Monthly Archive for November, 2009

Video Search Engine

It’s amazing what you can find on the Internet…

Clicker Video Search Engine

But really, if you’re looking for some useful video, Clicker catalogs online broadcast programming, along with TV-quality Web originals; it’s part directory, part search engine, and part wiki. Every show and episode comes with pictures, descriptions, tags, categories, cast members, airdates, related shows, programming notes.

Clicker contains more than 450,000 episodes, from over 6,000 shows, from over 1,200 networks, tens of thousands of movies, and 50,000 music videos from 20,000 artists.

Go Straight to the Last Page

Google doesn’t always search for ALL the words in your search statement. Sometimes, you see this at the bottom of the last page of results:

Tip: These results do not include the word “something”. Show results that include “something”.

“Something” could be any term in your search statement. This will appear at the bottom of the last page  page of results. How many people go there? I set my Google results to show 100 results and I may get 8 to 10 pages of results.

Now I go straight to the last page to see what wasn’t included in the search results.

Knowem

James Ruotolo at FraudPro found Knowem to be a good way to find what social sites have a particular user name. I’m going to add this to my list of ways for Finding Usernames.

TweetMeme

TweetMeme is a service which aggregates links on Twitter to determine which links are most popular. TweetMeme categorises these links into Categories, Subcategories and Channels, making it easy to filter out the noise to find what you’re interested in.

We make it easy for you to subscribe to each category and the most popular through  their RSS feeds and Twitter accounts.

The thing that interests me most is the search facility that works quite well, especially for finding Tweets that include company names.

Pocket Spy

The pocket spy: Will your Smartphone rat you out?
by Linda Geddes,14 October 2009 issue of New Scientist

  • learn where to get an app that will encrypt all the data on your phone
  • should you lose it
  • what happens with recycled cell phones
  • a smashed my SIM card can still have data extracted from it
  • and much more

Surveillance

Investigators observe to gather intelligence.

Yelling a child’s name in public when trying to get them off the playground, out of the store, or into the car will identify a family member by name. The same is true for anybody else hailed in this way by the subject. Knowing the person’s name makes it easy to strike-up a conversation about the subject to gather further information.

Parking permits, school stickers, and vacation magnets on the subject’s car, team shirts and other personalized items are a wealth of information to any Investigator who cares to notice. In minutes an Investigator could know the the names of the subject’s kid and school, along with the subject’s favorite beach and what sport he likes. This is excellent life-style data.

Twitter Lists

Twitter lists are becoming an interesting crowd sourcing phenomenon. Twitter Lists is becoming a favorite tool for Twitter. The lists identify specific individuals in vertical fields.

To make a list, sign in to your Twitter account and click on navigation-bar item that reads “New Lists”. A pop-up window asks you to name your new list and if you want it to be public or not. When you make your own list be careful; a public list may reveal too much about what you are interested in.

You should first look for the list you want to create, somebody has probably already created it, but at the moment there isn’t a good way to find lists. Go to Twitter’s people search page and do a search for your list topic and rummage around to find accounts to add to your list. Eventually these lists will be useful once they are easier to find and search.

Listorious has compiled a list of lists of sorts but it isn’t a true search engine. This site and the Twitter people search seem to be the best tools to use when dealing with Twitter Lists.

Stealth Searching III

In a previous article on Stealth Searching I wrote:

You will not click on any links on the cached pages as these will go to live pages. You will not allow your browser to download any images on the cached pages, as they may be live images from the target domain. You will be STEALTHY. They won’t see you coming.

A reader suggested that this requires some further explanation.

Google Cache Risks

Google caches only the text of the Web page. When  the Googlebot copies the first 101K of HTML to a Google server, external files such as Javascript, Cascading Style Sheets, images, Flash, etc. are not saved. The images load from the live site not the Google cache.  Normally, when you view the cached copy, you are not connecting to the live site. However, following any link on the cached page will connect you to the live Web site, if it still exists. Some pages in Google’s cache load the entire page from the original server thanks to a simple redirection script. If a cached page has no external files, then you will not show up in the site’s log by viewing Google’s cache; but how likely is that?

The Wayback Machine

The Wayback Machine changes the links of cached pages, to allow navigation within the cached pages. However, there is always the chance that you will navigate yourself out to the original site. Remember, nothing is prefect and this stuff wasn’t designed with anonymity as its objective.

