Open Source Intelligence – OSINT 

Last week I was looking at social media and privacy and I discussed some of the things I do and don’t do to strengthen my privacy online, finishing on a promise that this week we would look at OSINT and how you “accidentally” leave breadcrumbs for the threat actors and data miners.  

Privacy is the start of better cyber security.

Reduce your OSINT footprint 

In last week’s article I had a list of some of the actions I take, and I advise our cyber security clients to think about, to reduce the leak of information through the use of the internet and apps, including social media apps. One thing that was missing from that list was that I use Tor browser when I want to disrupt Big Tech and others from fingerprinting me on the web. 

Digital Fingerprinting and OSINT 

First what is fingerprinting when it comes to internet usage – here is a quote from Smart Thinking last month: 

Digital fingerprinting is the practice of collecting, often passively and without the user’s knowledge, information about their online browsing habits and devices they are using for internet access, so later these devices/users can be identified and tracked. This is something separate from cookies that now should be transparent and in the control of the user. Digital fingerprinting is something difficult to opt out of. 

This is the type of open-source information, leaked by your web browser, about you and your team that Big Tech and threat actors would like to know.  

Tor Browser 

If you have a need to be anonymous on the web, (and I often do when carrying out cyber security projects), the Tor browser was built to provide secure web use. It was originally partly funded by the US State Department as a tool for activists and dissidents to use to protect them from their state authorities. It can be a bit slow, but it does do a good job of protecting the user’s identity whilst browsing. 

Still not convinced that this is an issue? 

Then try this website – it will show you what you reveal whilst browsing and it will even identify your particular machine’s fingerprint. 

Privacy Test & Analyzer: See what information websites know about you

If you think, InPrivate, Incognito or even just Private browser windows are the solution – well… no. Tor is the answer. 

Next week 

I have written about groundhogs for Octagon Technology this week, next week here, er…, badgers. 

Clive Catton MSc (Cyber Security) – by-line and other articles

Further Reading 

Your online identity can be fingerprinted | Smart Thinking Solutions 

Tor Project | Anonymity Online 

The Basics of Cyber Security – A quick look at OSINT and Redacting

Photo by Andrea Piacquadio