osint

#020 - In this next episode I was happy to be joined by Jameson Ritter, CTM, CPP, PSP, PCI, all the way from the North Star State. He's a security leader, with a passion for threat management and violence prevention. His experience ranges from Air Force EOD, to Law Enforcement, to protecting private organizations.

And what I think you’ll enjoy most about my conversation with Jameson is his enthusiasm for getting people interested in threat assessment (myself included). Plus he shared great insights about the human element of workplace training, his ideas on the importance of networking with our security peers, and of course — why you should consider participating with ATAP (Association of Threat Assessment Professionals).

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

 In this episode guest on the podcast is Skip Schiphorst - an Open Source Intelligence (OSINT) language course developer and instructor who served 17 years in the Dutch Ministry of Defence. He deployed to several regions, during which his language and cultural skills were used. Skip, who holds a university degree in China Studies has a keen interest in how to incorporate languages within the OSINT spectrum. He works at I-Intelligence and their OSINT language courses include Chinese, Arabic as well as Russian; these courses show researchers that do not speak these languages how to find information online for CDD, AML, KYC and many more research purposes.
Use promo code IINT102023 for 10% off on language courses or any other i-intelligence courses.

Chinese Open Source Intelligence course:
https://i-intelligence.eu/courses/osint-chinese-internet
Arabic Open Source Intelligence course:

https://i-intelligence.eu/courses/osint-searching-the-arabic-web
Russian Open Source Intelligence course:

https://i-intelligence.eu/courses/osint-searching-the-russian-internet-virtual-course

Support Compliance Time: www.podinbox.com/compliancetime

#019 - In this next episode I was honored to be joined by (the immensely knowledgeable) Matthew Dimmick CPP, PSP, CPD. He is a physical security leader supporting organizations as a consultant. He has broad experience  from being an MP in the US Army, from supporting CBRN teams, and tons of experience in security consulting roles — which we’ll focus on today.

You’re going to love today’s discussion because Matt drew our attention to many less-common topics among security pros such as why design thinking and user experience are important for physical security project success. Or how mind mapping can help you prepare for your future career opportunities. And so much more.

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

As 2022 wraps up, I wanted to bring some of the most insightful moments from conversations over the past year: 12 clips from 12 conversations. 

---
Episode Sponsor: OpenCage
Use OpenCage for your geocoding needs with their API.
They have a generous Free trial you can sign up to!
---

Timestamps: 
00:00 Introduction 
02:32 Steve Coast: The Next Thing that would Blow Up Openstreetmap 
06:39 Barbara Ryan: How Landsat Became Free & Open 
17:52 Jeffrey Lewis: Calling Out the Invasion of Ukraine an hour before it happened 
23:47 Arjen Vrielink: Using Remote Sensing to Prevent Deforestation 
32:07 Indra Den Bakker: Finding Product Market Fit with Satellite Image Analytics 
37:49 Jeff Crusey: How Venture Capitalism Works (Applied to Earth Observation) 
44:01 Mo Islam: Why Investors Don't Quite Understand Earth Observation Just Yet 
50:46 Kevin Pomfret: Why Law Makers Don't Understand Geospatial 
54:50 Andrew Blum: Concerns About the Privatisation of Weather Forecasting 
58:32 Hamed Alemohammad: Difference Between Google Earth Engine, Microsoft Planetary Computer & AWS 
01:03:47 Catherine Nakalembe: Food Security is More than Food in Stores 
01:10:00 Jean Martin Bauer: We Need More than Knowing Where Food is Needed 
01:15:10: Conclusion

Links to full conversations: 
- Steve Coast
- Barbara Ryan
- Jeffrey Lewis
- Arjen Vrielink
- Indra Den Bakker
- Jeff Crusey
- Mo Islam
- Kevin Pomfret
- Andrew Blum
- Hamed Alemohammad
- Catherine Nakalembe
- Jean-Martin Bauer

Feel free to reach out! 
- Website
- My Twitter
- Podcast Twitter
- Read Previous Issues of the Newsletter

#018 - In this next episode, I was honored to be joined by Robert Crapo. He is a cyber intelligence leader in his organization, in the financial services industry. He has broad experience from being an intel officer in the US Army, he’s worked in intel analyst roles, and now leads projects that are a fusion of global intel and cyber threat intel — supporting diverse stakeholders across his organization.  Plus, he’s earned his Master’s from the university of South Florida.

