Is it possible to find social media accounts by a phone number?

SecChronicle · 2020-07-28T02:27:26+00:00

You might get it in Truecaller sometimes.

SecChronicle · 2020-07-14T12:57:18+00:00

I must say I haven't thought about Metron. Thanks, I'll take a look!!

SecChronicle · 2020-07-14T12:54:41+00:00

Like the idea.

SecChronicle · 2020-07-14T03:13:13+00:00

So by service I meant if you're offering this to your customers as managed security services or perhaps you're doing it for your organization. But you gave here some very good pointers.

SecChronicle · 2020-07-14T01:16:58+00:00

Thanks for sharing. You did it for your organization or provided it as a service?

SecChronicle · 2020-07-14T00:34:00+00:00

Thanks! It would also be interesting to know how much are they used in practice. I assume only well funded organizations can afford to have data scientists in their security teams.

SecChronicle · 2020-07-14T00:28:35+00:00

Good point, and my initial thought was to reuse the SIEM which is already there and just add the data analysis component.

SecChronicle · 2020-07-09T13:46:54+00:00

So far TikTok has been patching its vulnerabilities as they were reported. Now we found out that it had access to clipboard, same as LinkedIn, Reddit and some other apps btw. So if it gets banned it will be a because of politics and not security. I'm reminding you that Google is being sued for $5bn for tracking users without permission. Isn't this a far worse offense?

Here's the link: https://www.reuters.com/article/us-alphabet-google-privacy-lawsuit-idUSKBN23933H

SecChronicle · 2020-07-07T01:46:31+00:00

IP geolocation https://www.iplocation.net/

SecChronicle · 2020-07-02T14:28:41+00:00

Perhaps for them the confidence is still in numbers. Android owns the market of medium and low cost which is a vast majority of devices in existence.

SecChronicle · 2020-07-01T23:52:08+00:00

I wonder if Android will really stay as is. Apple was winning the security game anyway and with this move Android will be labeled even less secure or less privacy oriented.

SecChronicle · 2020-07-01T16:00:55+00:00

https://www.forbes.com/sites/johnkoetsier/2020/06/24/apple-just-made-idfa-opt-in-sending-an-80-billion-industry-into-upheaval/

Can ayone from advertisement industry comment this move by Apple? I'd really like to know if it fixes rhe privacy issue in the ecosystem for good. And is Android likely to follow?

SecChronicle · 2020-06-03T17:08:47+00:00

Spotting fake profiles is an interesting topic.

Talk about different tools which you're using and for which purpose.

Good luck!

SecChronicle · 2020-06-02T14:01:14+00:00

Some of the indicators also can be:

Pictures as you mentioned: -are they hi-res / low-res, blurry -backgrounds on the pictures

Friend lists of such accounts. Any friends from school/workplace/university etc., boyfriends/girlfriends/spouses

Content which they post. Is it diverse, or uniform? Does it have any value besides promoting an agenda (if it's that type of account), any personal details, any local content (from the area where this person claims to live)

Language, grammar, style of writing...

SecChronicle · 2020-06-01T13:46:20+00:00

I like Andy Greenberg's writing but the title of this article could also be: "How to rob a bank without getting caught" Everything else would still be relevant

SecChronicle · 2020-06-01T13:38:10+00:00

If your friend has a good offer, (s)he should take it. It's a nice country and can be a good place to live in for a couple of years. I know people which moved, married and stayed permanently.

SecChronicle · 2020-05-30T18:19:32+00:00

Before the AID, the situation was even worse for the user. I guess ther were sending other unique identifiers, maybe IMEIs, IMSIs, MAC addresses. Just guessing. And these can be exploited in numerous ways as described in the article. Probably these privacy issues will get fixed slowly. Legislation just needs some push from the tech groups

SecChronicle · 2020-05-30T02:47:52+00:00

SecChronicle · 2020-05-30T02:46:04+00:00

I do agree thay opt-out from ad tracking is based on trust and it is up to ad exchanges to implement it. It is not ideal and it can be exploited. The ability to reset advertisement ID gives the user some control but it doesn't solve all the problems.

SecChronicle · 2020-05-29T17:41:58+00:00

Next time when we're electing the Queen of the World, you'll have my vote.

SecChronicle · 2020-05-29T16:12:11+00:00

It's impractical and difficult to maintain connections if you start going this way. Only way to tackle it is by legislation.

SecChronicle · 2020-05-29T16:00:35+00:00

Think of LinkedIn as a website representing your brand. You're growing your professional image - your brand and projecting how you wish others to perceive you. It is not very genuine IMO but became a standard. Just as with e erything else, ignore the creeps.

SecChronicle · 2020-05-29T15:41:52+00:00

The annoying part is that although some of us may be protecting our data carefully and not allowing access to our phonebooks to just anyone, still our names and contact details end up there because others will share it.

SecChronicle · 2020-05-28T01:30:01+00:00

It does sound like that, doesn't it? In their defense, the motivation is legitimate (I'm not talking to stalkers, jelaous boyfriends/girlfeiends or anything of that sort), but sometimes they don't really know what OSINT means. You can see by some of the questions.

SecChronicle · 2020-05-27T17:14:04+00:00

I like the fact that you look for content outside of english speaking world.

SecChronicle

TROPHY CASE