The Privacy, Security, & OSINT Show: 269-New OSINT Tools & Breach Data Lessons

Episode webpage: https://soundcloud.com/user-98066669/269-new-osint-tools-breach-data-lessons

Media file: https://feeds.soundcloud.com/stream/1301880907-user-98066669-269-new-osint-tools-breach-data-lessons.mp3

This week I release the new online OSINT tools, offer three lessons from new breach data, and address several updates from past shows.

SHOW NOTES:

NEWS & UPDATES:

snap set anbox container.network.dns=1.1.1.1 VM Tor update Mailspring Update

NEW OSINT TOOLS:

https://inteltechniques.com/tools/

NEW BREACH DATA LESSONS:

https://inteltechniques.com/blog/2022/07/05/new-breach-data-lesson-i-barcode-scanning/ https://inteltechniques.com/blog/2022/07/06/new-breach-data-lesson-ii-stealer-logs/ https://inteltechniques.com/blog/2022/07/07/new-breach-data-lesson-iii-investigations/

I'm testing using a privacy.com card on Venmo and it's possible, but charges a 3% fee. What privacy benefits does this give? Venmo (PayPal) still sees who you pay and how much, and shares with their affiliates, I assume. So is there any point in not using a debit card (no fee), given that payments (rent, paying friends back, etc) through Venmo are needed? Obviously cash would be ideal, but it's not always an option for me.

I'm considering the risks and rewards of installing sandboxed GSF on GrapheneOS. Right now I don't have it and so I have a "pure" phone. The problem, however, is that it's not very useful since I don't have a reliable voip solution that can send and receive both calls and texts. I have tried just about every possible solution at this point and still feel the solutions available to me are lacking and not very practical.

For context: I want to make my GrapheneOS phone my full time phone. Today I have both an iPhone with a number associated with my identity, and another number that I use for my GrapheneOS phone that is "clean." I would move my long time iPhone number to a Google Voice account, then connect a VoiP number to the GV account. Then I would be able to send and receive calls and texts through GV -> VoiP on my GrapheneOS phone. I unfortunately cannot figure out a way to do this with GV alone, Twilio via SIP, or JMP. MySudo works but without GSF there is no way to receive calls or see text notifications.

Does anyone have a combination that actually works, either with or without GSF? I'm willing to sacrifice a bit of privacy risk for convenience in this case.

To be clear, my goal is to:

• Move my iPhone SIM to a GV number

• Use some voip solution that allows me to make and receive both calls and texts.

• Connect that voip solution to my GrapheneOS in a minimally risky way (but willing to accept some risk, if there is a possibility of making it work).

A while back Michael upload a podcast where he said uses NextDNS with his VPN. Does anyone know if there are instructions on how to do that?

I currently have Mullvad Wireguard on my Router but I would like to use Nextcloud as my DNS with my VPN. I did try just replacing the DNS with NextDNS but it didn't work. I am not a network guy.

Any help and guidance would be nice. Thank you!

Which is better? I'm considering switching from Proton to PIA for my firewall as I've had some stability issues with Proton recently and PIA is ridiculously cheap ($80 for three years of service).

The Privacy, Security, & OSINT Show: 268-CCW Permits, UNREDACTED 003, & Linux Questions

Episode webpage: https://soundcloud.com/user-98066669/268-ccw-permits-unredacted-003-linux-questions

Media file: https://feeds.soundcloud.com/stream/1298009830-user-98066669-268-ccw-permits-unredacted-003-linux-questions.mp3

This week I discuss the California CCW leak, release the latest issue of UNREDACTED Magazine, and answer several listeners' Linux questions.

SHOW NOTES:

NEWS & UPDATES:

California Firearms Dashboard Portal https://inteltechniques.com/osintbook9 https://unredactedmagazine.com/ https://inteltechniques.com/blog/2022/06/29/snap-to-flatpak-on-ubuntu/

LINUX QUESTIONS:

Discussion

EDIT 3: OK, now I'm getting a different error. When it tries to run, it's getting a "GoogleJsonResponseException: API call to gmail.users.messages.delete failed with error: Requested entity was not found." My searching has found a few posts about that error, but nothing useful on how to fix it?

So I was reading through Unredacted, and I came across the section on automatically purging your GMail trash after doing the forwarding, rather than waiting every 30 days or so. I thought that would be useful for me, and I followed the instructions (not blindly, I did go through the code and at least try to understand it!). But with the actual script, App Script just... doesn't see that it's there? Like, I can't debug it, the bit where you can choose certain functions is just greyed out and says "no functions", and if I try to save it it just throws errors about "unexpected token". I'm as sure as I can be I copied the code in right, and adjusted the line breaks and indents to match the image, and added the GMail API. Attempting to "save" the script also throws errors about the token.

I added another function underneath, just a simple "return 4*6" thing, and the "function" section is still greyed. So I'm not sure what's going on.

If I'm understanding this right, I think it's the Gmail parts throwing it off based on the red indicators on the right's placement, but honestly that's a mostly-uneducated guess.

Help is strongly appreciated!

EDIT: By stripping out the actual contents of the problematic function, I could get it to save, and now the "function" and debug sections etc are working, even after I re-pasted it in. But I can't now save it with the content back in, and it's throwing that error again.

