OPSEC. Operattional Security

. . . so it can't be that. I'm curious as well.

[QUOTE=Lucretius;6938138]I am not 100% sure but I believe the reason is that the anonymous gift cards you buy at any store for the $5 or whatever fee can only be used in the US. So if you are making a purchase on a site that uses a US-based card processor, it will work.

But many xxx sites use foreign processors so they don't accept the US gift cards.

Are there any mongers who have inside knowledge on this topic?

Is there a way to use an anonymous card on sites that use international processors. Like TER, hegre, etc?

Thanks, L.[/QUOTE]

[QUOTE=FarFarAway;6938319]Your premise is faulty. These cards work just fine on seeking, which uses an international processor. IDK where Pimeyes is based, but I have assumed it is inside the US. Seeking is outside the US to make its operations a little more difficult to influence from US LE.

What I just described is the opposite of what it should be if what you said was true.[/QUOTE]OK thanks for the correction. Hopefully someone more knowledgeable will chime in with the real explanation.

It's been like this forever, can a mode fix the typo in Operational on this thread? It triggers my OCD. .

I've read that your car's TPMS crates a unique digital address for each tire that operates through wireless technology, and they can be used to monitor movement. Not being technically proficient, I have no clue if it is true or not. Maybe we need a Faraday shield cloaking device!

While it is true that each TPMS sensor has a unique ID, the TPMS transmitters only transmit about 20 feet (if that) - enough to signal your TPMS computer in the car or individual wheel pickups. The unique IDs are required to distinguish between tire positions. FWIW, the sensors also read internal tire temperatures as well.

[QUOTE=Mike85;6947795]I've read that your car's TPMS crates a unique digital address for each tire that operates through wireless technology, and they can be used to monitor movement. Not being technically proficient, I have no clue if it is true or not. Maybe we need a Faraday shield cloaking device![/QUOTE]

[QUOTE=CuriousVaMan;6948691]While it is true that each TPMS sensor has a unique ID, the TPMS transmitters only transmit about 20 feet (if that) - enough to signal your TPMS computer in the car or individual wheel pickups. The unique IDs are required to distinguish between tire positions. FWIW, the sensors also read internal tire temperatures as well.[/QUOTE]Now I don't have to pretend that the reason I stopped it that my car had a flat outside my favorite AMP for the 6th time in 2 weeks.

Apple iOS 18.0.

Last night I downloaded iOS 18.0 to my iPhone. This download includes a new Apple app called "Passwords" (places it on the Screen, not just in the Library).

When I opened the app, it has 6 different "password groups. " One of the password groups ("All") displayed all of the websites I have recently visited which require log-in credentials (even if I didn't log into them). USASG among them.

Another password group called "Wi-Fi" lists all of the wi-fi networks my phone has tried to login to, neatly displaying all of the hotels I have mongered at least the last year or so.

If you do download iOS 18.0, be sure to scrub the contents of the Password app.

A real lesson in OPSEC.

The gubernatorial candidate in NC (Mark Robison) allegedly participated in and made comments on a wide range of adult-related and vanilla websites. He used the same handle on all sites and provided just enough personally identifiable information to blow his cover. Don't make his mistakes.

[URL]https://www.cnn.com/2024/09/19/politics/video/the-lead-north-carolina-gop-mark-robinson-governor-race-2024-election-jake-tapper[/URL]

[QUOTE=CuriousVaMan;7039302]A real lesson in OPSEC.

The gubernatorial candidate in NC (Mark Robison) allegedly participated in and made comments on a wide range of adult-related and vanilla websites. He used the same handle on all sites and provided just enough personally identifiable information to blow his cover. Don't make his mistakes.

[URL]https://www.cnn.com/2024/09/19/politics/video/the-lead-north-carolina-gop-mark-robinson-governor-race-2024-election-jake-tapper[/URL][/QUOTE]I understand his email address is also in the cache from the Ashley Madison hack. I think a lot of us could be in that boat. That was a long time ago, and our sensitivity to privacy and personal info wasn't then what it is now. Be prepared, if someone wants to dig into that archive, to explain if your email is in there. One of mine is, thankfully, I am never running for office. But you can imagine there are a few deputy dawgs out there who routinely run prominent people through that gauntlet.

