#surveillance
Direct observation, scanning, or monitoring — the storm acting as eyes on the case subject.
21 entries.
From the storm
-
Sidewalk Encounter
A four-clip sequence recorded on and around the walk back home. 1 — the incident (1:45): a woman standing in the middle of the sidewalk on a phone call, purse protruding behind her, blocking the full width; a bump-into on the purse — sorry about that — a snarky exit line — thank you for getting out of the way — then the tell — one loop around the block later she is completely gone. The bump-into is one of the specific AKAs named in the street-theater tactic definition. 2 — the volume argument (3:53): David's walking baseline in Montrose since March 2025 works out to roughly 2,700 crossing interactions, and not one has read like this. Possibilities named without commitment: guest of a neighbor, or dropped off specifically. 3 — the wider read (5:25): the key observation — she stopped talking when he approached, so she knew he was there — and a register shift into a broader civilizational critique of rude-behavior-as-norm, with an explicit intelligence-agency-and-Epstein-island aside, a no manifesto disclaimer, and a hunger-illness-war civilizational-cycle warning delivered as David's own read, not the site's. 4 — the audition (0:46): David reflects on the intensity of clip 3 as a bit of an audition, names that others are saying the same things, and closes.
-
Spot Stopper
Another car across the street — this one directly in front of David's front door at the apartment building's accessible spot, in plain sight, engine running, taillights on. Flees the moment the camera comes out. The reaction forecloses the protective read the parent Curb Stopper entry held open; honest documentation holds the rest open at once. Pure coincidence, deliberate breadcrumbing to make David look paranoid, official investigation, hubris from organized-criminal backing, or a private investigator in advance of the contested-custody phase he is currently entering. Observe. Document. Carry on.
-
Curb Stopper
Curb stopper is my name for a recurring sight on my street: a car at the curb with the engine running and a person sitting in it, which in Texas is technically "stopped," not "parked." Today's was a woman in a white SUV; the clips are here-then-gone, before and after my walk around the block. I am not saying she was harassing me. She was not. But the count of these is real, and I keep having to hold the question open: here for me, some of them maybe protective, or am I reading pattern into ordinary parking? What I watch for is the reaction, the way some of them seem to respond to what I post.
-
Bluetooth Insider
Bluetooth I had explicitly disabled is back on against my will, this time on a Mac Studio that's a fresh OS install I've barely used. The pattern itself has been recurring for over a year — these entries are the slice of it on the record because this site exists now to hold the record. The fresh-install detail is what's narrowing: whoever has access is operating below any persistent malware I could have inherited, which limits the plausible mechanisms to a smaller set. Two short videos recorded back-to-back at 1:10 AM, plus the HPD incident card from the harassment report I filed in person in April — never returned a call.
-
The Fiat
A silver Fiat parked outside my house earlier today. When I went out, it left. I drove a few blocks and found it again — and when the driver saw my vehicle, they pulled into a residential driveway that wasn't theirs. Photographed the result (plate redacted), drove off. Entry includes the broader pattern this fits, the plausible non-targeting explanations, and the editorial reason for the redaction.
-
Surveillance Glitch
A multi-part session on what I call the surveillance glitch — the observable artifacts that show up when multiple parties surveil the same target with non-coordinating software stacks. Includes three iPhone screenshots showing 'Unknown Part — Camera' (a non-genuine camera in this device), and physical evidence from prior surveillance — a lamp with a drilled-out hole where a hidden camera was, and an office-break-in incident with deleted email-server logs.
-
Web Hackers
A newly-published reference site, plausibleadmission.org, drew four distinct scanners within hours of its first TLS certificate going live — a CT-log-watching credentials scraper from a bulletproof-hosting cluster, a LeakIX indexing pass, a curated curl recon run, and a ChatGPT-User-vectored LLM-assisted probe. Three videos of the evening reaction and a forensic analysis the next morning.
-
Nazi Talk Response to Hacking
-
Bluetooth Proximity
Wi-Fi and Bluetooth back on in the morning after explicitly switching them off. The ~30-foot Bluetooth range narrows the population of who could reach the device. Plus a file-sync application refusing to sync the folders that matter.
