Well, people are filing in. Just a quick note about me. So I'm InfoSecSherpa on Twitter, in case you didn't know. So I'm Tracy Z. Mayleaf. I'm from the Philadelphia area. I actually started my first InfoSec job two and a half weeks ago. I am a cyber analyst in a SOC for a large multinational company.
I was a librarian for 15 years. I have a master's degree of library and information science. And what I was doing, when I was doing OSINT, I didn't know it was called OSINT. I just thought it was called doing my job.
So when I decided to have this epiphany and this career change into InfoSec, I all of a sudden realized that I had all these research skills that I could contribute to this community.
So I am learning the tech, and I am presenting and sharing my research skills.
So that's kind of why you should listen to me, basically, is, you know, I spend most of my time as a librarian at a law firm, so I know how to find things for court and stuff like that.
So I love Twitter. I think Twitter is a great research tool. I know that there are a lot of downsides negative to Twitter. I know there's a lot of, you know, there's bad sides to Twitter.
But today's going to be all the happy, shiny parts about Twitter. But again, if you, in case you didn't read the description of my talk, it's not about tweeting out.
I can't help you get verified. I can't help you get more followers.
I'm going to help you pull information from Twitter, because I have some facts here that will help prove my point about why Twitter is a great OSINT tool.
As of June 30th, 2016, they had 328 million monthly active users. 82% of those were on mobile. 79% of those accounts are outside the U.S. and over 30 languages supported.
So to break it down another way, there was...
It's estimated that there's 6,000 tweets per second, 350,000 tweets per minute, 500 million tweets per day, and 200 billion tweets per year.
So that is a lot of user-generated raw data that is low-hanging fruit that is easy for the picking.
So what I want to help you do is find that better.
So consider this part, you know, consider this talk and also this part, the whole, like, RTFM of Twitter.
Like, I think, like, if you have a car, you should kind of read them.
You'll know how it works.
I think you should know how Twitter works before you go using it.
So I have a couple other highlights and things I want to go over.
March 21st, 2006, the current CEO and one of the original founders, Jack Dorsey, tweeted his first tweet.
January 2010 was the first tweet from outer space.
And the most important milestone, to be quite frank, was July 16th of this year, which marked the 10th anniversary of me being on Twitter.
And that was as LibrarySherpa, because I started the whole Sherpa thing a long time ago.
I was LibrarySherpa.
Now I'm InfoSecSherpa.
So the last thing I want to mention before I dive in is keep in mind, Twitter was not designed as a search engine.
It's not, and it is not a search engine.
Therefore, it cannot, it's not easy sometimes finding things.
It can be, what's the technical word?
Wonky.
It can be very wonky to find things.
So keep that in mind.
True story, there are times I've done similar talks like this.
The next day, somebody will be like, I tried one of your sample searches and it doesn't work today.
That's Twitter.
That could happen.
So I'm going to have these slides posted.
I'm going to have sample searches.
Keep in mind, if something doesn't work, it might work the next day.
Things change all the time, so bear that in mind.
And also, if you're doing some research and you find stuff that's good information, screen cap it, print it, save it, something, because you might not be able to find it, again, the same exact way.
So, again, since I was working with lawsuits and stuff like that, I had to save everything I found because there was no guarantee that I'd be able to find it.
Again, necessarily.
So, your first fun fact, the bird has a name.
His name's Larry.
He's Larry Bird.
And this is the proof.
Biz Stone is one of the founders, and he's from the Boston area.
So someone asked him, hey, is the bird really named Larry?
Yes, he is.
So, fun fact.
What I don't think that people know a lot about is in order to get information about Twitter, you can use their own resources.
They have blogs and Twitter accounts.
And I highlighted these.