[QUOTE=CuriousVaMan;7036257]Apple iOS 18.0.

Last night I downloaded iOS 18.0 to my iPhone. This download includes a new Apple app called "Passwords" (places it on the Screen, not just in the Library).

When I opened the app, it has 6 different "password groups. " One of the password groups ("All") displayed all of the websites I have recently visited which require log-in credentials (even if I didn't log into them). USASG among them.

Another password group called "Wi-Fi" lists all of the wi-fi networks my phone has tried to login to, neatly displaying all of the hotels I have mongered at least the last year or so.

If you do download iOS 18.0, be sure to scrub the contents of the Password app.[/QUOTE]One feature of Opsec I observe is to turn off WIFI on my IRL phone whenever I am doing anything in the sugar bowl. I am an Android user for both that and my burner. I understand I could go to Google and look at all the different locations my phone tried to connect to WIFI. So, it is key to keep that from happening.

I just ran a credit report from TransUnion. A lot of historical stuff is listed there. Including phone #s. One of the #s listed is actually my current burner number. The real phone number. I rarely rarely use it, as Google Voice is my prime means of contacting. However, the real number that is on the credit report is the number that I must use when I am recharging my web GB on TracFone.

I have no idea how this connection was made. What if anything should I do about this? Should I ditch that number? Try to get TracFone to give me a new one?

[QUOTE=FarFarAway;7044755]I just ran a credit report from TransUnion. A lot of historical stuff is listed there. Including phone #s. One of the #s listed is actually my current burner number. The real phone number. I rarely rarely use it, as Google Voice is my prime means of contacting. However, the real number that is on the credit report is the number that I must use when I am recharging my web GB on TracFone.

I have no idea how this connection was made. What if anything should I do about this? Should I ditch that number? Try to get TracFone to give me a new one?[/QUOTE]I use TextNow and just have the app under a secure password protected folder. You don't need to link an e-mail or anything, so it should not link back to you.

[QUOTE=AnonDemon69;7045171]I use TextNow and just have the app under a secure password protected folder. You don't need to link an e-mail or anything, so it should not link back to you.[/QUOTE]Don't think you grasp all the ramifications. I am concerned about getting exposed from this, based on the past.

The future isn't what I am asking about.

Also, the way you write this, it seems like you have that app on your IRL phone. I would not do that for a variety of reasons.

I also wonder, does TextNow permit voice calls from your secret number? GV does, that is important to me. GV also permits logging into a Google account and texting from a browser. Also important to me. Does TextNow do that?

I do use a burner.

[QUOTE=FarFarAway;7045422]Don't think you grasp all the ramifications. I am concerned about getting exposed from this, based on the past.

The future isn't what I am asking about.

Also, the way you write this, it seems like you have that app on your IRL phone. I would not do that for a variety of reasons.

I also wonder, does TextNow permit voice calls from your secret number? GV does, that is important to me. GV also permits logging into a Google account and texting from a browser. Also important to me. Does TextNow do that?

I do use a burner.[/QUOTE]Yes, TextNow permits both outgoing and incoming phone calls, but I guess it won't work for you since it does not permit online logging in.

I would ditch the phone and buy one under someone else's name or a fake name. Someone told me that phone numbers can be linked because you recharged it with one of your credit cards or a gift card registered under your name.

[QUOTE=AnonDemon69;7045495]Yes, TextNow permits both outgoing and incoming phone calls, but I guess it won't work for you since it does not permit online logging in.

I would ditch the phone and buy one under someone else's name or a fake name. Someone told me that phone numbers can be linked because you recharged it with one of your credit cards or a gift card registered under your name.[/QUOTE]Yeah, well, that didn't happen. I would never ever do that.

I have laid out my burner strategy earlier. If you don't know about burners, the whole point is that you can buy them anonymously. With cash. I have only ever paid for service using prepaid debit cards, never a credit card that has my name on it. I have totally fake name and address associated w / the account. This is a TracFone, bought years ago in a Walmart, and then about 3 years ago, I got a new phone in a mom and pop shop and the dude transferred the sim card for me. No name associated w / any of that.

So again, I have no idea how that number got associate w / me IRL.

