-platform graph any breach can traverse. Cronk's anonymization spectrum places linked pseudonyms near Identified. Gamer tag + real email + payment = Linked.
You built a persistent cross-platform persona for your adversary. Each context needs its own identity. #OPSEC365

2026-08-24 21:43:46 CEST

https://youtu.be/ooNmubCA680
https://media.sambent.dev/video/a57986734a3739bd.mp4

2026-08-24 15:09:09 CEST

A VPN changes who watches you. It moves that from your ISP to a company whose only guarantee is a sentence on a marketing page.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/e516d8d9b0b7bfd4.mp4

2026-08-23 21:48:03 CEST

A no logs promise is worth exactly as
much as the court order it has survived.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/286d808cdf253e3f.mp4

2026-08-23 15:43:13 CEST

If your money came with a nutrition label you'd stop using it.
https://media.sambent.dev/img/73a6f638de755c23.jpg

2026-08-23 11:51:25 CEST

#OPSEC365 155/365
Shipping tax documents reveal your address to postal workers and anyone with mailbox access.
W-2s, 1099s, and tax preparation documents sent through the mail contain your social security number, income, and home address. They sit in mailboxes, get delivered to wrong addresses, and pass through multiple hands before reaching you.
W-2s and 1099s mailed to the wrong address contain enough information for complete identity theft.
#OPSEC365

2026-08-22 21:02:05 CEST

https://youtu.be/kDMfDN7iuQY
https://media.sambent.dev/video/391a3f1d473260e7.mp4

2026-08-22 15:10:23 CEST

I wrote a fake VPN sponsor read using only phrases from real ones.
It took about four minutes.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/aae20da63ae84ed1.mp4

2026-08-22 11:23:27 CEST

#OPSEC365 154/365
Your work badge photo might follow you longer than your employment.
Badge photos enter HR systems, building security databases, and corporate directories. When you leave, that photo may persist in backups, former colleague contact lists, and archived directories. Your face from 2015 is still identifying you somewhere.
Corporate directories archive employee photos in backups that outlast the employment relationship by years.
#OPSEC365

2026-08-21 21:38:36 CEST

https://youtu.be/4Gry4U6L7l8
https://media.sambent.dev/video/ffd10f521703162f.mp4

2026-08-21 15:26:31 CEST

Every minute your node checks in with its
peers and trades lists of other peers.
The old version stuck its own onion address in that list.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/d04266ff07596cf3.mp4

2026-08-21 11:32:49 CEST

#OPSEC365 153/365
Office printers log every document you print.
Network printers store print jobs including the content, sender, and timestamp. Some retain this data for compliance purposes. IT departments can review what you printed and when. That personal document you printed at work is in a log somewhere.
Network printer logs are discoverable in litigation. So is the content they logged.
#OPSEC365

2026-08-20 15:06:52 CEST

https://youtu.be/CV5J-usji04
https://media.sambent.dev/video/f063463c85345080.mp4

2026-08-20 11:30:12 CEST

#OPSEC365 152/365
CALEA (1994) requires every carrier to build intercept capability into its infrastructure before any investigation exists. The hardware to redirect your calls to a government collection point is already installed.
Phrack Issue 38 documented the FBI's pre-CALEA Digital Telephony Proposal in 1992. The standard that emerged, J-STD-025, defines what gets captured: call-identifying information, signaling, and content. Pre-built, waiting for authorization.

2026-08-19 21:38:13 CEST

People reach the service without ever learning where it lives.
That is the hidden part of hidden service.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/e13428d7832e184f.mp4

2026-08-19 15:17:06 CEST

Every paper published against Monero makes the next version harder to break.
The attacks are free auditing.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/5b9d016b6dbd9702.mp4

2026-08-19 11:20:55 CEST

#OPSEC365 151/365
Streaming recommendations reveal your household's viewing patterns.
Netflix, Hulu, and Disney+ build detailed profiles of what your family watches, when, and for how long. These recommendations are based on viewing data that gets shared with advertisers and partners. Your guilty pleasure binge sessions are documented.
Netflix, Hulu, and Disney+ retain complete viewing history tied to your account. That data is producible under subpoena.
#OPSEC365

2026-08-18 21:40:07 CEST

https://youtu.be/r57V4-3gZws
https://media.sambent.dev/video/30ad6d12aa7a74ef.mp4

2026-08-18 15:00:33 CEST

Intel ME backdoor analysis and exploitation.
"Intel Management Engine is a separate processor that runs below the OS with full system access and cannot be disabled."
Intel ME: The Way of the Static Analysis by Maxim Goryachy and Mark Ermolov (2017)
https://troopers.de/downloads/troopers17/TR17_ME11_Static.pdf
https://media.sambent.dev/img/1a2ef14a9dd5c1f9.jpg