Engineering and developer.
developer, if you're someone who wants to know what's going on with the API or just
different search techniques and changes, you know, a couple years ago, remember, you used
to have to use the at, a period before the at symbol if you wanted everyone to see the
tweets. Well, they got rid of that. Well, those announcements are made through these
internal accounts. Like, that's how the media finds them. So if you're really interested in
knowing what the changes are, follow the blogs or follow things straight from the bird's
mouth. Follow the Twitter accounts. So real quick, I just want to go over a landscape of
social media. Because this is something that I did a lot of research on. And companies have
paid me lots of money to tweet for them or to do research for them. So just know that for
all these, you know, for all these social media platforms that you think you know, there's
probably seven more that you don't. So if you are not finding the information that you need
on Twitter, it's possible that you might need to find another platform. So if you are not
finding the information that you need on Twitter, it's possible that you might need to find
another platform. So I thought this was a pretty cool graphic of some of the ones there. And
also, so, okay, so here, first candy one. Who tells, who, where is this country? Is this
from? What country? There we go. I'm just going to throw this randomly. So, whoo, candy. Just
whoo, heads up. There we go. There we go. Okay. So again, if you are not finding the
information that you need, you know, there are a lot of countries that have their own native
grown social media. China's one. The link there, the Shiner on security, he has a blog
post about how to do research on social media with the censorship. So that's a good blog post.
That's all hyperlinked. So when you get my slides, you can click on that. Another thing to keep in
mind, demographics. Social media platforms have their own, you know, age ranges that they cater
to. So you see Twitter there in the middle. I know this is from 2014, but it's still pretty much
accurate. Snapchat obviously skews a lot younger. So if you are doing any sort of like marketing
research or something, and, you know, and Twitter doesn't fall into that demographic, you
should try another platform. I like to joke that I hate the slide, but I use it anyway, and I'll
explain why. I don't know how this got started, but somebody came up with the idea that the best
time to post to Twitter was between 1 and 3 in the afternoon. I don't know where they got that
from. I really tried hard to find the statistics. So this is why I show it. And this is more of
like maybe a phishing sort of way, reason that I keep this in here. Because this is so prevalent,
like everywhere you go, everyone is like, oh, my gosh, I'm not going to find this. I'm going to
post between 1 and 3 in the afternoon. I feel like that's also a good time to go searching for
stuff, because so many people are posting during that time. So that's the only reason why I keep
this up there, is when I gave this talk one time specifically for like, you know, phishing
exercises, I was like, check it out between 1 and 3. There might be people posting things. So
something to keep in mind. These will be all posted, too, if you don't get forward stuff.
And I already gave my little not a search engine talk. The last thing I want to mention is I
purposely included this in here. I'm going to put it in here. I'm going to put it in here.
Okay. I don't know why, but this is the way Twitter is. You can get different search results if
you are on a desktop versus a mobile versus a tablet versus whatever. Also, if you are logged
into your browser, you will get different, it will skew your search results if you're not logged
in. So, again, the best way, the clean slate to do it is log out of anything, do your search. If
you're not finding something, maybe try it on your phone if your laptop is not finding it. So keep
in mind that these things are skewed, and you kind of have to play with it.
All right. Next candy opportunity, heads up. Who knows that you do not have to be logged into
Twitter to search it? Who knows that? All right. I'm just going to kind of throw in the general
direction of people. I don't know. Here. In the back. All right. Awesome. Yes, you do not have to
be logged into Twitter to search it. So the top graphic is just when you go to Twitter, what it
shows. The magnifying glass is your friend. The other one is when you go to Twitter, what it shows.
friend. If you click on it, that bubble will appear. You can just start typing whatever.
All right. I'm going to run out of candy soon, so. Next one. Advanced search. Who knows about
the advanced search? Awesome. We have a couple people. There you go. Somebody over there.
Heads up. Sorry, dude. Don't sue me, please. You know, I'm two for two. The last time I
threw candy at a security conference, I beamed someone in the head. So welcome to the club.
It's an honor. So, okay. So the funny thing is, Twitter kind of hides this page. You used
to be able to get to it, navigate to it internally after you did a search. I've tried, and they
seem to have taken it away. But you can get to it directly with the URL. So the fill in
the blank form is fine, but we're better than that, right? I'm kind of old school with my
research. Like, you know, I used to do search LexisNexis with those whole, like, within
five, near H lead. Some people are not. You know what I mean?