FFA, FWIW, I received my TransUnion credit report today as well. It too lists my historical, real numbers, but does not list any burner numbers I have used. I too have a GV number and run GV on my real phone. Not a burner.

[QUOTE=FarFarAway;7044755]I just ran a credit report from TransUnion. A lot of historical stuff is listed there. Including phone #s. One of the #s listed is actually my current burner number. The real phone number. I rarely rarely use it, as Google Voice is my prime means of contacting. However, the real number that is on the credit report is the number that I must use when I am recharging my web GB on TracFone.

I have no idea how this connection was made. What if anything should I do about this? Should I ditch that number? Try to get TracFone to give me a new one?[/QUOTE]

[QUOTE=CuriousVaMan;7045914]FFA, FWIW, I received my TransUnion credit report today as well. It too lists my historical, real numbers, but does not list any burner numbers I have used. I too have a GV number and run GV on my real phone. Not a burner.[/QUOTE]I have gone to TracFone, and it was a simple process to change my number. Completely automated at their 800#.

I may go to TransUnion and 'dispute' the old burner # on my credit report. However, I feel a little bit better already. If someone saw it and called it, tried to track me down, it would not find me.

Looking for suggestions for apps that can hide / secure photos and videos on the iPhone. Ideally, one that will allow me to record directly from the app and have password or passcode to access. I'm currently using PV but not very happy with it as the photos and videos taken aren't as good as the native camera. Anyone using anything that they recommend and like? Would be nice if there's an app that secretly records also while not showing on the screen.

[QUOTE=Koolakulak;7047712]Looking for suggestions for apps that can hide / secure photos and videos on the iPhone. Ideally, one that will allow me to record directly from the app and have password or passcode to access. I'm currently using PV but not very happy with it as the photos and videos taken aren't as good as the native camera. Anyone using anything that they recommend and like? Would be nice if there's an app that secretly records also while not showing on the screen.[/QUOTE]Look at iOS18.

Heard that people are complaining that new features enable 'cheating' LOL.

Reposting from General Stuff as this should be here for you all reading this.

Finding Hidden iMessages on Mac.

I had an issue where I had to delete messages and such. I even started a new iCloud account. Couple of things for Mac and I'm not an expert.

1. Turn off Time Machine and delete any backups if any.

2. Delete any iCloud backups.

3. In the "Finder" search for "Library / Messages /" This is where the messages are stored.

That last one I found all my text messages that I thought were deleted, they were NOT! I had to delete stuff in batches as you could not "select all" and delete. Took a while, but I got it done. MIND YOU, this covers tracks a lot, but if your SO gets a hold of your devices, they can take them for forensic analysis, which would uncover a lot.

Be sure to shut off any synchronizing (sharing) settings to avoid any issues. Lastly, if you started a new iCloud and deleted everything on the old iCloud account, I believe the old account hang around for one year if inactive and 30 to 90 days if deleted.

Here's a link to Toms Guide for recovering messages, which can be used to find and delete too. [URL]https://recoverit.wondershare.com/ma...es-on-mac.html.[/URL].

You should also follow up with, or perhaps start with for the local files -- not sure how this might relate to any cloud based storage -- the following link: [URL]https://www.amacsite.com/securely-delete-files-on-mac/[/URL].

Deleteing files is generally not really deleting them as noted in the link.

[QUOTE=DarkRai2;7051243]Reposting from General Stuff as this should be here for you all reading this.

Finding Hidden iMessages on Mac.

I had an issue where I had to delete messages and such. I even started a new iCloud account. Couple of things for Mac and I'm not an expert.

1. Turn off Time Machine and delete any backups if any.

2. Delete any iCloud backups.

3. In the "Finder" search for "Library / Messages /" This is where the messages are stored.

That last one I found all my text messages that I thought were deleted, they were NOT! I had to delete stuff in batches as you could not "select all" and delete. Took a while, but I got it done. MIND YOU, this covers tracks a lot, but if your SO gets a hold of your devices, they can take them for forensic analysis, which would uncover a lot.

Be sure to shut off any synchronizing (sharing) settings to avoid any issues. Lastly, if you started a new iCloud and deleted everything on the old iCloud account, I believe the old account hang around for one year if inactive and 30 to 90 days if deleted.

