Replies

This profile is from a federated server and may be incomplete. Browse more on the original instance.

sector035, to OSINT

Will you look at that! Week in is back! This week, I want to thank:

@IntelScott
@dutch_osintguy
@craigsilverman
@Wondersmith_rae
@webbreacher
@hatless1der for sharing their wisdom!

https://sector035.nl/articles/2024-03

webbreacher,

Always an honor to be noted in your Week In OSINT @sector035 !

infopunk, to OSINT

One of the things that I really don't like about the #OSINT community is that it is fairly closed to people on the outside who want to get it.

For example, there are all of these great courses, conferences, etc. that tailor to people already in the industry. However, if you don't already have a company behind you paying for these things, they can really break the bank.

How do you break into the field from the outside? I think that's one of the hardest questions to answer.

webbreacher,

@infopunk hi and welcome to the OSINT community.

There are an incredible amount of videos, blogs, and OSINT tools that are free with no barriers to entry at all. There are even some free courses like @hatless1der and my https://www.myosint.training/courses/introduction-to-osint and https://www.myosint.training/courses/careers-using-osint-skills.

What you are probably seeing are all the paid products and courses and tools that are being advertized and promoted. That is the OSINT business.

webbreacher,

@infopunk also unlike in cyber the osint work field is not yet focused on certifications to get that next job. Go to a jobs site and look for the certs that are required for jobs you might like.

webbreacher,

@infopunk @hatless1der ahh ok. So you want to join a discord or something. Go myosint.link/hatless and scroll to the groups or discussion forums

myosinttraining, to OSINT

📢 We are excited to announce that we are launching a newsletter: My OSINT News! Sign up here (https://myosint.link/newsletter) and you will get empowering emails with:

📰#OSINT news articles and links to keep you ahead of your peers!

🔨Links to OSINT tools that might help solve your OSINT cases.

👨🏼‍🏫MOT news (Instead of us doing these email blasts, we will be using our newsletter to communicate changes, improvements, new and upcoming courses and live teaches!)

😉Exclusive offerings (Can't say more about this now but trust us!)

✏ Sign up for My OSINT News at https://myosint.link/newsletter and get news, tools, and MOT announcements delivered directly to your email. My OSINT News' first edition comes out on Monday, 13 November so sign up now!

@webbreacher @hatless1der

webbreacher,

@myosinttraining This is going to be a great way for us to keep you at the top of your #OSINT skill!

cyb_detective, to OSINT

In the Neltas Cookbook, you can find a section about using Netlas for different #osint tasks. Examples of queries can be used in other IP search engines as well.

https://github.com/netlas-io/netlas-cookbook#using-netlasio-for-osint-open-source-intelligence

webbreacher,

@cyb_detective Great resources. Thanks @cyb_detective for constantly broadening my #OSINT knowledge!

webbreacher, to privacy

OK. Real question here about and I guess .

Most of us know that the use of apps to do MFA (multifactor authentication) is a useful thing to protect someone from guessing/using our passwords on sites.

Many of the password managers now include a helpful MFA feature where you can store your password AND do MFA in their app.

My question is, doesn't this defeat the purpose of MFA if they are stored in the same app/location?

webbreacher,

@bashinho True

webbreacher,

@bongoknight OK. I can understand that. In my scenario though, if the password manager is compromised, the attackers have everything they need to log into your accounts though. Right? I'm thinking about breaches like the one LastPass had and how putting all our security "eggs" in a single "basket" is probably a bad thing.

webbreacher,

@jonquass Understood....I should have clarified that I was really thinking about the company that houses the data becoming compromised (ala LastPass). Then the attacker could have everything they need to take over my accounts.

webbreacher,

@m4iler Good points and my setup is similar to yours.

webbreacher,

@vger I agree that using SOME MFA and password manager is better than using nothing. I was thinking of a LastPass type of scenario where an attacker could get all the things needed to log into an account.

webbreacher,

@myndbreaker Agree. It is defense in depth according to your risk model. ANY MFA + password is better than just password.

whatsmyname, to random

📣For those https://whatsmyname.app users that received a warning about the site having a malicious link, we've fixed it. One of our workers (used to request data) was flagged and has been changed. Should be all good now! Please let us know if you have problem. ✔

webbreacher,
cyb_detective, to OSINT

HTML <meta> tags may contain a lot of useful information for the #osint. For ex, the name of the author of the document (or company name).

You can search for keywords in meta tags using IP search engines and the http.meta filter.

Read more:
https://github.com/netlas-io/netlas-cookbook#search-author-name-in-meta-tags

webbreacher,

@cyb_detective In search.censys.io you can use the following search query to find hosts that have responded via HTTP and provided HTML META tags: services.http.response.html_tags: "meta"

bashinho, to FF German
@bashinho@social.tchncs.de avatar

Follow Friday
wer lernen will, sollte folgenden Accounts einen Follow hinterlassen. Sie alle haben in der letzten Woche wertvolle Beiträge auf zum Thema verfasst.
@ChristinaLekati
@cyb_detective
@twone2
@sector035
@denbib
@hatless1der
@webbreacher

webbreacher,

Vielen Dank für die Erwähnung. Und danke für die täglichen "OSINT"-Herausforderungen, während ich meine Übersetzer-Apps benutze, um dein Deutsch ins Englische zu übersetzen 😉 .

Ich genieße es, alle Beiträge zu lesen, die Sie erstellen.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • ngwrru68w68
  • cubers
  • thenastyranch
  • Youngstown
  • rosin
  • slotface
  • cisconetworking
  • mdbf
  • ethstaker
  • JUstTest
  • Durango
  • khanakhh
  • GTA5RPClips
  • anitta
  • osvaldo12
  • everett
  • normalnudes
  • tester
  • tacticalgear
  • provamag3
  • modclub
  • Leos
  • lostlight
  • All magazines