So I can't fill in these bubbles. That annoys me. So think of, of the, the, think of this
like the command line, but different. So you can do all kinds of stuff. So let's get into
some commands. Basic one, to, from. If you want to see tweets that are sent to an account,
you just tell it from, colon. I mean, sorry. Yeah, or to, colon, or from. Sorry, you can
read. And then you can do between. You can see if people have gone between. Now, that's
a great article at the bottom. If you want to see two companies have fought, probably
on Twitter, you can do the to and from. Or people you know. But whatever. It's still
interesting to find. So that's one way to find that. And you can do that with or without
the at symbol. All right. So what if you want to get a little deeper? Now, remember,
I came from a law firm environment. So finding out if things were defective were really important
to the attorneys I worked for. So if I wanted to see if people tweeted at Walmart that something
they bought was defective and do this later, you will see some weird things, you could
do that.
Now, Twitter might try to be helpful and be like, did you want Walmart detectives? No,
Twitter. So you have to actually, like, force it through and say that you want defective.
And I also found, like, if you were trying to get recalls, that you could see if a company
put something out. So fun fact, if you know the stock symbol, Twitter recognizes stock
symbols. The dollar sign and the stock symbol. So that's a way to find out some information.
So the other red circle I have here is that Twitter will default to top. Top results will
be skewed for a period of time. So that's a way to find out some information. So the
red circle
is kind of an indicator that if a company is not doing well on top, they're doing well
in the market.
But if they're doing so wrong, well, then they're not doing so well on top. So if they're
doing so wrong, then they're doing so wrong. So, if they're doing very, very wrong, well,
You can search tweets by location if the person keeps their geotagging on.
But we're all smarter to do that, right?
So let's take advantage of the people who aren't as smart to do this.
So you see in the top left there, if you want to search a key term, you can use the airport code or you can use the city name.
And sure enough, I did get different results when I searched those.
Over on the right, who knows what a lorry is?
Tell me what a lorry is.
Yay, truck.
I don't know.
I'm afraid to throw any candy now.
There you go.
There you go.
Get one.
All right.
The only reason why I included this example is I want to show that it also works outside the U.S.
So BL3 is the first three characters of the postal code for Bolton, England.
And you can see, actually, it was a fun way to see traffic in that part of the world.
And then, so flooding.
I wanted to see flooding.
I could tell it within a city, within certain miles.
The first one got me Dover, England and Dover, Delaware.
I just wanted Dover, Delaware.
So I put in the zip code.
And then you can also just do near, near somewhere.
So that's location.
Before and after.
Because why would, you know, why would until and since, you know, roll off the tone there?
So before and after is until and since.
So this is kind of interesting.
If you want to see, like, a term like cybersecurity, if you wanted to see how it was used in Twitter before a certain date.
So I used big data in this example.
But that could easily be cybersecurity.
So it would be tweets.
Up until January 1st of 2008.
Once in a while, I'll do this and you'll look at it and be like, oh, that was so sweet and innocent then.
Or, oh, my God, we're still dealing with that.
Those are the two, like, reactions you get.
You can search between dates if you look on the top right there.
I will warn you, though, it's not that, it doesn't narrow it down that great.
I think about three days is the best I've been able to get.
But play with it and see what you can get.
You know, since is after.
And then if you also just want a specific handle, you can tell it.
But, oh, okay, I want to see what the specific handle does.
And you can try different variations and stuff like that.
So what if you don't want something?
And this is not any political statement.
This was just the only other Chelsea's I could think of where I wanted and couldn't.
But say you didn't want that.
Say you wanted, you know, you wanted some other Chelsea's.
So you can, you know, separate out with the minus sign.
Or if you didn't want the debutantes and you just wanted the Hiltons.
Now, just be careful.
If you start taking away too many things, you know,
again, it's going to skew your search results.
But it's a good way to take out something, you know, common.
Like I said, if you don't want, if you were searching something about Hilton,
but you don't want Nikki to keep coming up.
And you can also use minus RT if you don't want retweets.
Because, again, you're just going to get duplicate information.
