Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

From email to phone number, a new OSINT approach (2019)

martinvigo.com

Post reply on HN
Print view View original

71–80 of 127 posts

Re: From email to phone number, a new OSINT approach (2019)

#71

Post by darkwater »

guru4consulting wrote: post #47
stephenr wrote: post #28

Earlier quoted context omitted.

> For the second SIM option, that requires a dual-SIM device Or a device that supports an eSIM, which is every iPhone since 2018, for starters.

I guess dual SIM is different from having eSIM+physical SIM. Dual SIM typically allows both SIMs/phone-numbers to be active and when you receive a call, you will know which number is being called. With eSIM+physical SIM card, only one can be active at a time. The other has to be disabled. At least, this is what I found few years back.

Nope, eSIM plus physical SIM in an iPhone or in a Pixel or any other phone work just like 2 physical SIMs. It's been supported in mainstream Android for a few years now. Previously it was supported only on devices with 2 slots and each vendor had their flavor in Android.

Re: From email to phone number, a new OSINT approach (2019)

#72

Post by jmprspret »

dotBen wrote: post #55
1nd1ansumm3r wrote: post #52

Fun to see this issue get talked about. Ancedote- I bought some car parts from a semi-scammer. Not a full-on scam but the guy wouldn't ship the complete order even though he had my money for several weeks. We had communicated on a few different platforms. Each platform offered up a little piece of his identity. Last four of this. First four of that. It was enough to piece it all together. I gave him a call at his pla…

[flagged]

Yeah? Sounds pretty badass to me

Re: From email to phone number, a new OSINT approach (2019)

#73

Post by Sardtok »

thedaly wrote: post #63
pnw wrote: post #33

Earlier quoted context omitted.

eBay doesn't block Google voice numbers. The only site which seems to is Discord in my experience. Personally I prefer to use a non-obvious dedicated email per account e.g. ebpnw@mydomain.com, so the attacker has to guess the email as well.

> Personally I prefer to use a non-obvious dedicated email per account e.g. ebpnw@mydomain.com, so the attacker has to guess the email as well. Should I stop doing my obvious, ie hackernews@mydomain.com, account emails?

If you want to increase your security, generate a random string for the "account" name.

If you are using a password manager, then this shouldn't be too difficult.

It can be a hassle when registering for something in person, though.

Re: From email to phone number, a new OSINT approach (2019)

#74

Post by MR4D »

dotBen wrote: post #55
1nd1ansumm3r wrote: post #52

Fun to see this issue get talked about. Ancedote- I bought some car parts from a semi-scammer. Not a full-on scam but the guy wouldn't ship the complete order even though he had my money for several weeks. We had communicated on a few different platforms. Each platform offered up a little piece of his identity. Last four of this. First four of that. It was enough to piece it all together. I gave him a call at his pla…

[flagged]

They could also have been counterfeit or substandard.

Not saying you're wrong (because I think you're right), but there are other scenarios here, so from a theft perspective, the OP would be not guilty.

Re: From email to phone number, a new OSINT approach (2019)

#75

Post by caturopath »

aidenn0 wrote: post #34
stephenr wrote: post #28

Earlier quoted context omitted.

> For the second SIM option, that requires a dual-SIM device Or a device that supports an eSIM, which is every iPhone since 2018, for starters.

The eSIM is going to be more expensive than a regular SIM since no MVNO I'm aware of in the US supports eSIMs

I use Visible and Mint via eSIM

Re: From email to phone number, a new OSINT approach (2019)

#76

Post by 1nd1ansumm3r »

dotBen wrote: post #55
1nd1ansumm3r wrote: post #52

Fun to see this issue get talked about. Ancedote- I bought some car parts from a semi-scammer. Not a full-on scam but the guy wouldn't ship the complete order even though he had my money for several weeks. We had communicated on a few different platforms. Each platform offered up a little piece of his identity. Last four of this. First four of that. It was enough to piece it all together. I gave him a call at his pla…

[flagged]

Explain the knowingly part. I never suspected he did not own them or that they were stolen. Just knew that he took my money and didn't ship a complete order.

Re: From email to phone number, a new OSINT approach (2019)

#78

Post by m463 »

dotBen wrote: post #55
1nd1ansumm3r wrote: post #52

Fun to see this issue get talked about. Ancedote- I bought some car parts from a semi-scammer. Not a full-on scam but the guy wouldn't ship the complete order even though he had my money for several weeks. We had communicated on a few different platforms. Each platform offered up a little piece of his identity. Last four of this. First four of that. It was enough to piece it all together. I gave him a call at his pla…

[flagged]

sounds more like he was competing against his employer

Re: From email to phone number, a new OSINT approach (2019)

#79

Post by rsync »

miki123211 wrote: post #24

There's one missing piece in that article, and it's the CNAM database (US only). CNAM is the database that carriers use to give you alphanumeric caller ID ("SMITH JOHN" instead of "+1 (555) 123-4567"). Many carriers don't display this data as far as I believe, but most of them make it available. Querying that database isn't free, but you could probably find a way to do it for a few hundred numbers relatively cheaply.…

"Querying that database isn't free, but you could probably find a way to do it for a few hundred numbers relatively cheaply."

  /usr/local/bin/curl -s -X GET "https://lookups.twilio.com/v1/PhoneNumbers/$number?Type=carrier&Type=caller-name" -u $accountsid:$authtoken | /usr/local/bin/jq '.'
I don't even know what it costs ... maybe a penny per lookup ? I forget ...

It also shows carrier and whether it is a mobile or landline, etc.

Post reply on HN