2026-08-18 11:53:03 CEST

#OPSEC365 150/365
Legal document filings become public records.
Divorce filings include financial statements and allegations. Name changes document your previous identity. Business formation papers list your home address. These court filings are indexed, searchable, and permanent.
Court filings are indexed on PACER and CourtListener permanently. A dismissed case from 2009 is still findable.
#OPSEC365

2026-08-17 21:20:55 CEST

https://troopers.de/downloads/troopers17/TR17_ME11_Static.pdf
https://media.sambent.dev/img/1a2ef14a9dd5c1f9.jpg

2026-08-17 15:50:14 CEST

Make I2P Vanity Addy's faster.
(MUCH faster)
https://media.sambent.dev/img/c36b897d29dfbdea.jpg

2026-08-17 11:23:21 CEST

#OPSEC365 149/365
Transit fare cards track every trip you take.
Metro cards, bus passes, and contactless payment systems log where you board, where you exit, and when. This data is retained for months or years and requested by law enforcement regularly. Your daily commute creates a detailed movement record.
Transit agencies have produced card records in murder cases to place suspects at crime scenes.
#OPSEC365

2026-08-16 21:41:33 CEST

Most YouTubers in this space have never read a commit,
a filing, or a transparency report.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/8f31de7194c4f107.mp4

2026-08-16 15:39:59 CEST

https://youtu.be/Ofm0xSD6nq0
https://media.sambent.dev/video/96546d069b80e19c.mp4

2026-08-16 11:36:31 CEST

#OPSEC365 148/365
Smart appliances report usage data back to manufacturers.
Samsung refrigerators log when you open the door. LG washers track load sizes and cycle times. Smart ovens know what you cook. This data ostensibly improves products but also feeds into consumer profiles and can be sold or subpoenaed.
Samsung logs when you open the fridge. LG reports your wash cycles. If the manufacturer gets breached or subpoenaed, your household routine is in the filing.
#OPSEC365

2026-08-15 21:04:23 CEST

The same people who call Monero shady will defend a coin that reports them to four agencies before breakfast.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/1ca9b4538306f63f.mp4

2026-08-15 15:32:26 CEST

https://youtu.be/U_6LZSd0KFk
https://media.sambent.dev/video/d58ad987632aeae1.mp4

2026-08-15 11:21:55 CEST

#OPSEC365 147/365
Every OAuth authorization you've granted is a standing breach. Most are still active.
That quiz app from 2018 still holds read access to your friend list and email. Each authorized app runs its own retention schedule, independent of the platform.
MITRE ATT&CK T1585 (Establish Accounts): adversaries build cross-platform access. Your apps built the same access the moment you clicked Allow.
Audit every platform. Revoke anything unused. #OPSEC365

2026-08-14 21:32:37 CEST

Darknet vendors figured out Bitcoin was a honeypot around 2017, the rest of crypto is still catching up.
https://media.sambent.dev/img/be02c07888c41706.jpg

2026-08-14 15:03:00 CEST

Every scene gets captured eventually.
The tell is when the tickets get expensive.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/f986b2f5a6e153fc.mp4

2026-08-14 11:33:20 CEST

#OPSEC365 146/365
Gift cards aren't anonymous once you buy them with a card.
The purchase creates a transaction linking your identity to that card number. If the gift card is later used somewhere, the chain connects you to that purchase. Even cash-bought cards get registered to real identities when people activate them online.
Cash-purchased gift cards lose their anonymity the moment they're activated with an email or phone number.
#OPSEC365

2026-08-13 21:14:14 CEST

https://youtu.be/XDsLDhKG8Cs
https://media.sambent.dev/video/3ce75babbfcf2fad.mp4

2026-08-13 15:40:41 CEST

And suddenly I'm glad that I'm not going to defcon this year.
I have no issue waiting and watching the talks to avoid shit like this.
How it started:
"The Electronic Frontier Foundation was formed in 1990 by John Gilmore, John Perry Barlow and Mitch Kapor.
The foundation was a response to concerns that law enforcement and policymakers lacked sufficient knowledge
about the internet to make decisions or policies that respected people's rights."
How it's going: "get your purple beard done, and let's talk about compliance at fedcon".
https://media.sambent.dev/img/bdb1964f273a0950.jpg