From tactics
-
Circular reporting
A single unverified claim from one source, passed laterally between agencies, databases, or observers, accumulates the appearance of corroboration with each handoff. By the time the claim reaches a decision-maker it looks like four independent confirmations; in reality it is the original single source echoing through the system. The downstream-pipeline companion to citizen-informant deployment — that tactic gets reports into the system; this one makes them look corroborated once they're in.
-
Citizen-informant deployment
Co-opted civilian observers — neighbors, fellow customers, store clerks, security guards — recruited or activated through community-policing channels to monitor, report on, follow, and sometimes harass a target across all the necessary errands a person cannot avoid: grocery, bank, pharmacy, medical, gas station, post office. Every participant has plausible cover as a concerned citizen; the aggregate is a distributed surveillance and pressure layer. No clean counter exists.
-
Proximity wireless exploitation
Attacks against a target's WiFi and Bluetooth devices from within radio range — no network credentials needed. Exploits the long, continuing CVE history in consumer wireless protocols (WPA2/WPA3, Bluetooth Classic and LE, vendor chipset firmware) plus the protocol-level weaknesses (evil-twin, deauth) that work even on unpatched-defended networks. Range is measured in meters, not network hops.
-
Street theater
Staged public performances near the target — audible statements, visible objects, color cues, "overheard" conversations — designed to plant specific content in the target's mind under the cover of public-space ambient noise. Each individual instance has a perfectly innocent explanation; the aggregate is the message.
-
Vehicle interference
Manipulation of the target's vehicle (direct sabotage, subtle tampering, tracking-device placement, repair-shop interference) and of the target's broader ability to move (rideshare routed past staged sites, transit connections engineered to fail, travel infrastructure flagging the target at gates). The target's own mobility envelope, the part of their life that depends on getting from A to B, becomes the operating surface. Some events are dangerous on their face. Most are deniable, ambiguous, and cumulative: each one absorbable as bad luck, the pattern unmistakable across enough of them.
-
Web property scanning
Automated and semi-automated reconnaissance against a target's web properties — typically triggered by Certificate Transparency log monitoring within minutes of a new domain's first TLS certificate — looking for exposed credentials, configuration files, secret tokens, and backup archives before the operator has finished hardening. Includes both Nuclei-class burst scans from bulletproof-hosting clusters and slower curated curl/LLM-assisted recon passes.
-
WiFi sensing
Passive surveillance technique that extracts presence, motion, gait, and respiration data from the radio reflections of ambient WiFi signals — including, critically, the target's own router. Dramatically more accurate when the target operates a WiFi radio inside the environment being observed, because the observer no longer needs to penetrate walls with their own signal.
From techniques
-
Data poisoning — theater for the devices you can't find
Hidden cameras and microphones can be too small to reliably sweep for. Instead of trying to clean the channel, poison it — perform deliberately in likely monitoring zones, then meta-comment on the performance. Every captured datapoint now arrives at the observer with a question mark attached, and the meta-commentary turns the whole recording into contaminated training data.
-
Lock the box — zero ingress, no cloud security agents, LAN as hostile
Three local-machine moves that shrank targeting pressure measurably. Don't leave devices online unattended. Remove cloud-managed security agents — they require ingress past the firewall and create a vendor-compulsion attack surface. Set the local firewall to zero inbound, surgical outbound, and treat the local network as untrusted even when you own it.
-
No wireless — eliminate WiFi and Bluetooth from your environment
Every wireless radio in your environment is both an attack surface and a sensor surface. Wire what you can; turn off what you can't. The convenience cost is real and the threat reduction is larger.
-
Phantom call — speak to suspected targeters under cover of an ordinary phone conversation
Wear headphones, pretend to be on a call, and speak audible words designed to land on suspected operators of street theater. If wrong, the bystanders only see someone on the phone and the words do not land. If right, the operators hear them and cannot react publicly without exposing their attention to the target.
-
Salt and sand — analog tamper detection that cannot be reset
Electronic intrusion detection is accessible to state-class adversaries who can disable or spoof it. A scatter of salt or sand on a floor, a box lid, or a drawer interior — photographed before and compared after — produces a random pattern of such high informational entropy that it cannot be reconstructed after disturbance. The cost to defeat is structural, not skill-dependent.