So you can take away another layer of data if you take out the retweets.
Okay, so what happens if you string these all together?
You get a cool search like this.
So this is one I actually came up with when I was still a law firm librarian.
One of the lawyers was like,
hey, I think there was a gas explosion in Manhattan.
I think it was like the end of March, beginning of April.
Can you find out something about it?
You know, we really need to get some photos of the scene and yada, yada, yada.
I crafted that search.
I had a whole string of people who were walking home from work who stumbled upon the scene.
And I was able to hand that search string over to the attorney.
And, you know, they dealt with insurance and things like that.
So, yeah, you can string a bunch of things together and get different results.
And, again, if...
If nothing comes up for your search string, you know, tweak it a little bit.
That's why I don't like using that fill-in form.
You have a lot more power and control over your search this way.
So, okay.
I make fun of this poor woman posting this.
She was like, hey, is it National French Fry Day?
Those are the most pathetic excuse for french fries I've ever seen in my life.
But the point is, you can find on Twitter where things originated from.
So this woman originally posted to Instagram and, secondarily,
sent it to Twitter.
Why would this be important?
Well, if you were in marketing and you're seeing that a lot of people are originating their tweets on Instagram,
maybe you would put some more money and attention to funds into Instagram
because that's where people are going first,
especially if you're doing, like, sponsored posts and things like that.
You can also do source for other platforms.
So it's just interesting to see because, like, you know, if you've ever been in Instagram,
you can see, like, secondarily also send to.
That's what this is doing.
It knows that it was posted somewhere else and it was going to Twitter.
So that's kind of a cool one.
Filters.
Now, this is a good one.
This is definitely from my law firm days.
So a lot of courts tweet out their documents for free.
So if anyone's ever been on a court's website, you know what a hot mess it is, what a dumpster fire it is.
So sometimes it's easier just to kind of pick it from the Twitter handle.
So this one, the Securities and Exchange Commission has, you know, a Twitter handle just for enforcements.
And they tweet out.
All right.
So they tweet out all these PDFs with their documents and things like that.
So I told it that I wanted from that account.
I only wanted tweets that had a link in it because I knew that a link would be a PDF.
And then I gave it.
I was looking for somebody with the surname of Monroe.
And bing, bam, boom.
I didn't even have to go.
I didn't have to go to the website.
Just had it there.
Clipped up the PDF.
Good to go.
Got the attorney out of my hair.
It was all good.
Oh, and I did this on purpose for cats and puppies.
Everyone likes cats and puppies.
So you can tell Twitter that you want.
You know, pictures of cats.
So do filter images.
Or native video.
If someone is actually filming video on their phone using the Twitter app, that's what native video is.
As opposed to any other video source.
So that's kind of cool.
Okay.
And I did this on purpose because it was this week.
So this one, I'm not really sure, honestly, how much OSINT value this has.
But it's kind of interesting.
So you can tell Twitter that you want.
You want to see, you know, a tweet from Jack Daniel that had at least a minimum of 100 favorites.
Or minimum retweets.
And you can put those in.
And, again, those are just interesting to kind of see the popularity of stuff.
And those are real examples from that search.
Cool.
Does anybody here do search in non-English languages?
Raise your hand.
I don't have a candy 30.
Awesome.
Okay.
Well, if you search in non-English languages, Twitter has 34 languages.
And if you want to tell it how to search in those languages, those are the codes.
There's a lot more.
But there's some of the codes.
You know, Spanish is ES.
You know, do you see German is TE.
So it's pretty cool.
Now, the things you have to remember is you can search Twitter in non-English in the native English platform.
And you can get one set of results.
Or you can go to German Twitter and search languages.
And you'll get slightly different results.
I have an old slide.
Where I have side-by-side, where they're pretty similar results, but one or two were different.
But in my world, I'm thinking, you know what, those are probably the two that I really need.
So, why would I want to, you know, I want to cast a wide net and see what I can find.
So, do you speak Twitter?
So, how you tell it to go to the other platform, it's just Twitter, question mark, language equals, and then French or those other, or the other two-letter thing.
