#OPSEC365 202/365 In 1980 a Los Alamos scientist visited a Chinese institute. He deflected classified questions for hours. They threw a cocktail party in his honor: toasts, applause, drinks. After enough rounds he offered an analogy about neutron bomb thresholds. Hadnagy documents this case. The alcohol, the flattery, and the pressure of being toasted each lowered the scientist's threshold one step at a time. Conferences and happy hours are collection environments.

#OPSEC365 201/365 Timestamps reveal your timezone regardless of what you claim. When you post at what you say is 9am but the metadata shows UTC offset, anyone can calculate your actual timezone. Photo timestamps, email headers, social media posts all carry timezone information. Someone tracking you can determine your general location from when you're active. Consistent 3am activity on a US-based account suggests a different timezone than the one you claim. #OPSEC365

#OPSEC365 200/365 Forwarded emails often contain more metadata than the person forwarding intended to share. Email headers include the original sender's IP address, email client, timezone, and the full chain of who received and forwarded the message. The person you forward to can extract information about everyone in the thread. Check email headers before forwarding sensitive messages and consider copying content to a new email instead. #OPSEC365

#OPSEC365 199/365 Under 18 U.S.C. §3123, an investigator certifies only that information 'is relevant to an ongoing criminal investigation.' Basic toll records come by subpoena. No warrant. No notification. Court supervision ends when the order issues. This is standard procedure practiced by every federal investigative agency.

#OPSEC365 198/365 Digital receipts map your purchase history more precisely than paper ever could. Email receipts are searchable, timestamped, and never lost in a drawer. That complete purchase history going back years reveals your financial situation, preferences, and lifestyle in fine detail to anyone who accesses your email. Your inbox is a complete purchase history. Anyone with access to your email has access to everything you've bought. #OPSEC365

#OPSEC365 197/365 Public records don't expire and they don't forget. Every property you've owned is in the county assessor's database with your name and address. Business registrations list you as agent. A dismissed court case is still indexed on PACER and CourtListener. A lien from 2011 is still there. Aggregator copies survive even after an official record is sealed. #OPSEC365

#OPSEC365 196/365 Health insurance claims reveal your medical history to multiple parties. Every claim goes to the insurer, gets reported to industry databases like MIB, and may be shared with employers for self-insured plans. Procedures, diagnoses, and medications become part of your permanent health record beyond your doctor's office. The MIB shares claim history across insurers. One claim can affect your rates with carriers you've never used. #OPSEC365