The Privacy, Security, & OSINT Show

This week I catch up on the latest privacy & OSINT news, offer a warning about third party keyboard apps, and revisit Blackhat & Defcon operational security.

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 300 videos with over 100 hours of content, with more added every month. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.

Listen to all episodes at https://inteltechniques.com/podcast.html

SHOW NOTES:

Virtual Keyboard Concerns

https://inteltechniques.com/blog/2019/07/11/last-chance-to-register-for-online-training/

Blackhat/Defcon Privacy Considerations

https://tutanota.com/blog/posts/free-encrypted-calendar/

https://www.bbc.com/news/technology-48950503

https://www.businessinsider.com/slack-eff-data-retention-encryption-2019-7?r=US&IR=T

https://matrix.org/

https://www.zdnet.com/article/microsoft-stirs-suspicions-by-adding-telemetry-files-to-security-only-update/

https://www.oo-software.com/en/shutup10

https://www.latimes.com/business/la-fi-license-plate-recognition-drive-through-restaurant-20190711-story.html

Data Removal Workbook:

https://inteltechniques.com/data/workbook.pdf

Affiliate Links:

PIA: https://privateinternetaccess.com/pages/buy-vpn/crimeinfo

Amazon: http://amzn.to/2IAyNzm

This week I discuss various neighborhood privacy threats such as Nextdoor.com, a new physical security app which monitors any room for intrusion, and a new OSINT tip for finding people.

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 300 videos with over 100 hours of content, with more added every month. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.

Listen to all episodes at https://inteltechniques.com/podcast.html

SHOW NOTES:

PRIVACY VS. YOUR NEIGHBORHOOD:

https://nextdoor.com

ROOM MONITORING WITH HAVEN:

https://guardianproject.github.io/haven/

OSINT:

https://www.cyberbackgroundchecks.com/

Data Removal Workbook:

https://inteltechniques.com/data/workbook.pdf

Affiliate Links:

PIA: https://privateinternetaccess.com/pages/buy-vpn/crimeinfo

Amazon: http://amzn.to/2IAyNzm

This 8 minute show reveals why we should resist providing feedback to service providers.

This week I return to news and commentary about the latest privacy concerns and present a dark web OSINT tip.

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 300 videos with over 100 hours of content, with more added every month. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.

Listen to all episodes at https://inteltechniques.com/podcast.html

SHOW NOTES:

BACK TO PRIVACY:

Bank Fail

Inline Scripts: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

Anonymous Apple Purchase Update

Apple Sign In: https://techcrunch.com/2019/06/03/apple-sign-in-privacy/

Ebay Data Removal: https://www.ebay.com/help/account/changing-account-settings/closing-account?id=4199

JoinToken Failure: https://jointoken.com

https://globalnews.ca/news/5347720/weight-loss-grants-customer-health-information/

OSINT:

https://darksearch.io

Data Removal Workbook:

https://inteltechniques.com/data/workbook.pdf

Affiliate Links:

PIA: https://privateinternetaccess.com/pages/buy-vpn/crimeinfo

Amazon: http://amzn.to/2IAyNzm

This week I discuss the disappearance of many online investigation resources such as Facebook Graph, Pipl (Free), and numerous custom OSINT search tools. On the flip-side, I talk about how this is beneficial toward privacy.

Support for this show comes from the training and services provided at IntelTechniques.com. Check us out.

Listen to all episodes or find show notes at https://inteltechniques.com/podcast.html

This week I discuss the attacks toward the site which forced removal of the online OSINT tools.

This week I discuss the Firefox Addons certificate fiasco and tackle numerous listener questions about privacy, security, and OSINT concerns.

Listen to all episodes at https://inteltechniques.com/podcast.html

Direct support for this podcast comes from the services provided at IntelTechniques.com. If you are in need of my online OSINT and Privacy video training, a live course for your team, an online investigation or background check, or a direct consultation with me due to a more serious privacy issue, our team has you covered. The online training now contains over 300 videos with over 100 hours of real content. Please check out our offerings over at IntelTechniques.com, and take advantage of a 25% discount on the online training at IntelTechniques.com/25. Your business keeps this podcast free of advertisements and eliminates sponsored messages.

PRIVACY QUESTIONS:

You mentioned a network-wide ad blocker last week. Have you tried Pi-Hole? If so, any thoughts?

Did you know that Brew for Mac has Google analytics embedded into it? Does that change your opinion of using it?

if someone went through a complete opt out process and removed everything connected to their home address, then began using a PO/CMRA/PMB for all official mail, would you recommend to resubmit the opt outs for the PMB address?

Purism recently announced their ‘Google replacement’ concept, Librem One. What are your thoughts?

You talked about some researchers accesing an open mongodb or elastic “database”, isn’t this illegal under CFAA? One thing is finding them and alerting the company but another thing is actually going through the “files” and downloading the data. Can you please talk about this?

I was wondering if you had any general tips for someone at my age. (18-24). I find that I do not appear on many (if any at all) of the OSINT resources that you have on your site, probably as a result of my age. I have become a legal adult only a few years ago, and I want to take advantage of this fact. How can I PREVENT myself from appearing on any of these databases etc.