I picked Bradley Cooper because he does not have that.
He doesn't have an official Twitter handle.
And he also speaks French.
So, there's a good chance that you are going to find information about him in French because the French love to write about him since he speaks French.
But if you're just doing a regular search in your little search bubble there, if you don't want to go to the actual website in another language,
because maybe you're not that strong in the language and you don't know what all the other things are.
Like, you know, the, I think in French, instead of, whatever it says in English to tweet, it's in French it says,
I'm quite enough or something like that.
So, if you're not that comfortable with the language, you can also just tell it in the native, you know, English platform just to do whatever language.
All right.
Who knows that Twitter lists are a thing?
Who knows what a Twitter list is?
Raise your hands.
All right.
That is a lot better than past ones.
Yay.
Congratulations.
Just come up and get your candy later.
I'm tired of hitting people.
So, all right.
So, true story about Twitter lists.
Um.
I was hired by a security company to do competitive intelligence research on one of their competitors.
They were going to pay me, but I couldn't spend any money to do research.
Does that sound familiar to anyone else?
So, I was doing all this, you know, OSINT, trying to figure out who their customers were, because they wanted their competitors' customers.
And I was just through a Hail Mary, which is a sports reference, football, I didn't want to know.
Anyway.
Thank you.
The women are nodding.
Yes.
Thank you.
And I was like, let me check this company's, this target company's Twitter handle.
So, I'm poking around their Twitter.
I go to their list, and sure enough, they have lists.
Clients.
Potential clients.
Past clients.
Everything.
And I was like, ding, ding, ding, ding, ding.
Jackpot.
And I was like, man, they can't possibly be this stupid.
Yes, they were.
They were right there.
I clicked them.
I opened it up.
I did screenshots.
I saved the URL.
My, you know, the client thought I had the URL.
I was a genius.
And I got paid.
And it was awesome.
And I have not checked back to see if that company has ever shut down those lists.
But I love to tell that story because make your list private.
So what do you, so let me back up.
So for those of you who don't know, a Twitter list is basically like a file folder on your
desktop that you go to when you want to to look at something.
One time I gave this talk to a less tech savvy crowd, I said it was a filing cabinet.
Basically.
It's a list of something that you tuck away.
You look at it on demand.
It doesn't affect your main feed.
So if you want to have a whole Twitter list of, say, like, entertainment, you know, Kim
Kardashian stuff or whatever, and you don't want that to mix with your cybersecurity stuff,
I'm not saying I have a Kim Kardashian Twitter list, I swear to God.
Anyway.
I'm just saying, if you want to keep your stuff separate, it doesn't interfere with
your main feed.
It's something you go to on demand.
So how you do it is you go to your main.
On the main page, you go to your handle, you tell lists, and you create a new list.
It just wants, you know, a name of it and a little short description, and you can make
it public or private.
So here's a little thing.
Back in March, I was all excited.
I thought I figured out a hack that if I made something private initially that I could make
it public.
Oh, let me back up.
I'm missing a crucial step here.
If you make a public list, the person you add to the list is notified that they're added
to that list.
Okay?
So if you're trying to be sneaky, I'll add a private list.
But sometimes people still want to see your lists and stuff like that, you know, maybe
like a colleague that you work with.
If you, as soon as you change that to public, those people are still notified.
But back in March, I was testing it, and it wasn't notifying.
I have all kinds of other Twitter handles that I have for research purposes.
It wasn't notifying my other handles that I had made that list public, and I thought
I found something.
I was getting ready to go to B-Sides Charm.
And I'm like, I'm going to introduce you.
I'm going to introduce this.
I'm so excited.
Oh, and then they fixed it a month later.
So womp, womp.
But the moral of the story is, if you are creating a Twitter list and you're absolutely
certain that it needs to be under wraps, test it on maybe yourself first to make sure that
even if you label it private, that it still doesn't send a notification.
But that's the difference.
So anyone, if it's a public list, anyone can look at it.
You can send the URL on Twitter and be like, hey, I've created all these cybersecurity
people.
You know, it's this great list.
And follow it.