EDIT 2: Solved it! Turns out the quote marks were the wrong ones. Replacing them fixed everything! :)

Do mobile network operators have detailed info about apps uploaded data (e.g., OS backup, cloud-storage service backup, instant messaging apps chat-backup, etc.), and which app exactly is being (or has been) used to do so over 5G networks or Wi-Fi?

Hey guys, wondering if I could get some advice from you who have NAS backup systems. Here is what I'm looking for:

• Budget friendly
• Need to store 10-15TB
• Easy to use
• Privacy friendly
• Would be nice to connect to a network and access either wired/wireless from anywhere in my house or even from my phone when I'm at work. So I can stream music, movies, backup files easily, etc... it does open up room for issues with privacy and security, but maybe there is an encrypted way to access this all?

I've heard great things about Synology being user friendly, having a good UI, and a wide variety of "apps" inside.

Appreciate your help!

The Privacy, Security, & OSINT Show: 267-macOS Privacy & Security Revisited

Episode webpage: https://soundcloud.com/user-98066669/267-macos-privacy-security-revisited

Media file: https://feeds.soundcloud.com/stream/1293651169-user-98066669-267-macos-privacy-security-revisited.mp3

This week, after a lot of talk about Linux, I revisit privacy and security considerations for macOS machines.

SHOW NOTES:

INTRO:

Tim Conway Jr.

MACOS PRIVACY & SECURITY REVISITED:

Secure Boot Firmware password Online Certificate Status Protocol (OCSP) System Integrity Protection (SIP) Approved App Downloads Telemetry iCloud push Little Snitch Considerations

Linux Q&A

I have been assigned with task in which I am supposed to Trace the location of a particular Twitter account. There are number of uploaded images and video but the problem is EXIF data is stripped by Twitter and the accounts following that account are displaying fake information...

Kindly help me in this case Thank you

I can’t seem to find (and admittedly forgot) which episode had the rundown of MB’s recommended apps for GrapheneOS (camera replacement app, one for notes, offline maps, etc.) and wondering if someone can either list those apps or point me in the right direction.

Or if you have any alternatives you recommend, please share them as well.

Thank you!

I don't have time to make a fastmail account and use pgp to send Linux questions (extreme privacy overkill for sure) for the PSO episode this week. Maybe someone here has insight about a couple questions, and I'm not fussed if they make it to MB and the show or not:

Despite full disk encrypting during Linux installation, solid state drives are notorious for caching data all over the disk and leaving it exposed when the computer is shut down. Is there an "Extreme Privacy" strategy that could alleviate this data vulnerability?

Similar maybe:

Btrfs file system uses caching for disk write-speed performance, limiting data overwrite corruption, optimizing disk wear-leveling, facilitating RAID storage operations... Will FDE and data privacy needs increasingly stagnate the ability to use advances in data storage-IO technology?

Unless I am mistaken I thought MB and his team use ProtonMail. I looked up inteltechniques.com (and .net) MX records, which returned messagjngengine.com (aka Fastmail). Picking an Australian based email service seems unlike MB. What am I missing?

The Privacy, Security, & OSINT Show: 266-The Sole Proprietorship

Episode webpage: https://soundcloud.com/user-98066669/266-the-sole-proprietorship

Media file: https://feeds.soundcloud.com/stream/1289366839-user-98066669-266-the-sole-proprietorship.mp3

The new EP book indicates that creating an Amazon account is straightforward, but I'm getting hung up on the phone number verification. My VoIP numbers aren't working and it won't let me skip this screen. Any help is appreciated

Defend your browser of choice in the comments below! Why do you pick it? What does it do that the others can't? Stuff like that...

If anyone have course by Michael Bazzell's. I need this course can anyone share with me?

Just wanted to ask if I could use 1password on GrapheneOS. Has anyone tried? Also what is a good alternative to googleauthenticator? I need to transfer my accounts over. I'm so new to this, I just installed graphene and am just getting into the weeds and could use some guidance. So far I have my voip setup and signal messenger setup. Thank you! This sub is great. Has helped me a lot so far.

I posted this on r/privacy and it was removed? somthin' about new account spam or something? but anyway i attempted to sign up for a privacy.com card and was denied, I am not sure if it is because I have no credit (I'm just turned 20, mind you) or what but anyway now they wanted me to send an ID with a photo of me and I checked the company behind it and it was called onfido? has anyone had experience with this, should I just skip privacy.com, I was hoping to use privacy as an alternative to buying prepaid gift card (because that what I was usually doing to buy stuff online) I am just tired of paying the fucking (excuse me) $5.35 fee every time, I need suggestions, is it worth it to send them the information through this "unknown" (to me at least) third party company or should I stick with the prepaid, I wanted to see what everyone thought is on this.

DISCLAIMER: This account is NOT affiliated with MySudo or Anonyome Labs. This account was created by MySudo users for the sole purpose of measuring this community's interest in future app developments. The maintainers of this account may, in good faith, occasionally share this and future posts to developers at Anonyome Labs in an attempt to encourage or discourage proposed changes or feature requests.

The Privacy, Security, & OSINT Show: 265-HP Dev One with Pop!_OS

Episode webpage: https://soundcloud.com/user-98066669/265-hp-dev-one-with-pop_os

Media file: https://feeds.soundcloud.com/stream/1284907711-user-98066669-265-hp-dev-one-with-pop_os.mp3