Osint

When misdirection works (too well)

I had a beautiful experience this week and thought I’d mention it, for the benefit of all you folks building fake profiles to make yourselves harder to find (looking at some people from infosec.exchange.) This story is about how my misdirection got found, and worked very well indeed.

Personal security shenanigans

To start this off, I have to say this: I have not ordered stuff in my real name for about a year now. I have one or two shops that know my name, but the vast number of e-shops have no idea who the package is for. Where I live, it’s not illegal to put a burner card number in (many banks support this feature nowadays) and a fake name in the order. If you can have your shit sent someplace else entirely, even better, although I cannot say I’ve done this (I do not have a private P.O. box at the time of writing).

OSINT notes

Intro

This is a small post about my experience with a project I recently did, an “OSINT flyover”. The projects are not finished yet, but once they are, I’ll update the post to say how the client accepted their report.