DNS cache poisoning attacks and DNSSEC weaknesses.

"The DNS infrastructure is vulnerable to cache poisoning attacks that can redirect users to malicious sites."

- 𝗜𝗻𝗰𝗿𝗲𝗮𝘀𝗲𝗱 𝗗𝗡𝗦 𝗙𝗼𝗿𝗴𝗲𝗿𝘆 𝗥𝗲𝘀𝗶𝘀𝘁𝗮𝗻𝗰𝗲 𝗧𝗵𝗿𝗼𝘂𝗴𝗵 𝟬𝘅𝟮𝟬-𝗕𝗶𝘁 𝗘𝗻𝗰𝗼𝗱𝗶𝗻𝗴 by David Dagon et al. (2008)
https://astrolavos.gatech.edu/articles/increased_dns_resistance.pdf

#OPSEC365 072/365

A skilled investigator doesn't start with you. They start with a name and a zip code.

In the first 30 minutes: ThatsThem links your name to a phone number. That number pulls your address history from Whitepages. Your county clerk has your voter registration with your exact address. PACER surfaces any federal court involvement. Google indexes you across everything.

You've been profiled before they've spent a dollar.

#OPSEC365 071/365

Thermal receipt paper fades, but the transaction record doesn't.

That receipt you kept for warranty purposes will be blank in a few years. Meanwhile, the merchant, the payment processor, and the bank all have permanent records of what you bought, when, and where. The paper is ephemeral, but the data isn't.

Stop relying on receipts for records and consider what permanent transaction logs exist about you.

#OPSEC365 070/365

Most color printers embed invisible tracking codes on every page.

These machine identification codes, also called printer dots, encode the printer's serial number and timestamp on every printout in a pattern invisible to the naked eye. The NSA leaker Reality Winner was caught partly because of these dots.

If you're printing something sensitive, know that the printout itself may identify the printer used.