For private, if you just want to have employers I'm interested in or whatever, keep that private.
So Twitter lists are a great way to manage the fire hose of information that comes in.
So you're like, that's great, Tracy.
How do I find a Twitter list?
So a couple years ago, Twitter got rid of the functionality to find lists within their
own website.
And they did away with it like a week before I was to give a big Twitter presentation at
a conference.
So that was awesome.
I had to redo my slides.
So this is how you find Twitter lists.
You have to go to Google.
You have to Google dork.
And that's why I have the little thing down there.
Because if you do this a couple times, it wants to know that you're not a robot.
So which, try to explain that to like a not tech savvy crowd.
That was hard for me to explain to them.
So they thought I was telling them to do something illegal if that, I was like, no.
But Google doesn't really like you searching like this.
But if you've Googled dorks, you know that.
So anyway, that's how you find Twitter lists.
So you need to do some sort of combination of, you know, of hashtags or quotation marks
or keywords.
And that's how you find Twitter lists.
So unless they bring the functionality back, that's how you do it.
Okay.
So now I'm going to move on to, there are some other websites and other things that
interact with Twitter to help you organize all this information.
I love Nuzzle.
N-U-Z-Z-E-L dot com.
If you follow me on Twitter, you probably see me obnoxiously, shamelessly plug my Nuzzle
newsletter.
Pretty much every day, except for here while I'm out here.
Nuzzle works with Twitter.
And what it does is it will aggregate stories that people in your Twitter network follow.
So if I log in, I look at it, and I see that like 25 people, and they're all in InfoSec,
that I follow on Twitter have tweeted or favorited a certain article, you damn well bet I'm reading
that article.
Because that means, you know, then the community's talking about it, it's something that's going
on.
Most of you kind of rank things of what people are seeing.
You can do a handcrafted newsletter.
And it's all free.
There's no, now they just implemented a paid platform, which I haven't had a chance to
check out.
But all this functionality is free.
You can use it without logging into Twitter, but I think it's really kind of diminished.
I think to get the most value out of it, you really need to be logged in.
And they have a Twitter handle, and they have, you know, the website here.
So it's a really great resource.
It's a just, it's a good way to see what, like, influencers are doing.
What influencers are talking about, and, like, also to find other people to follow.
But I just love the functionality of it tells me what is going on, what is popular, because
then that's the stuff that I want to read.
Storify.
Anybody know about Storify?
Okay, awesome.
A couple of people.
So the first functionality for Storify is that you can stitch tweets together and make
it like a story.
So you guys all know DA667, right?
You know, you know him?
He likes to tell Twitter stories.
So one day he was telling a Twitter story, and I asked him afterwards, do you mind if
I Storify your talk?
So what I did is I went in, and it enables you to graphically just stitch them all together
so that it reads like a story.
So it's not just a clever name.
And so this is on my Storify feed for people to go to.
So I would tweet out that link.
Hey, did you miss his great talk?
Here it is.
So you're not trying to go back into your Twitter feed and piece together where he tweeted,
and where somebody responded to him, and all this stuff.
I used to lead Twitter chats a lot, all the time when I was in the library world.
So I would go in after the fact and pull this together so you would have a cohesive
story about the question and the answers and not all the back and forth garbage of
people fighting and whatnot.
But not only does Storify do that, but if you see the lower left-hand corner, they have
an amazing little search engine here.
We did a demo at B-Sides Charm.
You can search all those different social media platforms, but Twitter specifically.
If you go in, they have all kinds of expanded features that you can use, like geography,
like maps, and a lot of other things.
Their functionality is pretty darn good.
So I highly recommend Storify as another resource to search on Twitter.
Now any OSINT person worth their salt knows this site, right?
So in case you didn't, as a reminder, I wanted to remind you that Michael Bazell has this
whole Twitter part here that's good to use.
And I talked a lot faster than I thought I was going to.
So yeah, so that's my presentation.
I threw a lot of search strings at you and things like that, but I'm happy to answer
questions and things like that.
So thanks for listening, but please stay, and I have more candy if anyone wants candy.