Today's discussion was really interesting for me, especially because Robert made a pivot of sorts in his career from being an intel analyst to supporting and leading cyber initiatives in his organization — and I think this is an essential idea for analysts out there to think about — your skills are highly transferable across other security disciplines and you can be so much more than you are!

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

In this episode, host Bidemi Ologunde had an insightful conversation with Javvad Malik, a lead security awareness advocate at KnowBe4, the world’s largest provider of simulated phishing and security awareness training to corporate organizations. We talked about security awareness, behavioural analytics, social engineering, insider threat detection, personal security, social media, red flags to look out for in email messages, how to effectively manage our digital footprint, open-source intelligence (OSINT), security incentives, and much more.

Check out host Bidemi Ologunde's other creative outlets on LinkTree.

=======
Beautiful, custom travel maps – starting at $20

Atlas.co is the only map company that lets you add your custom route to your personalized map. The process is simple:

- Select your trip type and add your trip
- Style your map, move / edit your labels
- Select your size and material type and submit your order!

Pick from a selection of beautiful styles and colors that we're sure will fit any home or space. Add some text to make it truly yours!
=======
Insightful business news that respects your time and intelligence.

The Daily Upside is a business newsletter that covers the most important stories in business in a style that's engaging, insightful, and fun. Started by a former investment banker, The Daily Upside delivers quality insights and surfaces unique stories you won't read elsewhere.

Sign up here.
=======

2014 verschwand das Flugzeug MH17 der Malaysian Airlines mit fast 300 Menschen an Bord unter rätselhaften Umständen über ukrainischem Gebiet. Russland beschuldigte das ukrainische Militär. Später konnte jedoch nachgewiesen werden, dass wahrscheinlich eine russische Rakete den Absturz verursachte. Aufgedeckt hatte das ein Netzwerk von Bloggern, Journalistinnen und Nerds. Sie nannten sich «Bellingcat» – und arbeiteten für ihre Recherchen mit frei zugänglichen Bildern und Daten aus dem Internet.

Bernhard Odehnal vom Tamedia-Recherchedesk hat Grosew in Zürich zum Gespräch getroffen. Im Podcast «Apropos» erzählt er, welche Rolle Bellingcat im Informationskrieg spielt. Und wie Grosew mit der Bedrohung lebt, von Russland als Staatsfeind betrachtet zu werden. 

Mehr zum Thema:

• Interview mit Christo Grosew (ABO) | «Wenn es so weitergeht, wird Putin innert eines Jahres stürzen»
• Video mit Christo Grosew

Als Podcast-Hörer:in den Tagi 3 Monate zum Preis von einem Monat lesen und hören: tagiabo.ch
Habt ihr Feedback, Ideen oder Kritik zu «Apropos»? Schreibt uns an podcasts@tamedia.ch

This week in InfoSec (06:37)

With content liberated from the “today in infosec” twitter account and further afield

27th September, 1998: For some peculiar reason, Google has at times chosen the date of September 27th as their birthday, even though it is more officially September 4th or 7th. Google has no explanation for celebrating their birthday on different days over the years other than to say:

Google opened its doors in September 1998. The exact date when we celebrate our birthday has moved around over the years, depending on when people feel like having cake.

27th September 1997: Just a little over two weeks after naming Steve Jobs interim CEO, Apple launches their “Think Different” ad campaign. Designed to reintroduce the Apple brand, the campaign was nearly universally praised by the press, general public, and advertising industry, winning several awards along the way. Looking back in context, Think Different was the symbolic start of Apple’s resurgence from near-collapse in the 1990’s into the most valuable company in the world.

27th September 1996: Hacker Mitnick Indicted on Charges.  Kevin Mitnick, 33, was indicted on charges resulting from a 2 ½-year hacking spree. Police accused the hacker, who called himself "Condor," of stealing software worth millions of dollars from major computer corporations. The maximum possible sentence for his crimes was 200 years.

Rant of the Week (12:07)

Microsoft warns of North Korean crew posing as LinkedIn recruiters

Microsoft has claimed a North Korean crew poses as LinkedIn recruiters to distribute poisoned versions of open source software packages.

The state-sponsored group has been around since 2009 and was allegedly behind the 2014 attack on Sony Pictures in retaliation for the controversial Seth Rogen comedy The Interview.

Dubbed "ZINC", the threat actors have previously run long-term phishing schemes targeting media, defence and aerospace, and IT services organizations in the US, UK, India, and Russia.

