Yes, it's THAT book!

Drop your email here to stay informed of the status of my "tell most" book about the National Security Agency:

--OR--

Read a little about the book here:

Employees are allies, not the adversary

--OR--

Check out the Kickstarter here (click)
How can I help you?
Contact Jeremy
Recommendations

Here's something that


I, Jeremy Duffy, actually recommend and think is worth checking out.
No web-bugs, no bs, just a legit recommmendation that I have personally evaluated before allowing it to be listed here:

Think something's here that shouldn't be? contact me!

March 27, 2025
The Risk of Oversharing

Story Time!

In undergrad, one professor in particular instilled fear in students the way no other could. When people spotted him down the halls, they would spin on their heel, dive into bathrooms, or leap through open windows to escape.

It's not that he mean or rude (quite the contrary) – it was because he couldn’t stop telling extremely long and boring stories.

He’d start off with something related to the class or an assignment, but quickly branch off with, “This is a lot like the kind of thing you’d see in Indiana – that’s where my brother and I grew up. Now he never did computers like I did of course; Mother wanted him to help on the farm since I was leaving so he’s been there since ’78… or was it ’79? It was ’78. That was the year we had that big drought… or wait, maybe it was ’79 because we still had Trigger then… Trigger was my dog, but he died in ’80…” (and so on for several agonizing minutes).

In what I came to call "Old man disease" after my cartoonishly repellent professor, I learned that people tend to spew unwanted detail about themselves (especially online). You have to fight that impulse and learn now how important it is (both as a conversationalist and for safety) to be as vague as reasonably possible.

Omitting unnecessary detail is better for conversation and for safety!

As an example, let's say you're traveling and someone asks, "where are you from?" I'd bet you know better than to give turn-by-turn directions to your address and telling them "the key is under the mat!". That's a good start, but what do you say? How much detail should we withhold?

LifeSec Principle: Close Enough

That's exactly backwards. From now on, instead of thinking about what you shouldn't say, consider what you should (if anything). Start by deciding if you want to answer at all and, if yes, ask yourself what is the least amount of detail I can reasonably provide in this context?"

I've lived this way for a long time and it's never harmed my conversations or made things awkward. I'm simply offering still-correct but more vague answers with limited detail.

For example, for the purposes of this article, I'll volunteer that I live in the Seattle Area. Knowing that, here's how I'd change my answer to fit the context at hand:

If overseas, America
If out of state, Washington
If Washington, Seattle-area

At times, I might make a judgement call that it's safe to share more to people at work, the other parents at the sports match, etc., but that's the exception. Even then, I'm still purposely vague about details, because, not only does being vague keep me safer, but the listener most likely didn't want more detail in the first place!

Why publicly post family names, ages, interests, and other details? Why not just say "my wife", "my kids" (assuming there's a reason to bring them up at all). Instead of age, "baby", "young", "teens", and "adult" are specific enough. Why list genders? Why be specific about how many?
Shield yourself; shield others

It's distressing how often someone might be safe with THEIR data, but careless with others. For example a UK sniper was praised by his command for his record-breaking kills on key Afghan rebels. But it turns out that naming him only put a target on him and his family.

Sniper's cover blown by his command

When I worked in OPSEC, I found a State Department directory listing names, titles, work locations, and phone numbers of hundreds of their employees posted openly online (60 pages worth). I've seen church bulletins listing private details of parishioners. Schools and colleges with unprotected student directories.

Or consider if a stalker sees you talking to their target because you're friends/co-workers/etc. So they ooze up to you with some story about how they "found something" their victim dropped or that they're "good friends from high school" and they really want to catch up!

They'll try to convince you to share the target's phone number, address, or schedule, but there's essentially zero cases where that's an OK thing to do. Instead, you can tell them, "Wow Stalker, you found their thing! Thanks, I'll get it back to them." or "You're friends? That's great! I'm sure they'll be happy to hear from you so leave me your contact information and name and I'll give it to them when I see them next!".

Similarly:

Don't be the kind of person who is careless with the information of others! Before posting, stop. Make sure the photos and details you're posting aren't giving away information of others! Make sure you don't fall for Elicitation

Have a Comment or Question?

Loading...

If you want to learn more about my professional background, click here to learn more.

Check out one of my guides/tutorials:

goodbye identity theft Tutorial
|INDEX|next: Credit Freeze

Too Late!

If you've already become a victim, here is a list of things you should do.

Solving ID Theft

Lock your credit reports with a Credit Freeze to prevent credit-based ID theft (90% of ID theft risk).
Learn to protect your information to prevent not only ID theft, but many other kinds of problems (the rest of ID theft risk).

Save Time and Money

cancel credit-monitoring services.
Cancel id-theft-insurance

Who is Responsible?

Sometimes you just have to wonder why it's so easy to steal identities in the first place.

... or check out any of my other guides and tutorials by clicking here!

The Identity Theft Victim's Mini-Guide to Recovery

If you've already experienced ID theft, here are some tips of what to do next.

[Click for full description]

Credit Freeze

Setting a credit report freeze is the fastest and most effective way to actually block and reduce your risk of ID Theft. And it's free.

[Click for full description]

Out and About Defense

The best defense against non-credit ID Theft and a variety of other risks is to adopt a mindset of protection: Data Defense. Learn how to protect your information with simple and sometimes free countermeasures all based on a simple philosophy that the less people who have your information, the safer you are.

[Click for full description]