Metadata Don’t Lie: Silence Is Evidence - UK Cyber Security Trapwave

Lyrics:

I ain’t log in but they saw me blink
TLS handshake on the kitchen sink
Session resumed from a cached cert file
Cipher suite told 'em I stayed awhile

No payload, still they clock my vibe
Packet length say I’m on a late-night ride
Even if it’s HTTPS
My JA3 gave away the rest

MAC don’t lie, it's embedded deep
ARP request say I'm still not sleep
Even if the DNS been spoofed
They triangulate by handshake proof

Timestamp drift show local time
Offset logs betray my line
I tried NTP over Tor — still trace
Clock skew told 'em my real place

EXIF tags on the jpg
Said I snapped that pic in a warzone flat
Removed the file, but the cache got tight
Thumb.db kept the byte

You think incog mean you safe and clear?
But prefetch tags say you still near
Browser fingerprint’s a silent snitch
Canvas render got me in a glitch

TLS record with a zero-length frame
Still say I pinged from a burner name
Window size, TCP flags
Told 'em more than my VPN lag

Every email got a header set
X-Mailer line expose my net
Reply path, bounce check
Even dummy mail got a metadata neck

Microphone ain’t gotta record my talk
But packet cadence got my walk
Jitter patterns, RTT
Mapped my route through 5G

Clickin’ scroll ain't neutral flow
Every session ID leak what I know
My mouse twitch, my page switch
Build a profile like a glitch in pitch

PDFs signed, embedded shell
XMP data told 'em well
Even if I print to fax
Metadata bring the facts

Clipboard sync on my mobile app
Sent UUIDs through a sideband trap
Didn’t paste, but I still got flagged
'Cause event listener stayed tagged

IP changed but the subnet same
Routing table still point to name
Browser locale, font list set
That’s 99 bits in your preset net

Don’t even need content plain
They read the size of the encrypted frame
Even noise in packet burst
Rank my habits from best to worst

Heartbeat ping from a zombie node
Correlate time with the road I rode
Alt-Svc on the HTTP
Said my client’s back in zone C3

Audio file with no vocals in
Spectral hash show what mic I’m in
Sample rate, ADC
Point to chip from factory

Man in court with a silent log
No content, just metadata fog
Timestamp, sender, TTL
Said enough to build his cell

—

So I ghost in layers that they don’t parse
Mask my flow in a tunnel sparse
Pad my bytes, jitter my tone
Still they track like a dog to bone

You encrypt? They still got flow
Traffic volume tell what you know
Even when payload locked in steel
Metadata speak what you conceal

I run VM with a custom clock
Random delay in every block
Flush cache, fuzz stack
Change the rhythm, never look back

They don’t hear what I really say
They watch what my metadata weigh
A shadow world where signals leak
In silence, data still speak

#ukrap #cybersecurity #cyberawareness #comptia #opsec #trapmusic