Live data from Hacker News

From email to phone number, a new OSINT approach (2019)

martinvigo.com

101–110 of 127 posts

Re: From email to phone number, a new OSINT approach (2019)

#102
post #64

Earlier quoted context omitted.

I know that iPhones with SIM+eSIM can have both active at the same time, and iPhones with just eSIM can have two eSIMs active.

Yeah I found this out the hard way when travelling recently. There are some great apps that let you buy cheap data-only eSIMs in dozens of countries. You can even buy an eSIM before you travel. It’s crazy convenient and much cheaper than roaming fees. My girlfriend could keep her home phone line enabled while using the eSIM but I couldn’t, even though we have the same model of phone! Turns out her home line uses a ph…

Good news, with the elimination of the SIM card slot, they fixed this bug and you can have two eSIMs active with no chance of ever getting a physical travel sim to work! /s

Re: From email to phone number, a new OSINT approach (2019)

#103
post #73
post #63

Earlier quoted context omitted.

> Personally I prefer to use a non-obvious dedicated email per account e.g. ebpnw@mydomain.com, so the attacker has to guess the email as well. Should I stop doing my obvious, ie hackernews@mydomain.com, account emails?

If you want to increase your security, generate a random string for the "account" name. If you are using a password manager, then this shouldn't be too difficult. It can be a hassle when registering for something in person, though.

Bitwarden has a setting for doing exactly this. Create a random email and a random password on the fly during a new service signup

Also possible to create 2-3 fake Personas in app (Name, DOB, address,…) to scatter your online footprint. Fills forms with the right one at button push.

Re: From email to phone number, a new OSINT approach (2019)

#104
post #99

Earlier quoted context omitted.

I re-read this, not to fire back but to understand how you arrive at your conclusion. I think you are interpreting (or assuming maybe), from when I asked about his employer, that I suspected he stole the parts from his employer. That's not the case at all. I just needed a pressure point.

Didn’t you basically blackmail the guy?

Pressure and coercion is part and parcel of existing

Re: From email to phone number, a new OSINT approach (2019)

#105

Earlier quoted context omitted.

Awesome TLDR; Thx!

It's clearly AI generated, blatantly so.

It is but it was proofread by a human with expertise in the domain, and honestly I wouldn't have done better in such a short amount of words. If someone wants to know more they better read the article which I did to make sure the generated text wasn't bullcrap :)

Re: From email to phone number, a new OSINT approach (2019)

#106
post #64

Earlier quoted context omitted.

I know that iPhones with SIM+eSIM can have both active at the same time, and iPhones with just eSIM can have two eSIMs active.

Yeah I found this out the hard way when travelling recently. There are some great apps that let you buy cheap data-only eSIMs in dozens of countries. You can even buy an eSIM before you travel. It’s crazy convenient and much cheaper than roaming fees. My girlfriend could keep her home phone line enabled while using the eSIM but I couldn’t, even though we have the same model of phone! Turns out her home line uses a ph…

> iPhone 12 can only have 1 eSIM enabled at a time. You can do 1 physical + 1 eSIM, but not 2 esims.

IIRC this is a limitation that only applies to iPhone I am pretty sure that newer iPhone models all support dual-active eSIM, irrespective of whether or not you have a physical SIM slot model or not.

Re: From email to phone number, a new OSINT approach (2019)

#107
post #62

Earlier quoted context omitted.

Why is this not tied to a person's SSN (if possible)?

Why would a phone company know a person's SSN?!

Because regulators want to tie phone numbers to identities. It helps curb illegal activity, but of course also makes surveillance a lot easier.

Re: From email to phone number, a new OSINT approach (2019)

#110

All this hassle using different email addresses for each service and a Google voice number was worth it.

I made an email randomizer that makes scrambled emails using the "+" feature. So any external service sees "gary+FqZWMK@gmail.com" and it automatically creates an unscrambled folder in my email that takes "FqZWMK" and converts it to the name of the service like "Netflix" or whatever.

What's nice is that I completely control the mapping of ids, so if I can make multiple random addresses go to a "one-time" inbox that automatically sends emails to spam after a while.

Post reply on HN