Someone I know works in the small loan industry and they scolded me for not having a social media presence, because they take social media into account when approving loans. How likely is this to be a consideration in various sectors like finance in the US?

When traveling abroad, should I take a travel-only phone with me?

I use the Bluetooth feature on my car stereo. Is this a privacy risk?

I understand the use of a VPN to protect one’s traffic from that “hacker in a coffeeshop” idea. But why use one at home? If you fear that your ISP is watching your traffic, aren’t you just handing that power over to the VPN company now to do the same?

My estate planning attorney checked out titling our home with a Living or Land Trust. Unfortunately, in my county if you title in either way then you have to forfeit the homestead tax credit. This credit is a big portion of figuring the property taxes you owe. If you remove the credit you end up paying a lot more taxes – which I don’t have. Is there some other trick or way to still get the homestead tax credit yet have one’s primary home be titled in a Living or Land Trust?

As a listener with a family and children, being able to call 911 at home and when in public is a priority. How do you handle that situation with MySudo?

OSINT QUESTIONS:

While currently working on developing my OSINT skill set, I often wonder what would be 3 things that any good OSINT investigator should be able to do.

Do you have any preference in virtual currency search options? It seems there are a ton of sites to search wallets and BTC addresses but all have different results.

This week I discuss my recent exposure using a credit card at a coffee shop, United Airlines' announcement to cover the cameras facing every passenger, another open database leak, the potential malware present on Dell computers, private baby names (seriously…), and five OSINT tips for online investigations.

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 100 hours of content, with more added every month. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.

Listen to all episodes at https://inteltechniques.com/podcast.html

INTRO:

Mark Z.

THIS WEEK IN PRIVACY:

Square Readers

https://www.forbes.com/sites/kateoflahertyuk/2019/04/30/data-of-80-million-americans-exposed-in-mystery-database-mega-leak

https://www.shodan.io/search?query=product%3Aelastic+port%3A9200+nal

https://d4stiny.github.io/Remote-Code-Execution-on-most-Dell-computers/

https://ppw.kuleuven.be/okp/_pdf/Laham2012TNPEW.pdf

https://www.emeraldinsight.com/doi/abs/10.1108/02683940810849648

https://www.aeaweb.org/articles?id=10.1257/0002828042002561

THIS WEEK IN OSINT:

https://emailrep.io/

https://leadferret.com/search

https://vincheck.info/free-license-plate-lookup/

https://www.vehiclehistory.com/license-plate-search/

https://inteltechniques.com/buscador/index.html

LISTENER QUESTIONS NEXT WEEK:

Data Removal Workbook:

https://inteltechniques.com/data/workbook.pdf

Affiliate Links:

PIA: https://privateinternetaccess.com/pages/buy-vpn/crimeinfo

ProtonVPN: https://protonvpn.net?aid=IntelTechniques

Amazon: http://amzn.to/2IAyNzm

Silent Pocket: https://silent-pocket.com/discount/IntelTechniques

This week, I discuss recent privacy news, my failed attempt to buy anonymous iPhones, how prepaid credit cards can get us in trouble, and a new Instagram search tool that can help query bio information.

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 90 hours of content, with more added every month. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.

Listen to all episodes at https://inteltechniques.com/podcast.html

SHOW NOTES:

INTRO:

https://motherboard.vice.com/en_us/article/ywyz3x/hackers-could-read-your-hotmail-msn-outlook-microsoft-customer-support

https://www.nytimes.com/interactive/2019/opinion/internet-privacy-project.html

https://internethealthreport.org/2019/23-reasons-not-to-reveal-your-dna/

https://customercare.23andme.com/hc/en-us/articles/212170688-Requesting-account-closure

https://www.foxnews.com/tech/teens-1b-suit-claims-apples-facial-recognition-software-led-to-false-arrest

PRIVATE PURCHASE FAILURES:

https://www.apple.com/shop/product/MP7X2LL/A/iphone-se-128gb-space-gray-unlocked

https://mygift.giftcardmall.com/#transactionsOSINT:https://www.searchmy.bio/search?q=gmail.com

Data Removal Workbook:

https://inteltechniques.com/data/workbook.pdf

Affiliate Links:

PIA: https://privateinternetaccess.com/pages/buy-vpn/crimeinfo

ProtonVPN: https://protonvpn.net?aid=IntelTechniques

Amazon: http://amzn.to/2IAyNzm

Silent Pocket: https://silent-pocket.com/discount/IntelTechniques

This week I discuss the latest privacy news and threats including the new Apple credit card, more spy cameras in hotels & Airbnbs, another family tracking DB leak, and how to make $122M sending out bogus invoices. Plus, an “Offense/Defense” style of the OSINT section returns with nextdoor.com. Finally, Listener questions tackle Walmart surveillance video and the removal of sponsors for the show.

Show notes at: https://inteltechniques.com/blog/2019/03/29/the-privacy-security-osint-show-episode-117/

Support for this show comes directly from the IntelTechniques online OSINT & Privacy video training. We now have over 85 hours of content, with more added every month. Today, I posted the video from yesterday’s webinar about email address investigations. Listeners of this show always receive a 25% discount at https://inteltechniques.com/25.