> ## Content Index > Fetch the complete content index at: https://bitstales.eu/llms.txt > Use this file to discover other available public pages before exploring further. # The sofa detective: you never open an envelope, yet you know everything - URL: https://bitstales.eu/en/metadata-sofa-detective/ - Published: 2025-09-22T21:00:00.000Z - Updated: 2025-09-22T21:00:00.000Z - Description: On Monday night you open a detective agency on your sofa. One rule: never read the contents. You don't need to: a green envelope, "Maldives" stamped in Cesenatico, the recycling diary, a receipt in the lift. Until Mrs Bice from the ground floor opens your file. - Author: Vittorio - Tags: Security, Privacy, #en *Monday, 22 September 2025, 7:05 p.m. The last evening of summer: the equinox is at 20:19 local time. You have a blanket, a mug of herbal tea and no intention whatsoever of doing anything useful.* Tonight you found a detective agency. It's called **Sofa & Blanket Investigations** and its registered office is the sofa in flat 3B, 7 Wisteria Street, somewhere in Italy. Share capital: one chamomile tea. Company fleet: the right slipper (the left one has been missing since 2023). The rulebook is a sticky note on the TV remote: > **Article 1.** We never read the contents of anything. Not out of nobility. In Italy, opening someone else's post is a crime (article 616 of the penal code, up to a year in prison), and more importantly it would require getting up. You'll work only with what's on the *outside*: envelopes, postmarks, receipts, pizza boxes. Professionals call it **metadata**. You call it "stuff people leave lying around, convinced it says nothing". ## Metadata explained to a blanket The letter is the content. Everything written on the envelope (who sent it, to whom, from where, when, how heavy it is, whether it's urgent) is metadata. We seal the content with glue. The metadata, on the other hand, we write on the outside on purpose, big and in capitals, because the postman has to read it. And the postman isn't the only one who can read. It's like locking your secret diary with a padlock and then writing on the cover: *"Mark's diary, Year 9, in love with Julia, last updated yesterday at 11:40 p.m., pages stained with tears: 4"*. ## Case no. 1 — The green envelope 7:12 p.m. The postman rings flat 9 holding a **green** envelope. In Italy a green envelope means court papers. It's so official that Poste Italiane's technical specification names the exact shade: **Pantone 7485U**. Basically, it's an envelope that says TROUBLE, but in Pantone. The state picked a colour specifically so that everyone gets it at a glance, without opening anything. Everyone, you included. | File 1 | | | --------------------- | ------------------------------------------------------------------------------------------------------------------------- | | Lines of content read | zero | | Evidence | green envelope, signature required; whoever lives in flat 9 signs in slippers, reads the sender and sits down on the step | | Subsequent behaviour | from tonight on, takes the food waste out wearing sunglasses and a hood. In September. After dark. | | Deduction | has not won a prize draw | | Confidence | 98% (the remaining 2%: the building's hedge has finally sued someone) | Meanwhile, down in the courtyard, Mrs Bice from the ground floor is watering her geraniums. It's 7:12 p.m. and the geraniums, by the look of them, have already been watered three times. ## Case no. 2 — The Maldives of Cesenatico 7:20 p.m. There's a postcard in your letterbox from the Espositos on the second floor. Before leaving they told the whole building "we're off to the Maldives". They told the postman. Even the cat from flat 4, which isn't theirs, heard about it. Front: palm trees, white sand, turquoise sea. Back: *"Greetings from paradise! Crystal-clear water, 32 degrees, it's a whole other world here!"* Postmark: **CESENATICO, 18.09.2025**. A seaside town on the Adriatic, a couple of hours up the motorway. "A whole other world", to be fair, compared to the courtyard. Over the following days the agency gathers supporting evidence: - **On their return**, Mrs Esposito has a tanned left arm and a milk-white right one. It's the car-window tan, the only kind you get driving down the motorway to the Riviera. - **In the hall**, a paper bag sticks out of the suitcase: "Piadineria da Dina". - **The souvenirs from the Maldives** handed out to the neighbours are seashell-shaped fridge magnets. They say "Souvenir of Cesenatico", badly covered with a marker pen. The agency's first lesson: **the content is written by whoever wants to; the postmark is applied by someone with no interest whatsoever in making you look good**. When content and metadata argue, the postmark always wins. ## Case no. 3 — The recycling diary 7:40 p.m. From the window you can see the bins. You don't open anything, perish the thought. But the plastic bags are see-through, and pizza boxes never quite fit in the paper bin. On 1 September, in the lift, the person on the fourth floor announced: "Diet starts tomorrow." Since then, the recycling has kept the diary for them: | Day | In the bin | Deduction | | ------ | ---------------------------------------------------------------- | ------------------------------------------------------- | | Tue 2 | a salad tub, a treadmill box | enthusiasm, with investment | | Wed 3 | a salad tub | holding firm | | Thu 4 | a salad tub, one "single-serving" tiramisu | first cracks | | Fri 5 | two "single-serving" tiramisus | the single serving was a lie | | Sat 6 | four boxes from Pizzeria Da Gennaro | football on TV with friends, or unconditional surrender | | Sat 20 | nothing: the treadmill is on the balcony with socks drying on it | the treadmill has found its true calling | One pizza box says nothing. Lined up, the boxes are a coming-of-age novel with a sad ending. ## Minor cases, closed without getting up Between cases, the agency clears its backlog: - **The first-floor doorbell.