Resources, methods, and observations from open-source investigations and technical research. Topics include information assessment, digital infrastructure, investigative workflows, and the online information environment.
A bilingual field guide to search, public records, and verification across the Chinese-language internet.
I finally got this one cleaned up enough to share. It’s a bilingual field guide to doing OSINT on the Chinese-language internet, up on GitHub
I’ve had a lot going on recently, but I wanted to knock out a quick blog post just to talk about what I’ve been up
I posted on LinkedIn earlier about this, but I think that while we are still in the early days of AI capabilities, we are almost
A few days ago, a fascinating article started making the rounds on X (Twitter) by security researcher @Harrris0n. The premise was simple but striking: Waze’s
January 24th 2026. It seems like a good time for my first blog post of the year. Even though this is the first blog post
Yesterday I walked through mapping a Synology share and pointing qgrep at breach data so the index lives next to the dataset instead of cluttering
If you’ve ever pointed a search tool at a giant dataset on a NAS and watched it spray indexes into your user profile… this one’s
In yesterday’s blog post, I mentioned having the opportunity—and honestly, the honor—of sitting down with David Bombal at Black Hat last week and speaking to
Getting ready to share another update from my recent Black Hat conference experience. I’ve spoken at Black Hat a few times over the past several
Hey everyone! I’ve been remiss over the past month – a little over a month, actually – in updating this blog. It’s not that I
Anyone who’s read my blog or watched my videos knows how much I love Cursor. I’ve been using AI to help me write code basically
One thing I say often is “If you see something interesting, grab a copy of it, because it may not be there tomorrow.” Links rot,