Here's a link to Toms Guide for recovering messages, which can be used to find and delete too. [URL]https://recoverit.wondershare.com/ma...es-on-mac.html.[/URL].[/QUOTE]

This is a reason I never ever use any of the internal apps on my devices. I go exclusively w / cloud-based sites that don't have any ties to my IRL identity. I do all my texting through Google Voice. On my laptop at home, through a VPN, and on my burner phone. Yeah, IK, Google can find out a lot of things about me if it wants to, but the key is, my SO can't.

[QUOTE=AnonDemon69;7045171]I use TextNow and just have the app under a secure password protected folder. You don't need to link an e-mail or anything, so it should not link back to you.[/QUOTE]TextNow won't allow picking a number with a VPN. Why? They clearly are tracking the IP the number is associated with.

When you delete messages, they are only not visible to you. If you have another text conversation the deleted texts reappear, even if they happen under your old number and you've not selected a new number.

Their logs have it all.

[QUOTE=AnonDemon69;7045171]I use TextNow and just have the app under a secure password protected folder. You don't need to link an e-mail or anything, so it should not link back to you.[/QUOTE]If it's linked to a device that's linked to you, it can be linked back to you. The app store is the link between you and app, and it has your billing info. It just depends on how deep the person doing the searching is looking, and what tools they have at their disposal to look. The only way to keep something completely separate from you is to have a completely separate device. One that you paid cash for and never connected to any of your real accounts.

[QUOTE=Gourmand56;7051909]If it's linked to a device that's linked to you, it can be linked back to you. The app store is the link between you and app, and it has your billing info. It just depends on how deep the person doing the searching is looking, and what tools they have at their disposal to look. The only way to keep something completely separate from you is to have a completely separate device. One that you paid cash for and never connected to any of your real accounts.[/QUOTE]And never used on your Wi-Fi.

Never powered on in your residence, work, etc.

Never on where your regular phone has been, especially at the same time.

It probably gets a lot worse, but the point is everything is logged and if to things can be associated the dots can be connected if the will is there.

[QUOTE=AnonDemon69;7045171]I use TextNow and just have the app under a secure password protected folder. You don't need to link an e-mail or anything, so it should not link back to you.[/QUOTE]Think TextNow isn't retaining a history of All your messages? Think again. Try this: export a conversation where someone sent you some photos. Open the export and you'll find a web link to each photo in that conversation.

Lou.

[QUOTE=Palmore5;7052189]And never used on your Wi-Fi.

Never powered on in your residence, work, etc.

Never on where your regular phone has been, especially at the same time.

It probably gets a lot worse, but the point is everything is logged and if to things can be associated the dots can be connected if the will is there.[/QUOTE]I understand that two devices in proximity can give away the connection between them. This is how Petraeus was caught having an affair w / his biographer. They never actually sent any emails to one another, but they had an account they could both access and leave 'drafts' for the other. Smart.

However, IDK that having two phones, IRL and burner, poses much of a risk. Yeah, Google likely knows there is a connection between the two, but IDK what risk that poses to me. My main worry is my SO. If LE wanted to track down my activities for some reason, well, they have a lot more power and that would be a bigger worry. But that isn't my situation.

[QUOTE=Palmore5;7052189]And never used on your Wi-Fi.

Never powered on in your residence, work, etc.

Never on where your regular phone has been, especially at the same time.

It probably gets a lot worse, but the point is everything is logged and if to things can be associated the dots can be connected if the will is there.[/QUOTE]True. Staying off wifi is good opsec but if an entity has the resources to look for relationships between when and where you power your device on, you're screwed. With enough historical data and analysis of that data, anybody can be sniffed out.

[QUOTE=FarFarAway;7052541]I understand that two devices in proximity can give away the connection between them. This is how Petraeus was caught having an affair w / his biographer. They never actually sent any emails to one another, but they had an account they could both access and leave 'drafts' for the other. Smart.

However, IDK that having two phones, IRL and burner, poses much of a risk. Yeah, Google likely knows there is a connection between the two, but IDK what risk that poses to me. My main worry is my SO. If LE wanted to track down my activities for some reason, well, they have a lot more power and that would be a bigger worry. But that isn't my situation.[/QUOTE]Two devices eliminates virtually any possibility of slipping up, which is easy to do. I have a second number for business contacts on my phone. It's super convenient, but at least once a quarter, I'll accidentally text or call a business contact from my personal number or vice versa. It doesn't cause any problems if do, that's why I keep that set up. But if it did, I would keep it completely isolated.