Billy Big Balls of the Week (20:28)

Ever suspected bankers could just use WhatsApp comms? $1.8b says you're right

Ever given a colleague a quick Signal call so you can sidestep a monitored workplace app? Well, we'd hope you're not in a highly regulated industry like staff at eleven of the world's most powerful financial firms, who yesterday were fined nearly $2 billion for off-channel comms.

Industry News (26:50)

Ransomware Affiliates Adopt Data Destruction

ReasonLabs Unveils Multimillion Dollar Global Credit Card Scam

Fitbit Increases Security Requirements, Mandates Google Login From 2023

Alleged Optus Hacker Apologizes, Deletes Customers' Exposed Data

ICO Reprimands UK Organizations for GDPR Failings

Hacker Breaches Fast Company Apple News Account, Sends Racist Messages

IRS Warns of "Industrial Scale" Smishing Surge

Mobile, Cloud and Email Are Top Threat Vectors For 2023

LeakBase: India Swachhata Platform Breached, 16 Million User PII Records Exposed

Tweet of the Week (34:45)

https://twitter.com/inversecos/status/1575606074635214848   

Come on! Like and bloody well subscribe!

Links

1. “Analytic Reflection: Measuring the Attributes of Open and All-Source Intelligence,” by Brian Holmes, Homeland Security Today, June 8, 2020.
2. “Feedback Driven Decisions and the Evolution of Intelligence Analysis in the United States," by Brian Holmes, The Strategy Bridge, January 23, 2020.
3. “A Short History of Maritime Intelligence Integration,” by Dr. Brian Holmes, NMIO Technical Bulletin, March 2019, p. 4-5.
4. Brian Holmes, Author at Hstoday.

#17 - In this next episode I was honored to be joined once again by Michael Guirguis, M.D. He is currently a practicing emergency medical physician, a Medical Director for an ultra high net worth family office, he supports the San Bernardino County Sheriff’s as a Deputy Flight Physician, and he’s also a contributor to the Board of Executive Protection Professionals. In terms of education, he’s a graduate of Harvard Medical School, UCLA, and also a Loma Linda Medical Center post-grad.

Today's discussion is really cool because it gets away from the normal format of the show to focus on one topic specifically: medical kits.

How should we think about the medical kits that we build, how should we pack them, what are common mistakes? Plus, for the last 25 min of the show, Dr. Guirguis critiques my medical bag and gives me considerations for improving it. 

If you'd like to get the resources and show notes mentioned in this episode, go to: 

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

Jeffrey Lewis is a Professor at the Middlebury Institute of International Studies at Monterey and one of the most influential people in the Open Source Intelligence Community. He is also the host of the "Arms Control Wonk" podcast.

--- 

Episode Sponsor: Element84
Dan Pilone’s appearance on the podcast

---

About Jeffrey:
- Twitter
- LinkedIn

Shownotes:

• Dino Brugioni
• Seeing the Secrets Growing the Leaders
• HawkEye 360 GPS Interference
• Yandex changing the borders on maps
• Jeffrey’s Tweet announcing the invasion of Ukraine an hour before it happened
• Jeffrey’s podcast: Arms Control Wonk
• Books & Podcast Recommendations:
  • The Mapmakers by John Noble Wilford
  • The Essentials of SAR: A Conceptual View of Synthetic Aperture Radar and Its Remarkable Capabilities by Thomas Ager
  • BBC Witness History

Timestamps:

00:00 Introduction 
02:42 Conversation begins: Jeffrey is an Open Spy 
05:05 The appeal of doing Intelligence Analysis in Public 
09:36 Jeffrey's OSINT early days: the War in Irak 
16:49 An example of 'bad OSINT' 
20:49 The Tricky Nature of Confirmation Bias 
25:05 How an OSINT Story Starts 
28:10 Being Right, or at least Wrong for the Right Reasons 
30:30 Reputation in reporting, especially in the Open 
35:55 Monitoring for news 
39:26 Machine Learning in OSINT 
41:37 The Difficult Yet Informative Nature of Synthetic Aperture Radar 
47:58 Partnering with Satellite Image Providers 
59:22 Satellite images yes, but they're only 1 component 
01:06:40 The use of Open Satellite Imagery Data 
01:17:55 Teaching OSINT 
01:25:07 The ever faster increase in our access to Data 
01:29:40 Filtering out the crap 
01:33:20 Knowing who to trust: The Ukraine use-case 
01:37:43 How Jeffrey's team called out the Russian Invasion 1h before it happened 
01:43:21 The power of Companies 
01:48:52 Funding & How to Stay Independent 
01:52:51 Advocacy 
01:59:00 The tools used for OSINT 
02:07:48 The Surprising Impact of Ukraine on the Public's View of Nuclear Dissuasion 
02:10:54 Nuclear weapons are not fun, like really not 
02:14:18 Working with a Community 
02:17:37 Jeffrey's podcast: Arms Control Wonk 
02:22:51 Books & Podcast Recommendations

