Yes, it's THAT book!

Drop your email here to stay informed of the status of my "tell most" book about the National Security Agency:

--OR--

Read a little about the book here:

Employees are allies, not the adversary

--OR--

Check out the Kickstarter here (click)
How can I help you?
Contact Jeremy
Recommendations

Here's something that


I, Jeremy Duffy, actually recommend and think is worth checking out.
No web-bugs, no bs, just a legit recommmendation that I have personally evaluated before allowing it to be listed here:

Think something's here that shouldn't be? contact me!

March 27, 2025
The Risk of Oversharing

Story Time!

In undergrad, one professor in particular instilled fear in students the way no other could. When people spotted him down the halls, they would spin on their heel, dive into bathrooms, or leap through open windows to escape.

It's not that he mean or rude (quite the contrary) – it was because he couldn’t stop telling extremely long and boring stories.

He’d start off with something related to the class or an assignment, but quickly branch off with, “This is a lot like the kind of thing you’d see in Indiana – that’s where my brother and I grew up. Now he never did computers like I did of course; Mother wanted him to help on the farm since I was leaving so he’s been there since ’78… or was it ’79? It was ’78. That was the year we had that big drought… or wait, maybe it was ’79 because we still had Trigger then… Trigger was my dog, but he died in ’80…” (and so on for several agonizing minutes).

In what I came to call "Old man disease" after my cartoonishly repellent professor, I learned that people tend to spew unwanted detail about themselves (especially online). You have to fight that impulse and learn now how important it is (both as a conversationalist and for safety) to be as vague as reasonably possible.

Omitting unnecessary detail is better for conversation and for safety!

As an example, let's say you're traveling and someone asks, "where are you from?" I'd bet you know better than to give turn-by-turn directions to your address and telling them "the key is under the mat!". That's a good start, but what do you say? How much detail should we withhold?

LifeSec Principle: Close Enough

That's exactly backwards. From now on, instead of thinking about what you shouldn't say, consider what you should (if anything). Start by deciding if you want to answer at all and, if yes, ask yourself what is the least amount of detail I can reasonably provide in this context?"

I've lived this way for a long time and it's never harmed my conversations or made things awkward. I'm simply offering still-correct but more vague answers with limited detail.

For example, for the purposes of this article, I'll volunteer that I live in the Seattle Area. Knowing that, here's how I'd change my answer to fit the context at hand:

If overseas, America
If out of state, Washington
If Washington, Seattle-area

At times, I might make a judgement call that it's safe to share more to people at work, the other parents at the sports match, etc., but that's the exception. Even then, I'm still purposely vague about details, because, not only does being vague keep me safer, but the listener most likely didn't want more detail in the first place!

Why publicly post family names, ages, interests, and other details? Why not just say "my wife", "my kids" (assuming there's a reason to bring them up at all). Instead of age, "baby", "young", "teens", and "adult" are specific enough. Why list genders? Why be specific about how many?
Shield yourself; shield others

It's distressing how often someone might be safe with THEIR data, but careless with others. For example a UK sniper was praised by his command for his record-breaking kills on key Afghan rebels. But it turns out that naming him only put a target on him and his family.

Sniper's cover blown by his command

When I worked in OPSEC, I found a State Department directory listing names, titles, work locations, and phone numbers of hundreds of their employees posted openly online (60 pages worth). I've seen church bulletins listing private details of parishioners. Schools and colleges with unprotected student directories.

Or consider if a stalker sees you talking to their target because you're friends/co-workers/etc. So they ooze up to you with some story about how they "found something" their victim dropped or that they're "good friends from high school" and they really want to catch up!

They'll try to convince you to share the target's phone number, address, or schedule, but there's essentially zero cases where that's an OK thing to do. Instead, you can tell them, "Wow Stalker, you found their thing! Thanks, I'll get it back to them." or "You're friends? That's great! I'm sure they'll be happy to hear from you so leave me your contact information and name and I'll give it to them when I see them next!".

Similarly:

Don't be the kind of person who is careless with the information of others! Before posting, stop. Make sure the photos and details you're posting aren't giving away information of others! Make sure you don't fall for Elicitation

Have a Comment or Question?

Loading...

If you want to learn more about my professional background, click here to learn more.

Check out one of my guides/tutorials:

email Tutorial
|INDEX|next: E-mail Viruses

E-mail Dangers

Until we find out who the people are who actually buy things from spammers and kick them off the Internet, you're going to have to learn how to deal with and prevent spam.
E-mail Viruses - Learn how viruses are spread through e-mail and how to stop them
Phishing - Spot and avoid lures that pull you into the dark side of the web
Don't be one of those people that loses thousands of dollars to the classic Nigerian Scam.

E-mail Etiquette

Use CC only when necessary and BCC the rest of the time.
Use Reply-All when you mean to and never when you don't.
Practice proper E-mail Forwarding to protect privacy and make e-mails more readable.
Always personalize your e-mails to make it obvious to your recipient that it's valid.

E-mail Tips and Tricks

Using E-Mail Aliases Properly - Be careful about using sensitive data (like your real name) in an e-mail account.
Remember to treat your e-mail account with the security it deserves.
Use a decoy e-mail account to keep your main e-mail account free of spam.
Avoid using any Internet provider's default e-mail.

... or check out any of my other guides and tutorials by clicking here!

Preventing Spam

Spam is annoying and worthless, but you still see it every single day. Here are some tips for preventing and reducing spam.

[Click for full description]

E-mail Viruses

Make sure that viruses don't sneak onto your computer through your e-mails. Read some simple tips to prevent that from happening.

[Click for full description]

Phishing

By far the most dangerous thing you'll find in e-mails is a lie. Sending a bogus e-mail to someone is generally called phishing, but can also be referred to as a Nigerian scam (depending on the goal of the e-mail). Learn to recognize and deal with phishing before it's too late.

[Click for full description]

Nigerian Scam

Many people have lost thousands and even hundreds of thousands of dollars to the classic Nigerian Scam. Don't fall for it!

[Click for full description]

How to Use "CC" Properly

Don't violate people's privacy and invite spam into their accounts by CC'ing all your contacts. Learn the proper way to send mass e-mails first.

[Click for full description]

Reply-All

It's easy to embarass yourself or harm your career when you don't know how to use Reply-All appropriately.

[Click for full description]

How to Forward E-mails Properly

Don't forward e-mails carelessly or you risk looking foolish as best and violating the privacy of all your contacts at worst.

[Click for full description]

Personalize E-mail

Follow this simple rule of e-mail etiquette to help prevent your friends and family from falling for phishing scams.

[Click for full description]

Using E-Mail Aliases Properly

It can be hard to find a good name to use in an e-mail account that hasn't been used and doesn't give away too much information about you.

[Click for full description]

Protecting E-mail Passwords

Your e-mail account is the most important online account you have. Remember to treat it as such!.

[Click for full description]

Using a Decoy E-Mail Account

Why it's very important to use a buffer e-mail account to shield your main account from people and companies that you don't trust.

[Click for full description]

The ISP E-mail Trap

Don't fall for the trap of using the free e-mail account provided to you by your Internet service!

[Click for full description]