The Complete Privacy & Security Podcast – Episode 067

Posted on February 16th, 2018

EPISODE 067: Sudden Wealth, What If You Won The Lottery?

This week, we discuss the woman holding out from her $560 Million lottery winning due to privacy concerns, and offer our advice.

Listen to all episodes at https://inteltechniques.com/podcast.html

or Subscribe at:

RSS / iTunes / Google / Stitcher


SHOW NOTES:

INTRO:

NotSharingMy.Info Gone
Standard Notes 2FA

SUDDEN WEALTH DISCUSSION

http://time.com/5134991/winner-powerball-560-million-anonymity/

OFFENSE & DEFENSE:

Offense: peoplebyname.com / peoplebyname.com/people/Bazzell/Michael/Granite%20City/IL
Defense: peoplebyname.com/remove.php / peoplebyname.com/remove_number.php

LISTENER QUESTIONS:

The Veterans Administration is issuing a Veterans ID card to people who served in the military, but who are not eligible for benefits as a retiree or medical retiree. It has a name and photo, but not much else in the way of personal information. Could this be better to use as ID instead of a DL?

If your car is registered in a New Mexico LLC, how do you get car insurance?


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://inteltechniques.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://inteltechniques.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast – Episode 067

The Complete Privacy & Security Podcast – Episode 066

Posted on February 10th, 2018

EPISODE 066: Switching to Linux-Part 1: Hardware

This week, System76.com sponsors our show and sends us a couple of laptops to help us transition 100% to Linux.

Listen to all episodes at https://inteltechniques.com/podcast.html

or Subscribe at:

RSS / iTunes / Google / Stitcher


SHOW NOTES:

INTRO:

Strava Issues
New OSINT Book (https://inteltechniques.com/book1.html)

SWITCHING TO LINUX-PART 1: HARDWARE

System76.com

OFFENSE & DEFENSE:

Offense: New Facebook Tools (https://inteltechniques.com/osint/facebook.html)
Defense: Discussion

LISTENER QUESTIONS:

Do you ever recommend off site backup services?

Do you have any “default settings” for people with security clearances?


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://inteltechniques.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://inteltechniques.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast – Episode 066

The Complete Privacy & Security Podcast – Episode 065

Posted on February 2nd, 2018

EPISODE 065: Staying Safe with Mike Seeklander

This week we talk with Mike Seeklander about personal safety, catch-up on some previous issues, present a new Offense/Defense, and tackle your listener questions.

Listen to episodes at https://inteltechniques.com/podcast.html

or Subscribe at:

RSS / iTunes / Google / Stitcher


SHOW NOTES:

INTRO:

Brave followup (DNS issues)
Ubuntu Store issues

MIKE SEEKLANDER:

https://www.americanwarriorsociety.com/?wpam_id=240

OFFENSE & DEFENSE:

Offense: johndoe.com
Defense: johndoe.com/optout_request

LISTENER QUESTIONS:

Is Hushmail really that bad? They made one mistake nearly a decade ago and that’s still all the news you see about them when you search them up.

This is for Michael. You claim to be going Google-free, yet your website requires a google captcha to send an email and your forum has the same requirement to join. Whats up?


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://inteltechniques.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://inteltechniques.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast – Episode 065

New Book Release! OSINT 6

Posted on January 29th, 2018

The latest edition of Open Source Intelligence Techniques was released today. Here are the details, and orders can be placed at https://inteltechniques.com/book1.html. Thanks for all of the support.

Rewritten Sixth Edition Sheds New Light on Open Source Intelligence Collection and Analysis Methods

In this 460 page textbook, Michael Bazzell shares his methods for searching and analyzing online information in detail. Each step of the process is explained throughout twenty-five chapters of specialized websites, software solutions, and creative search techniques. Over 250 resources are identified with narrative tutorials and screen captures. This book will serve as a reference guide for anyone that is responsible for the collection of online content. It is written in a hands-on style that encourages the reader to execute the tutorials as they go. The search techniques offered will inspire analysts to “think outside the box” when scouring the internet for personal information. Always thinking like a hacker, the author has identified new ways to use various technologies for an unintended purpose. This book will improve anyone’s online investigative skills. Among other techniques, you will learn how to locate:

Hidden Social Network Content
Cell Phone Subscriber Information
Deleted Websites & Posts
Missing Facebook Profile Data
Full Twitter Account Data
Alias Social Network Profiles
Free Investigative Software
Useful Browser Extensions
Alternative Search Engine Results
Website Owner Information
Photo GPS & Metadata
Live Streaming Social Content
Social Content by Location
IP Addresses of Users
Additional User Accounts
Sensitive Documents & Photos
Private Email Addresses
Duplicate Video Posts
Mobile App Network Data
Unlisted Addresses & #s
Public Government Records
Document Metadata
Rental Vehicle Contracts
Online Criminal Activity
Personal Radio Communications
Compromised Email Information
Automated Collection Solutions
Linux Investigative Programs
Dark Web Content (Tor)
Restricted YouTube Content
Hidden Website Details
Vehicle Registration Details

If you have the 5th edition of this book, you may want to know what has changed in this 6th edition. Overall, 1/3 of the book is brand new content, 1/3 is updated material, and 1/3 is recycled relevant instruction. The 6th edition is 460 pages (5th edition was 400), but the retail price of the book remained unchanged. All expired and outdated resources were replaced with new methods throughout every chapter, and the OSINT flow charts were re-built to reflect all changes. Several new online custom search tools were created and implemented into the tutorials for easier search execution. The chapters were re-written and reorganized in order to allow complete explaination of each topic.

CHAPTER 01: Prepare Your Computer
CHAPTER 02: Buscador Linux Operating System
CHAPTER 03: Search Engines
CHAPTER 04: Social Networks: Facebook
CHAPTER 05: Social Networks: Twitter
CHAPTER 06: Social Networks: General
CHAPTER 07: Online Communities
CHAPTER 08: Email Addresses
CHAPTER 09: Usernames
CHAPTER 10: People Search Engines
CHAPTER 11: Telephone Numbers
CHAPTER 12: Online Maps
CHAPTER 13: Documents
CHAPTER 14: Photographs
CHAPTER 15: Videos
CHAPTER 16: Domain Names
CHAPTER 17: IP Addresses
CHAPTER 18: Government Records
CHAPTER 19: Software Applications
CHAPTER 20: Application Programming Interfaces (APIs)
CHAPTER 21: Android Emulation
CHAPTER 22: Recon-ng
CHAPTER 23: Radio Frequency Monitoring
CHAPTER 24: OSINT Workflow Processes
CHAPTER 25: Documentation

Filed under Law Enforcement, OSINT, Search | Comments Off on New Book Release! OSINT 6

The Complete Privacy & Security Podcast-Episode 064

Posted on January 26th, 2018

EPISODE 064: Trusts Update & Employment Privacy

This week Jason co-hosts with Michael to discuss trusts, employment privacy, and DNA testing.

Play below or Subscribe at:

RSS / iTunes / Google / Stitcher

Listen to previous episodes at https://privacy-training.com/podcast.html


SHOW NOTES:

INTRO:

Cleaning company in NC bad reviews/doxing
http://rebecca-ricks.com/paypal-data/
Trust Updates

EMPLOYMENT PRIVACY:

Three Phases:
-Employer Employed
-Self-Employed
-Unemployed (Seeking)

Employer Employed:
-Address/SSN requirements
-Changes to rosters
–Address
–Phone
-Company phone
-Employee data sold to Equifax / TALX
–WHEN to Optout of The WorkNumber: http://www.theworknumber.com

Self-Employed:
-Web Hosting/Blogging
–Self-hosted
-Payments
–Stripe/Square

Unemployed:
-Resumes
–Self-Hosted
–Block caching/archiving
–Redacted
–Sudo/PM/Etc
–Remove when hired
-Promotion
-Social Network Presence
–OK to be minimal today
–“Why I have no Facebook”

OFFENSE & DEFENSE:

Offense: reversemails.com
Defense: Source is Discoverthem.com,
removal at https://discoverthem.com/removal.php
plus send an email to Support@quanki.com

LISTENER QUESTIONS:

I have seen heavy advertising for DNA testing from websites like 23andme, Ancestry.com and so on. Of course, they sound great but the data repercussions, to me at least, seems terrifying. Future health insurance refusal, genetics of your kids (or future kids) being known before you do, etc. And things we don’t even know about yet! Would you consider addressing this on your podcast?

