Security by Accident (@Secbyaccident) header
Security by Accident (@Secbyaccident) profile picture

Stuff about cybersec, OSINT, coding and more

Joined June 2023
Photo by Security by Accident (@Secbyaccident)Photo by Security by Accident (@Secbyaccident)Photo by Security by Accident (@Secbyaccident)Photo by Security by Accident (@Secbyaccident)
🧵 Unveiling the OSINT Journey: A Summary from My Latest Article 🧵 (1/3) Diving into Open Source Intelligence (OSINT) can transform how you approach information gathering. Whether for job hunting, pentesting, or research, mastering OSINT skills is invaluable. Let's explore.
1
59
🧵 (3/3) Organizing your findings is crucial. Whether you prefer digital notebooks, mind maps, or free-hand sketches, find the tools that suit your style. Remember, the key is to keep your data structured and accessible. #NoteTaking #ResearchTips
1
51
🔗 Dive deeper into the world of OSINT by reading the full article: buff.ly/3x1RSZ3
27
I published a new post on #Medium about #AI security.
55
Yesterday I took @DanielMiessler #Augmented course and I wanted to share my thoughts about it. How I feel (tl;dr): I was hyped for the course for weeks (he really hyped it up to be fair), but during the course I was feeling a bit weird, because it was not what I expected, and I didn’t know if it was what I wanted. But the longer I keep thinking about it and after dealing with my thoughts and feelings (by writing this post), I think it was an experience I would not have wanted to miss. However, because I am German and I like to complain, I will do so in this post, because it helps me understand my thoughts and I want to share all facets of this experience. So the following is my personal and heavily biased review of the Augmented course, discussing its pros, my experience and room for improvements. The cool stuff: Seeing Daniel’s AI stack in action and getting a breakdown on how to replicate it was really valuable. He also shared some really great ideas and concepts that can massively improve AI stacks for people (like me) that are building their own. Hearing an unfiltered version of his thoughts and ideas about AI in a live discussion with many people was also really inspiring. The course absolutely inspired me to keep building my own AI stack and gave me some valuable tools and ideas to achieve this goal. The not so cool stuff: The other reactions I have seen about his course are leaning in the direction of “OMG mind blown”, but somehow, during the entire session my head kept saying “Well this is not what I wanted.” And I am still trying to figure out why that was, but here are my initial thoughts: Because I have paid for this course myself and I usually do not spend this amount of money on courses that are not paid for by my employer ($295 for UL members), therefore my expectations may have been too high. Even tho the live discussion was inspiring and had some amazing insights, it sometimes disrupted the flow of the whole presentation or dragged out topics that I (personally) did not think were interesting. Daniel tried to please everyone, which is a nice gesture, but requires compromises. The audience ranged from people that did not know how to code to, literally, Jason Haddix, which is a pretty large spectrum to please. Suggestions: I do not know if I have the authority or knowledge to suggest improvements for a course like this, but I also think it is unfair to criticize without suggestions. So here they are, they are heavily biased by my own preferences and are a wishlist, not things that make the course a bad thing, because they are not included: Dedicated time for discussions and questions: The live discussion was crucial for the course itself, but Daniel was trying to tell a story that could have benefited from being delivered as the whole package. During that story, multiple questions that came up were already answered at some point. A dedicated slot for questions could have saved time, inspired better questions (about the whole story rather than the individual slide) and would have kept my attention more focused. Two versions of the course: Daniel did a great job pleasing everyone, but it required compromise. The section “How I Use AI” was perfect for all attendees, but after that a separate course for people who need an intro to building AI and people who wanna know about the hacks and workflows and see them in detail, would have been great. (I realize and admit that I could have asked for any code snippet or Zapier workflow throughout the entire course, but I didn’t. So that one is really on me.) Summary of the Zoom chat: I do not know if this will be included in the after course loot. The Zoom chat was going crazy with cool discussions, tips and ideas, but it was impossible to keep up with it, if you wanted to follow the main presentation. So it would be really lovely to get all the cool stuff from, there A course preparation guide: Daniel has shared a lot of his thoughts about AI and a lot of the foundational knowledge is out there so having a bundle of “things to look at before the course”, like his podcast episode on the Critical Thinking podcast or some basics about prompt engineering or LLMs would have elevated the discussion and if summarized and annotated by his own tools, it would have been a great teaser for the course. The course itself: Daniel's presentation was broken down into three parts, "How I use AI", "How To Build Your Own" and "Tying It All Together". He started by talking through his AI stack and showed us how to replicate it. The course was nicely topped off, by a brainstorming/outlook kinda exchange between Daniel and the audience about the future of AI and tool ideas. The course was done in a live Zoom session with over 200 people. This created some problems with unmuted mics and other stuff, but allowed for active participation and a lively discussion. The course was originally scheduled for 3 hours, but Daniel stayed longer, and it ended up lasting for almost 4 hours.
3
207
(2/3) From validating datasets to looking for specific information, these tools are invaluable for investigators and researchers. Integrating with APIs and allowing for complex searches, these tools significantly enhance your ability to work with leaked data.
1
49
(3/3) Discover how to utilize these tools for OSINT purposes in my comprehensive article. [buff.ly/4ayVbGi] Stay informed with the latest tools and trends by following me! #cybersecurity
1
59
Leaks and Breaches for OSINT: 🧵 (1/3) Validating breached data is a critical step in OSINT. Ensure the authenticity and relevance of the data by crosschecking with various sources or known accounts. #OSINT #infosec
1
66
(2/3) Use online platforms and specialized tools to compare and contrast data sets, confirming their validity and utility for your investigation.
1
30
(3/3) To learn more about effectively validating breached data, check out my detailed article. [buff.ly/4ayVbGi] Follow me for updates and more tips! #cybersecurity
32
Leaks and Breaches for OSINT: 🧵 (1/3) Leaked data can provide an initial foothold in investigations, revealing crucial information about targets such as email addresses and user accounts. #OSINT #infosec
1
90
(2/3) Use breached data strategically to understand your target's digital footprint, leading to further investigative opportunities.
1
25
(3/3) Explore strategies for leveraging breached data in my in-depth article. [buff.ly/4ayVbGi] Stay tuned for more insights by following me! #cybersecurity
32
Leaks and Breaches for OSINT: 🧵 (1/3) Breached data can expand your investigation, revealing new avenues and attack surfaces. Learn to use this data to discover more about your target. #OSINT #infosec
1
53
(2/3) Explore how to utilize leaked information to uncover additional details about your target's activities and associations.
1
35
(3/3) For techniques and tips on broadening your investigative scope using breached data, read my full article. [buff.ly/4ayVbGi] Follow me for ongoing insights! #cybersecurity
28