When I installed IOS 18 on my iPhone, it has a new Apple IOS App called "Passwords. " This App has a folder called "Wi-Fi" which conveniently recorded every wi-fi I had connected to in the last 3 years. Included all the hotels where I conducted SB business, if you know what I mean. You can manually erase these networks, but let's be honest. Everything is recorded. Fortunately, my SO is very low-tech. . . .

[QUOTE=Gourmand56;7052919]True. Staying off wifi is good opsec but if an entity has the resources to look for relationships between when and where you power your device on, you're screwed. With enough historical data and analysis of that data, anybody can be sniffed out.[/QUOTE]

[QUOTE=Gourmand56;7052930]Two devices eliminates virtually any possibility of slipping up, which is easy to do. I have a second number for business contacts on my phone. It's super convenient, but at least once a quarter, I'll accidentally text or call a business contact from my personal number or vice versa. It doesn't cause any problems if do, that's why I keep that set up. But if it did, I would keep it completely isolated.[/QUOTE]Yes, IK, I've got 100 x your posts. For me, having a burner is the safest for that reason. It is never at home. There are ways that things could cross over on a single device that I would not have the technical expertise to understand. And I want to be in a position at any moment to hand my devices (phone and laptop) to my SO to let her look through them, to allay any suspicions she might have. This was such a common event in the past now it likely would not occur to her to look at my devices. However, I never have to sweat it, because IK there is nothing there to be found.

[QUOTE=CuriousVaMan;7053513]Included all the hotels where I conducted SB business, if you know what I mean. [/QUOTE]Every modern phone has an "Airplane Mode".

ME, I put both phones in Airplane Mode a couples blocks before arriving at destinations, and never take either phone into a place. If you're even MORE paranoid, disable Location Services too before getting close.

Lou.

[QUOTE=Proflou2019;7052438]Think TextNow isn't retaining a history of All your messages? Think again. Try this: export a conversation where someone sent you some photos. Open the export and you'll find a web link to each photo in that conversation.

Lou.[/QUOTE]I guess I am not as paranoid as most people here. I use this app in a burner phone actually, but I do this mainly to keep this hobby hidden from my SO. I really don't care about being super secretive from tech savvy people. Seems to me like lots of people think the LE will confiscate their phone and start hacking it to build a case again them. LE is only concerned with the traffickers, not the clients. They don't have the budget and resources to go after every single person. Also, I delete all my texts from this app throughout the day. Yes, I am sure TextNow has a history, but that would require LE to get a warrant, serve it to the App, that the App actually complies, and that you wrote some damming messages. I would be more worried about what you type in those messages, I make sure that I don't type anything that could be used against me with agencies and providers. As far a SB's go, just don't discuss PPM there and you are good to go, they are basically just a friend that you are sexting with.

[QUOTE=AnonDemon69;7055456]I guess I am not as paranoid as most people here. I use this app in a burner phone actually, but I do this mainly to keep this hobby hidden from my SO. I really don't care about being super secretive from tech savvy people. Seems to me like lots of people think the LE will confiscate their phone and start hacking it to build a case again them.[/QUOTE]Local LE are super duper lazy, more than people realize. If you hand them everything they need, they'll do their job. Very few are going to spend more than a few minutes figuring it out unless their boss tells them. Several times I have had police knock on my door due to a neighbor's report. I ignored them. They left. They never returned.

This is why they do organized stings. It takes a crew of each person doing a simple job, getting the evidence they know they need, keeping it simple and repetitive. Half of those cases never even make it to court because the prosecutor's job is to pick strong cases and ignore the weaker ones.

A sting makes a strong case because the police are the witness. Not so when two consenting adults are in a room, then they need to do a lot more work to capture each element of proof. It's simply way more work.