You guys talk about using Linux but also iPhone, Can you backup your iPhone on Linux?


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://privacy-training.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://privacy-training.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast-Episode 064

The Complete Privacy & Security Podcast-Episode 063

Posted on January 19th, 2018

EPISODE 063: Brave Browser

This week we talk with Jonathon Sampson from Brave about their privacy-focused browser.

Play below or Subscribe at:

RSS / iTunes / Google / Stitcher

Listen to previous episodes at https://privacy-training.com/podcast.html


SHOW NOTES:

INTRO:

**NOTE: Our guest contacted us after the interview to disclose that Brave does NOT alter the way DNS is handled in Chromium/Brave. Therefore, it is my (MB) opinion that Google WOULD still get some web traffic information while using Brave.

BRAVE BROWSER:

https://brave.com/

OFFENSE & DEFENSE:

Offense: Communities Search Tool
Defense: Discussion

LISTENER QUESTIONS:

I have messed around with qubes before and like the idea but is it compatible with Macbooks? I am able to get Ubuntu natively.

Just wondering if you figured a way to set up a kill switch for iOS protonvpn. I’m using OpenVPN. I’ve been caught so many times without my vpn on!


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://privacy-training.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://privacy-training.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast-Episode 063

The Complete Privacy & Security Podcast-Episode 062

Posted on January 12th, 2018

EPISODE 062: Keeping Your Data Private with Standard Notes

This week we talk with Mo Bitar from Standard Notes about keeping your notes synced, yet private.

Play below or Subscribe at:

RSS / iTunes / Google / Stitcher

Listen to previous episodes at https://privacy-training.com/podcast.html


SHOW NOTES:

INTRO:

Swatting Incident: http://www.kansas.com/news/local/article193834584.html
Meltdown/Spectre: https://en.wikipedia.org/wiki/Meltdown_(security_vulnerability)
Disney DND: http://wdwnt.com/blog/2017/12/breaking-new-security-measures-walt-disney-world-hotels-not-disturb-room-signs-removed/

Standard Notes:

https://standardnotes.org/

OFFENSE & DEFENSE:

Offense: https://truthfinder.com
Defense: https://www.truthfinder.com/opt-out/

LISTENER QUESTIONS:

Michael mentioned that he doesn’t use VOIP numbers for anything he can’t afford to lose, so that if they went away, he would be okay. Do you have any alternatives for things we can’t afford to lose?

I have concerns about purchasing items anonymously and then needing to execute the attached warrantee, can you weigh-in on this?
https://www.consumerreports.org/cro/magazine/2013/05/the-word-on-warranty-protection/index.htm
https://www.consumerreports.org/cro/news/2014/07/do-you-really-have-to-fill-out-those-product-registration-cards/index.htm


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://privacy-training.com/

Justin’s Website
https://operational-security.com/

Please submit your listener questions to us at https://privacy-training.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast-Episode 062

The Complete Privacy & Security Podcast-Episode 061

Posted on January 5th, 2018

EPISODE 061: LAND TRUSTS MADE SIMPLE WITH RANDY HUGHES

This week we talk with Randy Hughes about using land trusts for privacy when owning a home.

Play below or Subscribe at:

RSS / iTunes / Google / Stitcher

Listen to previous episodes at https://privacy-training.com/podcast.html


SHOW NOTES:

INTRO:

Land Trusts

Land Trusts with Randy Hughes:

Free Workshop:

http://www.avoidrisk.net/partner.html?p=e5WN7RpuJ2PCXaUN&w=inteltech

LISTENER QUESTIONS:

I live in California, and I would like to buy a home using a New Mexico LLC as you explained in an earlier podcast. I will never make any income with the LLC, do I have to register it with the IRS and FTB?

You guys mention New Mexico LLC all the time, but how are they any different than Delaware or Nevada? You can be private with them as well.