** For years it said "ROSSI – BIANCHI". In July a strip of tape covered "BIANCHI". In September, on the tape, in pen: "VERDI". Nobody in the building said a word. The doorbell told the whole story, in three episodes, like a series. - **The doormat of flat 5.** For two weeks now, next to the usual size 38 shoes, there's been a pair of size 45 trainers. They arrive around 8:30 p.m. and leave at 7:50 a.m. You have no proof. You have a doormat. That's plenty. - **The sixth floor's gym card**, hanging from a keyring: twelve visits, one punched. In January. - **The book-swap shelf in the hall.** "How to Stop Snoring" was donated by flat 7\. The lending slip says flat 6, the next-door neighbour, has borrowed it six times, always returning it after two days. On the slip, in pencil, flat 7 has added: "again". - **The supermarket queue.** In front of you on Friday: eight limes, a bunch of mint, two bags of ice and a packet of aspirin. You understood the party. On Saturday morning you understood the party even better. ## Interlude — Sherlock Holmes, your colleague who stood up 8:05 p.m. You take *A Study in Scarlet*, from 1887, off the shelf. Holmes shakes Watson's hand and says: *"You have been in Afghanistan, I perceive."* He hasn't read a document or asked a question. He looked at the tanned face and pale wrists, the military bearing, the stiffly held arm. Holmes did exactly your job: he read the envelope, not the letter. He just did it standing up, which is why they called him a genius. 8:19 p.m. Outside, autumn begins. You don't notice: the equinox doesn't ring the doorbell, doesn't leave receipts and doesn't put pizza boxes in the paper bin. It's the only event of the evening without metadata, so naturally you miss it. ## Case no. 4 — The receipt in the lift 8:30 p.m. You go down to fetch the spare tea from the car and find a receipt on the floor of the lift. A receipt is the perfect witness: it's printed by a machine that can't lie and couldn't be bothered to. ``` BAR SPORT - 2 WISTERIA STREET SUNDAY 21-09-2025 07:58 TILL 02 OPERATOR 05 CAPPUCCINO 1.50 CAPPUCCINO 1.50 CUSTARD CROISSANT 1.40 WHOLEMEAL CROISSANT 1.40 -------------------------------- TOTAL EUR 5.80 CARD ************4417 ``` This is the lift for staircase B. Staircase B is where flat 5 is. Yes, the doormat with the size 45 trainers. 7:58 on a Sunday isn't the time of a leisurely breakfast: it's the time of someone trying to make a good impression. Two cappuccinos. One custard croissant, one wholemeal: two people who don't yet know each other well enough to order the same thing. The agency makes a forecast. In six months it'll be two wholemeal. In a year, one wholemeal and one "nothing for me, I'll just have a bite of yours". That leaves the last four digits of the card, 4417\. You stop there, because even sofa detectives have ethics. Also, you've run out of tea. ## Join the dots (Stanford-approved) 8:50 p.m. One piece of metadata is a dot. Ten dots are a sketch. A hundred dots are a photograph, and by then the content is a formality. It's not just your obsession: in 2016 three Stanford researchers (Jonathan Mayer, Patrick Mutchler and John Mitchell) proved it in *PNAS*. With the consent of 823 volunteers, they collected phone logs: **251,788 calls and 1,234,231 text messages**. Only who called whom, when and for how long. Not a single word of any conversation. The dots alone turned up all sorts. One person had received a long call from the cardiology group at a medical centre. Another frequently called a firearms dealer. And then there's the participant the study calls **D**, who in under three weeks had phoned: 1. a hardware shop, 2. some locksmiths, 3. a hydroponics store, 4. a head shop. With admirable scientific restraint, the study draws no conclusions. The agency does, in two versions. **Version A:** D has a vegetable patch on the balcony, got locked out, and handled it very, very calmly. **Version B:** the same, as told by a police officer. ## How to get found by someone else's iPhone 9:15 p.m. Remember the old cameras that printed the date in orange in the corner of the photo? *'98 8 14*. Today's photos still do it, but the stamp is invisible, and besides the date it often holds the phone model and the **GPS coordinates** of where you took the picture. November 2012\. John McAfee, founder of the antivirus company of the same name (a program whose whole job is protecting you from people spying on you), vanishes from Belize, where police want to question him about the death of a neighbour. For weeks he hides. Meanwhile he updates a blog and gives interviews, because hiding quietly, apparently, isn't for everyone. On 3 December *Vice* publishes an article with a triumphant headline: *"We are with John McAfee right now, suckers"*. With a photo. Taken on an iPhone 4S. With location