The Laptop and the Phone

I came up in a trade where the most dangerous thing in your pocket was a slip of paper you forgot to burn. By the last stretch of my working life it was the phone, and the phone never forgot anything. The decade from 2015 to my retirement was, more than anything, the decade I learned to treat my own devices as honest witnesses for the other side — because that is exactly what they are.

The second body

You have a second body now, and it is more truthful than the first. The first body can lie to a doorman and hold its nerve in a stairwell. The second one cannot. It records where you were, who you spoke to, when, for how long, and it hands that record to anyone who asks the right system. You cannot delete it. You can only teach it to say less.

The phone is the loudest part of it. People imagine the danger is a tapped call, the content of what they said. Almost never. The danger is the metadata — the who, when, where, how often — and the pattern around the message is the confession the message itself refuses to make. A log showing four calls to the same lawyer the week before a man resigns tells the whole story without a single word of what was said. Encryption scrambles what you say; it does nothing to erase that you said it, to whom, and when. Lock the diary all you like. If you leave the appointment book open, you have protected nothing.

And the phone leaks your position before any app reports a thing. Idle in your pocket, a live radio is negotiating with the towers around it, and three of them and the overlap of their timing pin you — to a kilometre in the open, to tens of metres in a city once the Wi-Fi and the satellites are fused in. "Off" is not reliably off. Airplane mode kills the radios; a signal-blocking sleeve kills every band while the thing is stored. But the only complete silence is separation — the phone left behind, or left somewhere that anchors your cover while you are elsewhere. A device that is not with you cannot place you.

Choosing the machines

So I stopped asking which device was best and started asking which device belonged to which compartment. The choice follows the job, never the other way round.

For the everyday — the on-paper life, the legal name, the bills — I ran an ordinary phone and an ordinary laptop, kept patched, and I assumed both were compromised. That assumption is freeing. Once you operate as though a working device has already failed, you stop putting on it the things that would end you if it had.

For anything sensitive, separation, in space and in use. A second phone is not a burner because you call it one. It is a burner only if it is clean for its whole life: bought with cash away from your patterns, no loyalty card, no camera overhead, never powered on near your home or your work or — above all — beside your daily phone. Two devices that sit in the same pocket at the same time, again and again, are linked as permanently as a signature; a tower dump resolves exactly that. A second phone carried next to your real one is not a burner. It is a second tracker with your name on it.

A few rules I held to without exception across those years:

• Never cross-login. One reused password, one recovery email, one number entered into two compartments, and the islands become a bridge. The wall comes down at the seam.
• App-based or hardware two-factor, never SMS. A swapped SIM steals your number from the carrier and walks straight through a text code.
• A password manager, so every login is unique. Reused passwords are how a breach you forgot about opens an account you still use.
• Cover the lenses you are not using; deny the microphone when you do not need it. The laptop on the desk, the camera, the speaker that listens — all of them watch by default.

For the things that would truly end someone if they leaked — key material, source identities, the document with no second copy — I kept a machine with no connection to any network at all. No Wi-Fi, no Bluetooth, no cellular, the radios pulled out where I could, the disk encrypted. An attacker who cannot reach the machine cannot run code on it from across the world. It does not stop a man with brief physical access to it — the tampered cable, the modified boot, the implant left while the device sat in a hotel room — so I kept it with me, used tamper-evidence, and treated any machine that left my hands as suspect until proven clean. The isolated device buys you protection from the whole reach of the network. It buys nothing against the person standing next to it.

The habit that holds

Here is the part that matters more than any of the kit. The decade taught me that tools fail and tools betray, and that the only thing which survived both was the habit.

I watched men buy the encrypted app, the shielded sleeve, the air-gapped laptop, and then carry the sensitive phone home in the same coat as the daily one. I watched them strip the metadata from a photograph and forget the street sign reflected in the window behind their head. The gear was excellent. The discipline was not, and the discipline is the whole game.

So the habits are dull and they are what held: identities kept apart and never crossed, the pattern broken on purpose, the phone left in the gate rather than stared into, urgency treated as a warning sign rather than an instruction. The people aimed at you in those years rarely broke in. They logged in, or they tricked you with a message dressed in urgency, or they waited by a chokepoint. Recognition was most of the defence, and recognition is a habit, not a purchase.

The man who outsourced his safety to a lens learned, eventually, that the lens watches him too. The man who kept the habit was still standing when the gear quit.

Buy the device for the compartment, never the compartment for the device — and remember the gear is what fails first, the habit is what holds last.

Names are changed and the years smoothed a little. The way the machines betray a careless man is exactly as I found it.

— M.