OFFENSE & DEFENSE:

Offense: fastpeoplesearch.com
Defense: fastpeoplesearch.com/removal (immediately gone, no email required)


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://privacy-training.com/

Justin’s Website
https://www.yourultimatesecurity.guide/

Please submit your listener questions to us at https://privacy-training.com/podcast.html


Filed under Privacy | Comments Off on The Complete Privacy & Security Podcast-Episode 061

Internet Search (OSINT) Updates for 2018

Posted on January 2nd, 2018

It has been a busy month in regards to online search (OSINT) techniques. I have updated almost all of my online search tools and discovered several third-party options that have recently surfaced. Many of these were announced by others on my Forum and in the Slack Channel. All OSINT links and tools can be found on my TOOLS page.

IntelTechniques Communities Search Tool (https://inteltechniques.com/osint/communities.html): I created this new tool out of necessity. I am finding that many of my targets have a presence within online communities such as Reddit, Voat, 4Chan, Meetup, Topix, and others. This tool creates custom URL searches that are superior to the standard searching within a site’s search menu. These tools allow you to specify whether your target is a real name, email address, username, or domain name in order to isolate the appropriate results. While there are already dozens of options here, I anticipate this tool to grow quickly. Today, I added the 300gb+ Reddit archive API by Pushshift.

IntelTechniques Email Search Tool (https://inteltechniques.com/osint/email.search.html): I removed a few dormant search queries and replaced them with better options, including Email Hunter, Reverse Mails, and a few others. This tool now queries 19 services with a single search.

IntelTechniques Person Search Tool (https://inteltechniques.com/osint/person.html): I completely re-wrote this tool in order to incorporate some of the newest people search options, re-order the priority of the searches, and allow a quick execution of all search options. Specifically, I added Fast People Search, Advanced Background Checks, and a few others. This tool now queries 24 services with a single search.

IntelTechniques Reverse Image Search Tool (https://inteltechniques.com/osint/reverse.image.html): I updated the Baidu reverse image search. They changed the URL submission address, but all five image search options should be working now.

IntelTechniques Telephone Search Tool (https://inteltechniques.com/osint/telephone.html): I removed a few dormant search queries and replaced them with better options, including True People Search, Fast People Search, Advanced Background Checks, and a few others. This tool now queries 18 services with a single search.

Free Carrier Lookup (http://freecarrierlookup.com): This is one of three options I have found useful for identifying cellular providers of a target telephone number. The benefit with this service (and the others mentioned below) is that they will usually identify a VOIP provider. If you are researching an internet-based number, you will often find the service listed here, such as Google Voice, Twilio, etc. These have been much more helpful than the traditional sites that only say “VOIP Number”.

Text Magic Carrier (https://www.textmagic.com/free-tools/carrier-lookup): Similar to Free Carrier Lookup, this service identifies providers of landline, cellular, and internet telephone numbers.

Carrier Lookup (https://www.carrierlookup.com): Similar to Free Carrier Lookup, this service identifies providers of landline, cellular, and internet telephone numbers.

US Phonebook (https://www.usphonebook.com): This is yet another telephone search service, but I have found unique results here on occasion.

Fast People Search (https://www.fastpeoplesearch.com): This database appears to possess identical results as the True People Search option, with one huge caveat. Those that removed their search results from one site may still be exposed on the other.

John Doe (https://johndoe.com): This appears to be the same company as the previous option, but again, opt-outs from one service do not carry over to others.

Find-a-Grave (https://www.findagrave.com): This database is one of the most complete archive of grave locations, searchable by name. This can be used to help verify a death or locate a city of interest in relation to your target’s deceased relatives.

Reverse Mails (http://reversemails.com): Most of my individual email searches on this site have been unproductive. However, searching a target domain name has been extremely successful. You will likely locate full names, addresses, and telephone numbers associated with your target email addresses and websites.

Whoxy (https://www.whoxy.com/reverse-whois): This service searches an email address or real name and attempts to find any current or previous domain registration associated with the target. These sites are nothing new, but additional sources of this data can reveal traces that others have missed.

Hunter (https://hunter.io/email-verifier): This is now my favorite email address verification service. It checks formatting, notifies you if the address looks “risky”, verifies whether it is a disposable service, checks the mail records, and provides an overall indication if an address is real or fake.

TCPIPUtils (https://www.tcpiputils.com): This is yet another domain search tool. Most of the data here is redundant with other utilities.