2026-08-13 11:03:07 CEST

#OPSEC365 145/365
Office building visitor logs create permanent records of who you met with.
Sign-in sheets, badge issuance systems, and lobby cameras all document visitors. Security keeps these records indefinitely in some buildings. The person who signed you in has documented that you visited their floor on that date.
Building security logs document every visitor, including ones who were never suspected of anything.
#OPSEC365

2026-08-12 21:05:52 CEST

The government cannot tell you how many federal laws exist.
The Justice Department spent two years trying and stopped.
You are not following all of them.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/da71b957d1dc8fb6.mp4

2026-08-12 15:21:47 CEST

You don't need their permission to store or send your own wealth anymore and that terrifies them.
https://media.sambent.dev/img/35711e4265d39ed7.jpg

2026-08-12 11:03:20 CEST

#OPSEC365 144/365
Valet parking gives strangers complete access to your vehicle.
Your car contains registration documents with your address, garage door openers, house keys if you leave them on the ring, and anything stored in the console or glove box. The valet has unsupervised access to all of it.
Before you valet park, consider what's accessible inside your car and who's about to have the keys.
#OPSEC365

2026-08-11 21:27:45 CEST

https://youtu.be/AYju-LBGtBk
https://media.sambent.dev/video/f4ae39ae7ce8740f.mp4

2026-08-11 15:06:52 CEST

The scary "Monero deanonymized over Tor" story needs an attacker running a chunk of the Tor network itself to ever reach your IP.
I break down what the paper actually proves versus what happens to you, on real nodes in an isolated lab.
https://youtu.be/y8Kagu3r3Z4
#NewVideo
https://media.sambent.dev/img/376a5dc1352afac7.jpg

2026-08-11 11:31:24 CEST

#OPSEC365 143/365
Two-factor authentication backup codes are just passwords you might have written down somewhere.
Those recovery codes printed out during setup, stored in a notes app, or saved in a text file give the same access as the password they bypass. Anyone who finds them can access your account without your second factor.
Find where you stored your 2FA backup codes and decide if those locations are secure enough.
#OPSEC365

2026-08-10 21:33:50 CEST

Nobody broke Monero's cryptography.
They found a node that talked too much,
and the devs fixed it in December 2024.
https://youtu.be/y8Kagu3r3Z4
https://media.sambent.dev/video/1e9b170cc7695a8d.mp4

2026-08-10 15:46:43 CEST

Mining Monero on your CPU is the most accessible way to acquire coins without touching a KYC exchange.
https://media.sambent.dev/img/aa2e06296e87f467.jpg

2026-08-10 11:41:46 CEST

#OPSEC365 142/365
Photo metadata stripping varies by platform, and you should never assume.
Twitter and Facebook strip EXIF from images served on their CDN. Discord strips it from most upload paths as of recent testing. Email attachments preserve everything. Slack, Telegram, and many smaller platforms vary by file type and by whether the image is sent or attached.
Test each platform yourself by uploading a photo and downloading it back to see what survives.
#OPSEC365

2026-08-09 21:58:14 CEST

https://youtu.be/TdulsXno-Tw
https://media.sambent.dev/video/6b940ab9caef5de8.mp4

2026-08-09 15:00:41 CEST

https://youtu.be/2yw_fwoKXBM
https://media.sambent.dev/video/6824dc6c6d7d6256.mp4

2026-08-09 11:08:28 CEST

#OPSEC365 141/365
In 1992, NYNEX alone processed 25,510 subpoenas. Scaled nationally, Ross Anderson estimated roughly half a million Americans have phone records seized each year. Metadata is collected on perhaps 100x as many people as are wiretapped.
This is surveillance as routine administrative process. The infrastructure existed before you were a person of interest.

2026-08-08 21:55:24 CEST

They deserve it.
https://media.sambent.dev/img/c519af60f4c3a337.jpg

2026-08-08 15:21:25 CEST

https://youtu.be/9csp-sQrKnU
https://media.sambent.dev/video/e91bdaa2e8fe5766.mp4

2026-08-08 11:41:54 CEST

#OPSEC365 140/365
Phones in gym locker rooms are recording devices everyone ignores.
People scroll their phones while changing, and those phones have cameras. Gym mirror selfies often capture other people in the background. The social norm against locker room recording doesn't prevent it from happening constantly.
Be aware of who has a phone out when you're in spaces where you expect privacy.
#OPSEC365

2026-08-07 21:44:16 CEST

IMSI catchers and fake cell tower attacks.
"Mobile phones will connect to any base station with the strongest signal, enabling surveillance and interception."
Practical Attacks Against Privacy and Availability in 4G/LTE Mobile Communication Systems by Altaf Shaik et al. (2015)
https://arxiv.org/pdf/1510.07563.pdf
https://media.sambent.dev/img/d430bd436804b62c.jpg

