abadideaIt's totally reasonable to be more cautious these days, but don't let that drive you to have opsec panic attacks that aren't founded in common sense. For example... it makes no sense to be worried someone might figure out you're queer or a leftist if you're too open about your politics while posting... on fediverse, the queer leftist social media platform. They already know, chief.
Tableflip@0xabad1dea@infosec.exchange but what if my direct family immensely fails at OPSEC, like say posting our house address on facebook regularly
abadideait makes me sad when I see people twist themselves in “but opsec!” anxiety knots over things like “I can’t post that I had a nice birthday party this weekend, then strangers on the internet will know that I was born in approximately mid-June!”
my sibling, there’s only 365.25 birthdays and we all have one, yours is in hundreds of databases that have leaked dozens of times, and whether strangers on the internet know you had a nice birthday party with your friends or not has absolutely no bearing on any risk of any kind, you’re just performing trauma your mom gave you in 1996 when she heard there were kidnappers on the internet
unless you really ARE the one leading the resistance or whatever, in which case @‘ing me to tell me how wrong I am and how much opsec you need is not very good opsec
Soatok Dreamseeker@0xabad1dea@infosec.exchange Me: "what if the gov learns I'm a furry?"
NIST: https://csrc.nist.gov/pubs/sp/800/38/d/r1/iprd
For I am CJ :screwattack: :black_sparkling_heart: :screwattack:@0xabad1dea@infosec.exchange
I would like to offer a counter proposition...
- instead of only having one birthday...
Maybe people should consider posting about their birthday at least once a month... and lying to as many of the companies that sell your PII as possible... so that each database has a unique DOB in it.
In the immortal words of that one cartoon character:
"I am 30.. and/ or 40 years old!"
P.S.... I am not leading the resistance... but I definitely shit post about it quite frequently. ;-)
Mark Bryant@0xabad1dea@infosec.exchange
Wait. People actually remember your birthday?
Conor Stokes@0xabad1dea@infosec.exchange personally, if I was leading the resistance, I would make myself look like the biggest opsec bumblefuck possible.
Leeloo@0xabad1dea@infosec.exchange
Some of us live in countries where each person has a unique identifier consisting of birth date + a few check digits. There are services that allow you to look up the name of s person if you know their unique id, so if you know their birth date and name, it only takes a few tries to get the remaining digits.
And some online stores still accept orders with "just send me a bill" with the unique id as the only proof that you are that person.
(It's not a good/secure/well thought out system).
Bradalot “:verified:”@0xabad1dea@infosec.exchange
I resolve this childhood trauma by celebrating my birthday every Thursday.
(send cake)
Samantaz Fox@ForiamCJ@infosec.exchange @0xabad1dea@infosec.exchange I didn't keep how many "internet birthdays" I have, but every time I'm asked one, I enter a random date.
Depending on the source, I'm between 20 and 125 years old!
abadidea@DirtyPunk@mastodon.gamedev.place yeah the trick is to have a whole normcoresona who's very busy posting about soccer games and school plays
abadidea@DirtyPunk@mastodon.gamedev.place yeah the trick is to have a whole normcoresona who's very busy posting about soccer games and school plays