DNS Trails (https://dnstrails.com): This is another Domain/IP search tool, but with much more benefit. When an email address, name, or physical address is associated with a domain, a cross-search identifies other websites of interest. There are other sites that also do this, but these options appear to dig a lot deeper.

URL Scan (https://urlscan.io): Similar to the previous two options, but this service also includes any historic screen captures, which could identify removed content.

Zoom Eye (https://www.zoomeye.org): This appears to be a clone of Shodan. However, I did locate unique data not available elsewhere. This is another search engine for online devices (not websites). In other words, this is where you go creep on people that did not disable guest access to their web cams…

My Geo Position (http://mygeoposition.com): This is a very thorough tool for converting coordinates, addresses, altitude, etc. There are no personal details on this site, but could be useful for verification of cited data located from other searches.

FakeSpot (https://www.fakespot.com): I don’t know how this helps in investigations, but it is interesting. Supply a URL to a product on amazon, and it attempts to identify the fake reviews, as well as provide an overall indication of the amount of robot-inserted reviews of products. It also displays reviews that appear identical to other products and isolates suspect user names that appear to be fake.

Better Tweet Deck (https://github.com/eramdam/BetterTweetDeck): This is not a website, but a browser extension. If you use TweetDeck for your live Twitter investigations, this software enables many enhanced features. My favorites are the ability to customize the format of dates, customize the format of names in tweets, and remove the t.co redirection on links.

Investigative Dashboard (https://data.occrp.org): This search engine provides access to almost 100 million data leaks such as property data and sensitive documents. A search of my own name revealed a handful of PDF documents which cited my work. I had never seen these before from traditional searching.

Vehicle Registration Queries: I have found the following websites will identify the make, model, year, engine and style when providing a license plate and state:
https://recordsfinder.com/plate/
https://www.carfax.com/processQuickVin.cfx
https://www.searchquarry.com/vehicle_records/
http://freebackgroundcheck.org/
http://www.reversegenie.com/license_plates
https://www.autocheck.com/vehiclehistory/autocheck/en/search-by-license-plate
https://www.vehiclehistory.com/licence-plate-search

Note that the last two options will also provide the VIN of the vehicle, which can then be searched at the following:

https://www.carfax.com/processQuickVin.cfx (Provides Vehicle Data)
http://vin.place/searchVIN.php (Provides Name, Address, Vehicle)
https://www.vindecoderz.com (Provides Mileage)
https://www.checkthatvin.com (Confirms Vehicle Data)
https://www.nicb.org (Checks Theft Reports)
https://www.searchquarry.com/vehicle_records (Vehicle Make, Model, & Year)

Filed under General, OSINT, Search | Comments Off on Internet Search (OSINT) Updates for 2018

The Complete Privacy & Security Podcast-Episode 060

Posted on December 29th, 2017

EPISODE 060: HARDWARE PRIVACY & SECURITY WITH SYSTEM76

This week we sit down with Sri and Jeremy from System76 to discuss their line of computers, disabling Intel’s built-in “spyware”, and other privacy options to consider with Linux machines.

Play below or Subscribe at:

RSS / iTunes / Google / Stitcher

Listen to previous episodes at https://privacy-training.com/podcast.html


SHOW NOTES:

INTRO:

Microphone Removal Options:
https://www.wired.com/story/remove-the-mic-from-your-phone/

SYSTEM76:

https://system76.com/

LISTENER QUESTIONS:

You mentioned Proton Bridge and that it works with Thunderbird. Is there a way to Pop my email and remove it from PM?  If not, could i sync with IMAP and then delete from PM? Will that delete my emails in Thunderbird?

Have you guys found a way to use a Mac or iPhone without creating an Apple user account? I don’t need to buy any apps.

OFFENSE & DEFENSE:

Offense:
Confirm Apple users: appleid.apple.com/account (email)
Confirm Windows users: signup.live.com (email/cell)

Defense: Discussion


The Complete Privacy and Security Desk Reference
https://inteltechniques.com/book4.html

Michael’s Website
https://privacy-training.com/

Justin’s Website
https://www.yourultimatesecurity.guide/

Please submit your listener questions to us at https://privacy-training.com/podcast.html


Filed under Podcast, Privacy, Security | Comments Off on The Complete Privacy & Security Podcast-Episode 060

Search

Recent Posts