2026-08-07 15:32:53 CEST

When one XMR hits six figures, you'll be pricing things in nanoneros and the math will still work.
https://media.sambent.dev/img/35ad4426ed7419fe.jpg

2026-08-07 11:35:12 CEST

#OPSEC365 139/365
Subscription boxes reveal your interests and spending patterns.
Monthly deliveries of beauty products, pet supplies, snacks, or hobby items are logged by payment processors, shipping services, and the companies themselves. The pattern of what you receive monthly builds a detailed consumer profile.
Every subscription box company you forgot to cancel still has your address on file and ships to it monthly.
#OPSEC365

2026-08-06 21:49:16 CEST

https://youtu.be/MdG46N_Z-Io
https://media.sambent.dev/video/1ce5aee6f6cf27db.mp4

2026-08-06 15:38:37 CEST

The most radical act in 2026 is two people agreeing on a price without asking the government's permission first.
https://media.sambent.dev/img/cbfe437d60625075.jpg

2026-08-06 11:24:52 CEST

#OPSEC365 138/365
One of the cleanest elicitation moves is the deliberate misstatement. The collector says something slightly wrong about your project. Your instinct is to correct them.
Hadnagy documents this: the correction gives accurate details and often reveals far more than the false claim was designed to extract. Your need to be accurate is weaponized against you.

2026-08-05 21:21:58 CEST

https://youtu.be/TRnOVyh5hl4
https://media.sambent.dev/video/895c6258e0a89a40.mp4

2026-08-05 15:52:22 CEST

Pitch is back up!
(it's twitter on the darknet, clickable links on my site darknetlist.is)
https://media.sambent.dev/img/4f54db924c9fe8f1.jpg

2026-08-05 11:19:37 CEST

#OPSEC365 137/365
Your car is a sealed room with a permanent microphone, persistent corporate connectivity, and a legal identity tied to the VIN.
BMW, GM OnStar, and Tesla process voice commands server-side. Queries are logged against your registration. NTTP 3-13.3M: protect your Critical Information List. What you discuss while driving belongs on it.
Cronk's SEPARATE strategy: isolate contexts by trust level. Your infotainment is not a secure comms environment. #OPSEC365

2026-08-04 21:36:17 CEST

Pitch darknet forum (It's basically twitter for the darknet) currently down for 'server migration'.
24+ hours now. Hurry up Wamus.
https://media.sambent.dev/img/d98169a52d94be58.jpg

2026-08-04 15:52:29 CEST

https://youtu.be/pZiG8r-diTM
https://media.sambent.dev/video/b294ff7a7460da2d.mp4

2026-08-04 11:55:11 CEST

#OPSEC365 136/365
Security camera footage of you exists in dozens of databases.
Convenience stores, ATMs, gas stations, office buildings, and parking garages all record continuously. Most footage is overwritten in days or weeks, but clips of interest get saved indefinitely. You're recorded hundreds of times daily in any urban area.
Walk through your typical day and count how many cameras might have captured you.
#OPSEC365

2026-08-03 21:43:29 CEST

Ten years of cryptographic hardening forged in the fire of actual adversarial conditions.
https://media.sambent.dev/img/f7e7255f9e4dfb67.jpg

2026-08-03 15:45:18 CEST

https://youtu.be/_NY3h-0c5Sg
https://media.sambent.dev/video/4ef09a693a52ab6f.mp4

2026-08-03 11:52:51 CEST

#OPSEC365 135/365
Probate records reveal the details of estates and inheritances.
When someone dies, the probate process makes public their assets, debts, beneficiaries, and the distribution of their estate. Your inheritance appears in court records alongside the details of what everyone else received. Family financial structures become publicly documented.
If you've inherited assets through probate, search the court records and see what's public.
#OPSEC365

2026-08-02 21:35:22 CEST

I find commercial, regulated, fake rebellion to be one of the most distasteful psyops.
People have fallen so far even acts of rebellion are corporatized, and state approved.
https://media.sambent.dev/img/e84d2c3f57262b3c.jpg

2026-08-02 15:05:26 CEST

https://youtu.be/moH5DkuAFiQ
https://media.sambent.dev/video/33af3e5ed985bbdc.mp4

2026-08-02 11:44:53 CEST

#OPSEC365 134/365
Vehicle registration renewals follow predictable annual patterns.
DMV records show when your registration expires, your address, vehicle details, and sometimes lien holder information. Registration renewal dates become predictable events in your administrative calendar, and the address on file is often your home.
Your vehicle registration address is in DMV records accessible to law enforcement and, in many states, to anyone who requests it.
#OPSEC365