The Dangers of TOR

Using TOR to explore the Google cache and The Wayback Machine seems to be the only option. However, Web history and geographic origin affects search results when you use TOR or similar methods.

TOR does require a certain level of technical knowledge and sophistication or it can backfire on you. For example, the SSLstrip attack that is now in the wild:

The attack is more than theoretical. Marlinspike tested the software on a public server he hosted for users of the Tor anonymous browsing network; he was, by his own account, able to grab passwords to 117 e-mail accounts, 16 credit cards numbers, seven Paypal logins and about 300 other logins to supposedly secure sites ranging from Gmail to Ticketmaster to Facebook.

If a TOR server is set-up for the purpose of running SSLstrip, then you’re in trouble. The very nature of TOR makes the possibility of a corrupt TOR server rerouting your data to the attacker very possible and an ideal situation for the crook.To use TOR effectively, the proxy must be configured properly and the user must be very observant to prevent an attack via SSLslip and similar threats. Google Cache Google The Onion Router The Wayback Machine Private Investigator Toronto Ontario Canada

Remembrance Day

Fake Bank Record Scam

Ex-cop, wife accused of faking bank records

Police say duo reeled in clients by claiming ex-spouses, relatives stashed money offshore

Cullen Johnson was a top Toronto cop.

Elaine White was a dogged investigator at a downtown accounting firm.

Now the husband and wife team of private detectives are accused of forging and selling bank records that make clients believe an ex-spouse, friend or employee has millions of dollars stashed offshore…

This is a case where the victims should have known what was on offer was too good to be true.

Secret sources always introduce reliability problems into an investigation or research project.

For example, is the source lying; does the source even know what he’s talking about; is the information old; and is this a trick of some kind? Is the secret source doing something illegal to obtain the information? Is the data fabricated?

Open sources, on the other hand, can be fact-checked in real-time through multiple sources. Open sources can be properly identified and the collection method can be explained fully.

Twyman’s Law

Remember, Twyman’s Law states:

Any piece of data or evidence that looks interesting or unusual is probably wrong!

Bing searching Facebook and Twitter

Microsoft to Data-Mine Facebook & Twitter

Microsoft has cut non-exclusive deals with both Facebook and Twitter for Bing.

Microsoft has cut non-exclusive deals with both Facebook and Twitter for Bing to search their real-time data feeds. Google has followed suit at least with Twitter, but Facebook is the prize because it has like 40 million updates a day from its 300 million users. Not all Facebook updates will be searched by Bing, however, only the ones made available to the wider public. Facebook, where Microsoft has an equity stake, will apparently provide users with a numbers of new tools to do so. It is unclear how much Microsoft is paying. The Twitter integration is already in beta. The deals suggest that Twitter, which has raised $155 million in venture capital, will see its first revenue since ads will follow. Terms were not disclosed.

Microsoft’s stake in Facebook may give us some interesting tools for searching Facebook in the near future.

Bungled Criminal Background Investigation

Bungled Canadian Criminal Background Check

The Courthouse News Service  reports on a bungled background investigation:

CHICAGO (CN) – An investigation agency claims it was ruined by a firm that did a slipshod background check on “reality” TV star Ryan Jenkins, who allegedly murdered his wife, dismembered her body and then killed himself. Collective Intelligence says it was hired to screen contestants for the VH1 show “Megan Wants a Millionaire,” but could not check Jenkins’ background in Canada, so it hired defendant Straightline International to do it.

Collective says Straightline told it Jenkins had no criminal record, though in fact he had a conviction for domestic assault on a girlfriend, according to the complaint in Cook County Court.

In August, Jenkins killed his wife, model Jasmine Fiore, dismembered her body, then fled to Canada and killed himself in a hotel, according to the complaint.
VH1 canceled the show, as well as “I Love Money 3,” on which Jenkins also appeared, to distance itself from media scrutiny, the complaint states.

Collective claims that Viacom, which owns VH1, CBS and MTV, ended its relationship with Collective over the mistake.

Collective says Straightline did not request a background check on Jenkins from the Royal Canadian Mounted Police, as expected, but instead got its erroneous information from a court clerk in Alberta.

Collective claims Straightline will not answer or return phone calls and will not provide it with more information about the background check it did on Jenkins.

Collective claims it has more than 90 clients in the entertainment industry and now its reputation is tarnished. It says that Viacom, ABC and NBC have since rejected it as a screener for their shows.

Collective seeks damages for breach of contract, unjust enrichment, negligence, fraud, and tortious interference.