This is taking local LE. Feds are the opposite, very thorough and meticulous. But they only handle trafficking cases since prostitution is not a federal crime. In the Boston 10 case the Feds handed over their evidence to local LE in Massachusetts and Virginia, holding a press conference saying they cannot pursue those cases themselves. Massachusetts took the evidence, Virginia however refused. It was too much work for them, that's how lazy they are. We are talking video surveillance the Feds did, plus text messages. Not "client lists". Client lists are not proof of a crime. They are worthless in a local prostitution case because you need more evidence, which means a lot more work to get that. They are not like the Feds.

So it goes both ways. We have a case where Feds have detailed evidence and security footage of clients entering the brothel and their name and ID, even text messages, but Virginia was like "that's still too much work" and didn't pursue. Whereas Massachusets did. Once again LE does not want client lists, that is not enough. If they were going by that, it would be thousands of clients over multiple locations. Not 28 people for years of business.

I just got a new burner smartphone through Tracfone. It is a Galaxy A14 I got for $100 cash at Walmart. I already had an account w / Tracfone, I was able to transfer service pretty easily from my old phone, it was getting glitchy. The new one has tons more storage, like 64 GB. I can put more apps on it, the ones I use are a lot are dayuse, hoteslbyday, snapchat, google voice. I want to add instagram, I use that to communicate w / a nuru place in town that flies very under the radar.

I like my tracfone service, using a synthetic number on Google Voice, I can pay like $20 to get 90 days of service and 2 GB of data, that covers all the texting I'll do.

I also recently went through an automated process to change the number on the phone itself. I found the old burner number associated with myself IRL, I wanted to nip that in the bud for sure. I have no idea how that could have happened, but it doesn't apply anymore.

[QUOTE=FarFarAway;7094247]I just got a new burner smartphone through Tracfone. It is a Galaxy A14 I got for $100 cash at Walmart. I already had an account w / Tracfone, I was able to transfer service pretty easily from my old phone, it was getting glitchy. The new one has tons more storage, like 64 GB. I can put more apps on it, the ones I use are a lot are dayuse, hoteslbyday, snapchat, google voice. I want to add instagram, I use that to communicate w / a nuru place in town that flies very under the radar.

I like my tracfone service, using a synthetic number on Google Voice, I can pay like $20 to get 90 days of service and 2 GB of data, that covers all the texting I'll do.

I also recently went through an automated process to change the number on the phone itself. I found the old burner number associated with myself IRL, I wanted to nip that in the bud for sure. I have no idea how that could have happened, but it doesn't apply anymore.[/QUOTE]What methods do you use to search and to make sure that phone numbers haven't been compromised?

[QUOTE=GuyInTheCorner;7094969]What methods do you use to search and to make sure that phone numbers haven't been compromised?[/QUOTE]Not sure about 'compromised'. What happened was, I got a notice my credit report was available. I have great credit, I never look at these, but I decided to. There on my credit report was my old burner hardline #. I have zero idea how this could have happened. I *never* use anything that can be tied to me to pay for anything even remotely related to play. I use cash and prepaid debit cards. Hence, it was good I could change the number of the hard line of my burner. Easy peasy.

Here's another problem. I have a number I got from Google Voice, used it for years. I have seen a couple of times, when it comes up on someone else's google SMS, the Contact is listed as Sugar Dadddy (yes, 3 ds). I would prefer this not be the case, I'd rather it just be the number. I use my GV # for many things besides arrangements. I could obviously just get a new GV # - but then I would lose contact w / all those who have the old one, unless I specifically emailed them to give them the new #. I recently got a text from someone I hadn't' heard from in 6 months, we're trying to connect again, I would hate to lose out on this sort of thing.

I of course periodically do searches on myself and all my different numbers to make sure IK how I appear to people I contact.

Any of you who know how, could you write up a how-to concerning using AI to massage my real photo so that I can use it on my profiles or send it to a POT without risk? That is, it looks enough like me to skate by, but can't really be used to track me down IRL.

I haven't played around with it yet but, from an OPSEC perspective, it certainly looks interesting. I'm medium tech-savvy so just wondering if any of the resident tech gurus have any thoughts on the matter.

[URL]https://developer.android.com/about/versions/15/features#private-space[/URL]

As I'm considering moving from MPs to providers, I want to get a burner phone.

Where are good places to buy one without the paperwork tying phone to me?

Are flip-phones better than smartphones?

Other tips or suggestions welcomed.