OSINT: você está sendo observado e não sabe | Starti Cast #07

Value of the Information & Strength of the Argument

The value of the information lies in its practical, real-world perspective on OSINT and social engineering. Lucas Moreira provides concrete examples of how attackers leverage publicly available data to target individuals and organizations, making the content highly relevant for both personal and corporate security. The argumentation is solid, as it is based on the speaker’s extensive experience and is presented in a logical, step-by-step manner. However, the discussion is largely anecdotal and lacks empirical evidence or references to specific studies or reports, which slightly weakens the overall argumentation.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate. The content is based on expert opinion rather than peer-reviewed research, and no formal sources are cited within the video. The description provides links to various OSINT tools and resources, which are useful for practical application but do not serve as academic references. The title accurately reflects the content, focusing on OSINT and its implications for personal and corporate security. The adequacy between title and content is good, as the video delivers on its promise to explain OSINT and its risks.

The title accurately reflects the content, which focuses on OSINT and how individuals and companies are exposed online.

7/10

The content is based on the expert testimony of Lucas Moreira, a seasoned OSINT practitioner. The discussion is practical and grounded in real-world examples, but lacks formal citations or references to academic or industry sources. The claims are plausible and align with common knowledge in cybersecurity, but the absence of verifiable sources and the conversational format limit the overall reliability.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction of Lucas Moreira and his background in OSINT and social engineering.
• 05:00Explanation of OSINT with the example of finding someone at a bar via social media.
• 10:00Discussion on how social media trends like 'who am I' can expose personal data.
• 15:00Examples of how employees' posts about their workplace can facilitate attacks.
• 20:00Explanation of the role of OSINT in penetration testing and reconnaissance.
• 25:00Discussion on how Facebook and LinkedIn are used for information gathering.
• 30:00Insights into how Twitter, Telegram, and Discord are used as sources of information.
• 35:00Advice for companies on limiting access and implementing security policies.
• 40:00Recommendation to use tools like Have I Been Pwned and password managers.
• 45:00Final thoughts on the importance of employee training and awareness.

• Have I Been Pwned — Recommended for checking if emails have been leaked in data breaches.
• Firefox Monitor — Recommended for monitoring email breaches.
• Avast Hack Check — Recommended for checking email breaches.
• Have I Been Pwned - Pwned Passwords — Recommended for checking if passwords have been leaked.
• Google Password Checkup — Recommended for checking password security.
• Bitwarden — Recommended as a password manager.
• 1Password — Recommended as a password manager.
• NordPass — Recommended as a password manager.
• WhatsMyName — Recommended for finding usernames across platforms.
• Namechk — Recommended for checking username availability.
• Sherlock — Recommended for finding usernames across social networks.
• Epieos — Recommended for OSINT investigations.

• Open-source intelligence - Wikipedia — Supports the definition and scope of OSINT as described in the video.
• Social engineering (security) - Wikipedia — Corroborates the techniques and risks of social engineering discussed.

• starti.link
• starti.link
• starti.link
• starti.link
• starti.link