services on. Coordinates in the invisible stamp: **Guatemala**. It's like sneaking out of the house at midnight on tiptoe, accompanied by a marching band. McAfee first writes that he faked the photo's data himself to throw people off. Then he deletes the post and admits he really is in Guatemala: the grown-up version of "it wasn't me", said with a mouth full of Nutella. On 5 December he's arrested for entering the country illegally. Moral: the metadata that gives you away is often left not by you, but by someone who loves you and is very proud of you. Ask the Espositos. ## Ten serious seconds (timed) 9:40 p.m. In 2014 the legal scholar David Cole writes in *The New York Review of Books* about a debate at Johns Hopkins University on NSA surveillance. Cole quotes Stewart Baker, a former NSA general counsel: *"Metadata absolutely tells you everything about somebody's life. If you have enough metadata, you don't really need content."* Michael Hayden, who led both the NSA and the CIA, says Baker is "absolutely correct". And adds: *"We kill people based on metadata."* Right after, Hayden clarifies that this isn't what is done with the programme under debate. But the sentence is already out there. Your blanket suddenly feels thinner. You get up to check the front door is locked. Then you remember the problem isn't the door: it's the window. Ten seconds over. But remember why metadata is so dangerous. It's the same reasons your agency works: - **It travels in plain sight by necessity.** The postman has to read the address, and the phone network has to know who you're calling. - **Nobody treats it as secret.** The receipt ends up in the lift, the postcard in the letterbox, the pizza box in the bin. - **It already comes in columns.** Content is a jumble of words. Metadata is date, time, place and person: ready to be lined up in a table, like you did with the tiramisu. - **It rarely lies.** You write the back of the postcard; you don't write the postmark. ## Case no. 5 — The file you never opened 10:40 p.m. You go down to take the rubbish out. In the courtyard is Mrs Bice, who has lived on the ground floor since 1974 and is watering her geraniums for the ninth time. "Good evening," she says. "Sushi again tonight? Third time this week: I saw the Sakura bag on Tuesday, Thursday and now. Did you finish that series? After midnight yesterday I heard the theme tune four times, so you said 'just one more' four times. That gym parcel has been in the hall since 12 August: if you don't open it, I'm using the box for my plant pots. And the spare tea you keep in the car expired in May. You can read the date through the window." Pause. She waters an already soaking geranium. "Oh, and the Espositos' Maldives were Cesenatico. I've known since Thursday. Took you until tonight?" Mrs Bice has never read one of your letters. She has never opened one of your parcels. She has never seen your phone. She has a window, geraniums for cover and fifty-one years of field experience. You climb the stairs. This building has two detective agencies. Hers has more seniority, a fixed observation post and no need for tea. And you weren't the detective: you were case no. 6. Back on the sofa, you update the sticky note on the remote: > **Article 2.** Tomorrow we buy curtains. > **Article 3.** The curtains are paid for in cash. > **Article 4.** The receipt gets eaten. Sources - [Italian Penal Code, art. 616 — violation of correspondence (Brocardi, in Italian)](https://www.brocardi.it/codice-penale/libro-secondo/titolo-xii/capo-iii/sezione-v/art616.html?ref=bitstales.eu) - [Poste Italiane — court registered mail, technical specification (green envelope, Pantone 7485U; in Italian)](https://business.poste.it/business/files/1473807245279/raccomandatagiudiziaria-scheda-tecnica.pdf?ref=bitstales.eu) - [Arthur Conan Doyle, *A Study in Scarlet* (1887), Project Gutenberg](https://www.gutenberg.org/ebooks/244?ref=bitstales.eu) - [Mayer, Mutchler, Mitchell — "Evaluating the privacy properties of telephone metadata", PNAS 113(20), 2016](https://pmc.ncbi.nlm.nih.gov/articles/PMC4878528/?ref=bitstales.eu) - [The Next Web — Vice's photo metadata pinpoints a location in Guatemala (3 December 2012)](https://thenextweb.com/news/vice-leaves-metadata-in-photo-of-john-mcafee-pinpointing-him-to-a-location-in-guatemala?ref=bitstales.eu) - [The Register — McAfee in Guatemala: "EXIF data was right" (5 December 2012)](https://www.theregister.com/2012/12/05/mcafee%5Fseeks%5Fasylum/?ref=bitstales.eu) - [InformationWeek — McAfee surfaces in Guatemala (photo taken on an iPhone 4S)](https://www.informationweek.com/it-leadership/mcafee-av-king-turned-fugitive-surfaces-in-guatemala?ref=bitstales.eu) - [NPR — John McAfee arrested in Guatemala (6 December 2012)](https://www.npr.org/2012/12/06/166628312/software-pioneer-john-mcafee-arrested-in-guatemala?ref=bitstales.eu) - [David Cole — "We Kill People Based on Metadata", The New York Review of Books, 10 May 2014](https://www.nybooks.com/online/2014/05/10/we-kill-people-based-metadata/?ref=bitstales.eu) - [The Johns Hopkins News-Letter — report on the debate "The Price of Privacy" (April 2014)](https://www.jhunewsletter.com/article/2014/04/experts-discuss-issues-of-privacy-and-security-34660?ref=bitstales.eu) - [Time and Date — September equinox 2025: 22 September, 18:19 UTC](https://www.timeanddate.com/calendar/september-equinox.html?ref=bitstales.eu)