opsec.log

field notes on operational security — threat models, compartmentalization, metadata hygiene. written as they happen, revised when wrong.

  • metadata is the message

    Encrypting content doesn't hide who, when, and how often. Notes on EXIF, document properties, timing patterns, and cheap metadata hygiene.

    #metadata#privacy-hygiene#tooling4 min read

  • compartments leak at the seams

    Separate identities, browsers, and devices are easy to set up and hard to keep honest. Where compartments actually fail, and when to skip them.

    #compartmentalization#identity#opsec-practice4 min read

  • the tool-first instinct is backwards

    Nobody needs a VPN recommendation before they can say who they're worried about. Notes on building a threat model you can actually act on.

    #threat-modeling#fundamentals#process4 min read