2026-08-01 21:41:40 CEST

https://youtu.be/Ml99dXffRXk
https://media.sambent.dev/video/db43615156c56646.mp4

2026-08-01 15:26:24 CEST

GSM and cellular network security weaknesses.
"The GSM encryption algorithms can be cracked in real time with modest computing power."
A Practical Attack on GSM Authentication by various researchers (2010)
https://eprint.iacr.org/2010/428.pdf
https://media.sambent.dev/img/69d8f424d34c8f2e.jpg

2026-08-01 11:57:12 CEST

#OPSEC365 133/365
Political petition signatures are often public records.
Ballot initiatives, recall campaigns, and referendums require verified signatures. In many states, the full list of signers including names and addresses is available to journalists, researchers, and opponents of the measure you supported.
Before you sign a political petition, ask whether the signature list will be public.
#OPSEC365

2026-07-31 21:09:53 CEST

https://youtu.be/KGaKGzGOGKg
https://media.sambent.dev/video/037f5f1e5395855c.mp4

2026-07-31 15:51:51 CEST

RandomX turned every Ryzen CPU into a mining rig and made Bitmain's R&D department irrelevant.
https://media.sambent.dev/img/f6f7b3f1b0a6bb89.jpg

2026-07-31 11:37:55 CEST

#OPSEC365 132/365
Your phone's location is tracked by cell towers even when GPS is off.
Carriers log which towers your phone connects to, triangulating your position to within a few hundred meters. This data is retained for years and accessed by law enforcement tens of thousands of times annually through court orders, and sometimes without them.
Your carrier has logged your location continuously since the day you activated the SIM.
#OPSEC365

2026-07-30 21:31:54 CEST

https://youtu.be/7ZGNgt2levs
https://media.sambent.dev/video/5826ec1edd151ea7.mp4

2026-07-30 15:42:43 CEST

https://youtu.be/uMDHPK-xyAA
https://media.sambent.dev/video/fa0d5980a4d6f9f5.mp4

2026-07-30 11:11:30 CEST

#OPSEC365 131/365
HOA records contain more about you than you'd expect.
Meeting minutes mentioning disputes, violations you've received, assessments you've paid or contested, architectural changes you've requested. Neighbors can often access these records. In legal disputes, they're discoverable.
If you live in an HOA community, find out what records exist about your property and activities.
#OPSEC365

2026-07-29 21:03:57 CEST

Jerry finally has a campaign that actually works, because privacy sells itself when everything else is compromised.
https://media.sambent.dev/img/422cdb7339e75304.jpg

2026-07-29 15:54:02 CEST

https://youtu.be/-HGCGivMSUs
https://media.sambent.dev/video/a1e1ca957eb7013c.mp4

2026-07-29 11:43:50 CEST

#OPSEC365 130/365
Shostack and the Verizon RISK model organize adversaries into four categories: organized crime (financial), state-affiliated (political), activists (ideological), personal adversaries (relational).
Each has different targets, techniques, and timelines. One generic threat model cannot cover all four.
#OPSEC365

2026-07-28 21:01:42 CEST

https://youtu.be/pfGRAJgUFIM
https://media.sambent.dev/video/483a396458cef69e.mp4

2026-07-28 15:26:18 CEST

https://youtu.be/yWgwm2IqMqU
https://media.sambent.dev/video/342c544fd3585435.mp4

2026-07-28 11:11:34 CEST

#OPSEC365 129/365
Medical devices transmit health data you might not realize is being collected.
CPAP machines report your sleep patterns to insurance companies who verify usage for coverage. Insulin pumps log glucose readings and dosing. Pacemakers store cardiac data accessible to manufacturers and doctors. This data can be subpoenaed and has been used in criminal cases.
Understand what data your medical devices collect and who has access to it.
#OPSEC365

2026-07-27 21:01:44 CEST

Rowhammer: flipping bits in DRAM by repeatedly accessing adjacent memory.
"We show that accessing DRAM at high frequency can cause bit flips in nearby rows, allowing privilege escalation."
Flipping Bits in Memory Without Accessing Them: An Experimental Study of DRAM Disturbance Errors by Yoongu Kim et al. (2014)
https://users.ece.cmu.edu/~yoonguk/papers/kim-isca14.pdf
https://media.sambent.dev/img/c381affb4f58aa8d.jpg

2026-07-27 15:17:42 CEST

https://youtu.be/WN5uOMTGzPc
https://media.sambent.dev/video/9b9729f0528745a7.mp4