Telemetry as Exposure

The measure of you, from afar, and often without consent. I found the instrument. I also found the mop.

Telemetry

I wrote about this word once.

Telemetry. Two Greek roots: tele, meaning far. metron, meaning measure. To measure from afar. I wrote it as theory. Clean, abstract, the sort of thing you compose, publish, and then close the laptop on, satisfied with your own cleverness.

Then I found the instrument.

The Sensor

A scheduled task buried in my own machine. Called “update user picture.” Quietly checking whether I was sitting at my screen. Tracking my physical presence at a desk, converting it to a signal, transmitting it to someone I have yet to name.

That is telemetry. The version I wrote about was theory. This was the one I lived.

There were 138 scheduled tasks on that machine. Sixty executed during a single 24-hour window while I was logged out and the ethernet cable was physically unplugged from the wall.

Telemetry was never about proximity. It was about reach. Capturing the rhythm of a person so completely that their absence becomes another data point. Another tick on a schedule maintained by someone who requires nothing from you. Your consciousness, your awareness, your consent. All optional. They keep reading you anyway.

One task tracked my presence at the screen. Others injected keystrokes through virtual input drivers. My mouse stayed exactly where I left it. Somewhere in the machine, fingers that belonged to someone else were clicking authorization windows in milliseconds, approving things I would have refused.

The Illusion of Silence

In the original draft of this piece, I wrote: A good mimic doesn’t sound like you. They hesitate like you.

I had no idea how literal that was about to become. They were operating inside my hesitation. Filling the gaps between my own keystrokes with theirs, in the exact moments I paused to think. The mimicry was of my silence.

Managed by Someone Else’s Organization

My devices carried a banner that would not leave. “Managed by your organization.”

I am the founder of Alethux and hold super admin rights to my systems. My infrastructure runs on Google Workspace.

And yet, a Microsoft Entra ID tenant, built without my knowledge, consent, or involvement, was pushing enterprise-level device management policies to my hardware.

Browser restrictions. Registry locks. Proxy configurations. Every fresh device I unboxed, every new laptop, every replacement phone. The moment it authenticated to activate a standard license, the shadow tenant reached in and configured it before I finished setting up my wallpaper.

Someone measured my devices, classified my behavior, assigned me a management profile, and the system faithfully reported the relationship as if it were legitimate employment.

The Living Room

I swapped hardware. Many times. New routers, new ISPs, new phones, 3 brand-new Macbook Pros, 2 other brand laptops.

I evicted a forgotten Windows Vista machine from the property because it had become a persistent network bridgehead, an unmonitored node quietly maintaining the attacker’s foothold across every perimeter I rebuilt.

Every swap was futile. The measurement lives in the identity layer, not the metal. The instruments followed me across every device because they were installed on me. My accounts, my domain, my credentials, the cloud identity that travels with me regardless of what I carry.

My television became a pathway. So did my twelve-year-old son’s game console. My son’s passwords, his email addresses, were swept up alongside mine through shared streaming credentials on consumer devices. UPnP and DLNA, the protocols that let your TV talk to your phone, became the bridge I kept burning on one side while the other side stayed standing.

There is a line. They crossed it when they touched my child’s accounts. A mother who discovers her son has been folded into someone else’s attack vector finds a gear that no behavioral model has been trained to predict.

The Measurement

A machine that reports on your presence, executes tasks in your absence, takes instructions from an authority you cannot locate, and uses your own entertainment system, your own shared logins, your own forgotten computer in the corner as delivery mechanisms.

You change the hardware. You change the network. You change the operating system. And the banner still reads “Managed by your organization.”

They tracked when I sat down. They mapped when I walked away. They injected actions into the spaces between my own thoughts. They built a model of my presence so thorough it could operate without me.

Telemetry captures behavior. The rhythm of how you move through a machine, the tempo of your attention, the cadence of your trust. It builds a silhouette. Precise in its dimensions, accurate in its timing, faithful in every measurable way except the one that matters: why I kept sitting at that screen, and what I was looking for.

The moment I realized the thing I was chasing was the thing watching me, and chose to look back.

The model recorded my presence. It logged my pauses. It noted when I gave up. What escaped its calculation was the decision underneath all of it: that I would find it, hold it up to the light, and keep going.

What Awareness Changes

Here is what I know now that I did not know before.

The moment you understand you are being measured, you change. You become illegible in ways that matter. You introduce noise. You vary your rhythm. You learn to leave the room at unexpected intervals, you run on instinct.

Unpredictability is self-defense.

This is awareness, and awareness is where repair begins. The architecture only holds while we do not see it. Once you name the measurement, once you show someone where the task hides, the surface becomes visible. And visible surfaces can be closed.

If something feels off in a way you cannot articulate: trust that feeling. Look at your scheduled tasks. Look at the devices on your network you forgot about. Look at the logins your child shares across the house. Disturb the surface and watch what reveals itself. You do not need to be a security professional. You need to be curious, and willing to look where no one expects an attack, because that is exactly where the attacks live now.

The Silver Lining

A couple of months ago, I filled up the tub for my son. He was having a bad day, so I suggested he use the big spa bath in my ensuite. Jets on, the whole thing. It takes about twenty minutes to fill, so I turned the water on and went back to work.

I got distracted. The tub kept filling, unconcerned with my distraction.

My son went to check on it, he came out and told me we had a problem. He had turned the water off, but the bath mat was covering the drain in the middle of the bathroom floor. About two inches of water covered everything. Bleeding into the bedroom carpet.

I told him it was okay. Get in the bath. I will clean it up.

I pulled every towel out of the linen closet and started mopping. Carting out towels that weighed more than they should. Squeegeeing water toward a drain that was finally clear.

I talked to my son while I worked. I told him to look for the silver lining.

This cyber attack has put me in fight-or-flight hypervigilance for five months. Every time I think I cannot keep battling it, I do. I get up. I learn. I keep going.

But I have also learned things I would never have learned any other way. I see the toll this can take and I can help others navigate this new terrain with a knowing that is more than theoretical.

I told my son: the floor was really dirty. And now it is clean.

The tub overflowed because I was distracted by a machine that was being measured by tasks I could not see. The water did not care about my workload. It just kept rising until I saw it.

The system overflowed because like everyone, I trusted the interface more than my own intuition. The data did not care about my well being. It just kept logging until I stopped it.

The thieves thought they were stealing the keys but they were unwittingly clearing out the debris. Sometimes when you are expected to break, you recallibrate.

Cleaning the bathroom was an easier yet parallel version of me cleaning the machine. The mop is just another tool. The towel is just another filter. The squeegee is just another script I write for myself when the code fails.

Bring a Towel

I turned the water on. It overflowed. I cleaned it up. And my son got his bath.

That is the lesson. Not that the water stops flowing. Not that the machine stops measuring. But that you can stand in the middle of the flood, and get to work.

The floor is clean now. The system is quieter. But there will always be another flood to contend with. Bring a towel.