Feel free to reach out! 
- Website
- My Twitter
- Podcast Twitter
- Previous Newsletter: Why I want to do more interviews in person
- Sponsor the Podcast

#016 - In this next Episode, I was honored to be joined by Dr. Ygnacio “Nash” Flores, an experienced educator and security leader. Nash is a professor teaching Homeland Security, Administration of Justice, and Corrections at Rio Hondo College in Whittier, CA.  Prior to his teaching roles, he was the Dean of Public Safety. And he also served in the US Navy for 26 years — he was enlisted for 14 years, before earning his commission and eventually retiring as a Lieutenant Commander responsible for leading physical security and law enforcement projects.

Plus, he's a fellow USC Trojan (fight on!). That's where he earned his doctorate in Education.

During our chat, Nash shared some excellent insights from his experience in working with young people as a professor and from his deep experience in security and public safety roles. Some of the topics we touched on included: cultural intelligence, allowing people to make mistakes (to learn from them), and much more.

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

#015 - In this next Episode, I was lucky to be joined by Andrew Owlett, an experienced security leader who also makes a project out of coaching aspiring practitioners. He is currently a Supply Chain Security Leader for one of the biggest tech companies on the planet. He’s got nearly 20 years' experience working in diverse emergency management and business continuity related roles. And he's earned his MS in Homeland Security from the University of Maryland.

During our chat, Andrew shared some insights around how he went from being an EMT to leading teams globally in Business Continuity and Supply Chain Security, characteristics that make someone successful in his line of work, bad career advice (to avoid), and so much more!

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

#014 - A quick recap of interesting ideas and themes from the first 10 interviews on the show.

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

#013 - In this episode I was excited to be joined by Dr. Michael Biocchi.  He teaches university courses on a variety of Computer Science topics. His courses on Udemy have been taken by 30,000+ professionals and he’s even authored several books. Leading up to his current projects, Mike studied Computer Science during his undergrad, graduate, and post-graduate studies. Plus, he’s got his CISSP and a ton of practical experience from working his way up from help desk to IT Director and onto security leadership roles.

During our chat, Mike shared some wonderful ideas about the advantage of pursuing creative projects that challenge you to develop your security skills, how to think about balancing academic vs other education mediums, and so much more.

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

And visit Mike's personal website here:

https://www.mikebiocchi.com/

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

#012 - In this episode I was honored to be joined by Michael Guirguis, M.D., who has some amazing expertise and experience. He is currently a practicing emergency medical physician, a Medical Director for an ultra high net worth family office, he supports the San Bernardino County Sheriff’s as a Deputy Flight Physician, and he’s also a contributor to the Board of Executive Protection Professionals via the Technical Committee and Working Groups. In terms of education, he’s a graduate of Harvard Medical School, UCLA, and also a Loma Linda Medical Center post-grad.

During our chat, Michael shared his perspective on the role of emergency medical training in private security and executive protection. Plus, he discussed a number of ideas for improving how we all approach and think about medical training in our day to day roles.

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes

#011 - In this episode I was lucky to be joined by the SUPER knowledgeable Dean Cornelison (CFE, CIFA, CIFI, FCLS), who's had an incredible career working fraud investigations over the years, and who is currently supporting Skopenow as a Solutions Architect — leading a number of projects including those around innovation.

During our convo, Dean shared a ton of cool insights. First, about his career in insurance fraud investigations, then his thoughts on the importance of finding career roles that you're passionate about; surrounding yourself with great mentors and a solid network. Then finally we wrapped up the show with Dean's (excellent) book recommendations and his advice for aspiring practitioners.

If you'd like to get the resources and show notes mentioned in this episode, go to:

https://thesecuritystudent.com/shownotes

-- Get the resources and show notes mentioned in this episode --

https://thesecuritystudent.com/shownotes