It is represented by Louis Chronowski with Seyfarth Shaw.

In the full copy of the Complaint you will notice a document (Exhibit E starting on page 22) from the John Howard Society dated 2000 titled Understanding Criminal Records. A link to this document appears on the web site of  Straightline International to this day.

Canadian Criminal Background Checks

Background checks for criminal activity are often done for several reasons:

  • Job Applications
  • Security Clearance
  • Emigration

For example, many truck companies complete checks to ensure their trucks will not be seized at the border because the driver has a criminal record. The Access to Information Act permits an individual to apply for a copy of his or her criminal record. This may be done in one of two ways.

The first is done by providing a certified copy of the person’s fingerprints. The report will show all the particulars, including the disposition and whether or not there was an acquittal or dismissal. If the offence was committed abroad, there will be no record. Also, if prints were taken at the time of the offence and not sent to Ottawa, there will be no record.

Conditional and Absolute Discharges

The CPIC system includes Conditional and Absolute Discharges prior to July 1992. However, after July 1992 time limits were placed on Conditional Discharges of 3 years and Absolute Discharges of 1 year. After these periods they are removed from the system.

Police Certificate

The second method of acquiring one’s criminal record is not as reliable. The applicant may request a copy of his record based upon a computer inquiry using his name and date of birth. Of course this may not disclose offences where the accused’s name is different from the one provided. The report will only include offences for the exact surname and the first four characters of the given name. This method is called a Police Certificate.

The Applicant must appear in person with two of the following forms of identification: passport, citizenship certificate, birth certificate, or driver’s licence. This is required under either the federal Privacy Act or the Access to Information Act or both.

If no record is found a certificate is issued. If a record is found for the applicant, or a very similar name or date of birth and name, fingerprints will be requested to determine if the applicant is the same person recorded in CPIC.

Liability

If you are an employer doing a criminal record check you must consider name of the organisation providing the Police Certificate. Is is just a letter from a screening company or is an official document from a police agency? If the certificate contains errors, then you are in a much better position if it is a police service that made the mistake. If it is a screening company, then you have to question whether they did the search at all or used something other than CPIC.

Court Case-management Systems

While the Criminal Code of Canada  is federal legislation, the administration of the courts is a provincial responsibility. Consequently, each province maintains a case-management system. It appears from the complaint that Straightline only checked the Alberta case-management system. Of course this system is useful to the Investigator, but it is for case-management, not a source of criminal record information for the entire country. Also, such systems have schedules for the removal of records no longer deemed necessary for case-management purposes. Furthermore, the court clerk is not liable in any way should he or she fail to be diligent in conducting the search, even if you can identify the clerk when the error is discovered.

Internet Detective School 101

Google Alerts

We all know know and love Google, but how many people use its best investigative features? Investigations aren’t done in one day so why search Google on only one day?

Google Alert service is free and it allows you to create custom RSS feeds using Google search results, or you can receive the alerts by email.  Thus, if you create focused searches using phrases, site qualifiers, etc. in Google, you now can have those results as a RSS Feed.

Login to you Google account, then use the advanced query options to construct your search.  Select the Feed setting in the “Deliver to” column to activate your RSS feed.  It’s that simple; there is no need to program a Google API. Alternatively, select email to have the results sent to you by email.

Your search can be set-up to notify you as the new data appears if you select email notification. You may select as-it-happens, daily, or weekly. Simply make the selection in the “How often” column. Of course the RSS feed option doesn’t need to be told when to send you the results, it captures new data as it appears and publishes it in the feed.

To receive the feed you will have to wait until it is populated with some results. Once there are results in the feed, you may then click on the feed link for the Alert and copy the URL into your newsreader.  This takes about one day to occur in my experience.

Internet Detective School

Internet Tracking

Mantracker hunts people by following their spoor for a popular TV show.

On the Internet, Investigators have to do the same thing. However, the digital spoor may be on a computer in Singapore while your prey is in Corner Brook Newfoundland.

For this series of articles, the terms tracking, monitoring, and alerts  all mean the same thing. These terms are applied to methods of collecting new information as it appears in a variety of searches of many sources throughout the Internet.  This is a systematic way of locating information about a subject as it becomes available. These are sources and methods that monitor news reports, social media, blogs, or other open sources of information relevant to your investigation. I will illustrate how to construct the search statement and get the results in your hands on an ongoing basis.

I will start with the large search engines and move onto the lesser know sources and methods.