Question, yes?
So how sensible is the source filter for Twitter?
Is it just other social media sites, or have you put any domain in there?
To the best of my knowledge, it's just social media sites.
I haven't tried it with any other domains.
Whenever I've seen the source filter explained, it gives it in the context of other social
media.
It is good.
But links?
You could probably maybe try, hmm.
You can also try doing a Google search that way, going in from Twitter the other way of
links with, because you can do, like, with the site search and things.
That's another talk I give, by the way.
I give other, like, deep dive Google and deep dive other things.
To the best of my knowledge, it's just other social media platforms.
You can try it.
Maybe shoot me a note if it works, but I think that they just pull from other social
media.
From this site, you can get a deep check using GooseGrid or something like that?
Do you do, like, emulating of, like, Android phones and all kinds of different things,
like switching it out to use, you know, get those search results that you were talking
about as you were logged in on the phone?
No.
No.
And my talk was just basically emphasizing on the GUI.
Sure.
Sorry.
I meant to mention that in the beginning.
Sure.
So, yeah.
I mean, I don't have the scraping and script writing skills that you all have, but I know
the GUI well.
So, I know.
I have not tried that, because I just kind of didn't.
It's just a really interesting way to do it.
I've heard the name.
Yeah.
Actually, I'm in the process of learning a bunch of stuff in my new job, so, yeah.
Okay.
Awesome.
Thank you.
Any other questions?
Yeah.
Yeah.
Kind of on a similar note, have you noticed any rhyme or reason for changing between
mobile device and web reader?
Like, why the results?
How the results differ?
Like, is it filtering out?
Oh.
Definitely location-based results.
Like, I'll notice, like, people, like, near me if I, like, if I have some sort of, like,
geo.
If something is picking up geo.
Yeah.
If it's not even geotagging.
Yeah.
If it's picking up something.
If it's picking up where I am, I'll notice a difference for that.
The ads will definitely be different.
Things like that.
And they don't let you close those anymore.
I used to be able to dismiss.
And you can't do that.
But, I mean, I do love Twitter.
It's a great resource.
But it, I said, it's wonky.
It's wonky as all hell.
And I just, I don't know that people fully understand all the capabilities it has.
But you just have to be patient and try different things.
And stuff like that.
But it is weird.
Yeah.
.
No.
Sorry.
I was asking.
I just said.
I apologize.
I meant to add a disclaimer at the very beginning that all my background in this is just GUI
based.
So, no, I haven't done any of that.
So when I gave this talk the first time, like I said, somebody said I didn't know Twitter
had a website.
And somebody else said to me, oh, well, now that I know all the stuff they can do, I can
write better scripts.
And so it took me showing them the GUI side of what it can do.
So that's kind of what I hope to give to the InfoSec community is let me share my GUI wisdom
with you.
And then you guys can figure out, you know, what to do with it from there.
So, if that helps.
Thanks.
Anybody else?
Yes.
.
.
Well, that would be under links.
It's not as sophisticated as a Google search where you can specify file type.
No, because you can't add a file type to a tweet anyway.
It would be a link to something.
Like, you can't add a PDF.
.
It would be linked somewhere.
So if you search for links, because, like, remember I showed you the Securities and Exchange
Commission?
That was a PDF, but it was a link to a PDF that was on the Securities and Exchange Commission
website.
So it wouldn't understand, Twitter wouldn't understand if I was searching for a PDF, it
would understand that I was searching for links.
And then I was smart enough to know that that link was to a PDF, but it didn't.
.
.
.
.
.
.
.
Is that still around?
I thought that went away.
That is still around.
.
.
.
I am not sure.
I didn't think it existed anymore.
I hope no one is here from Periscope.
Sorry.
.
.
.
.
.
.
.
.
Yeah, if you can find it online, I'm sure Iron Geek, I think Iron Geek recorded it.
I co-presented with Joe Gray at B-Sides Charm in April, and we did the battle for OSIN,
are you Team GUI or Team Command Line?
So the first half was I showed all my, not just Twitter, but other Google and social
media stuff on the GUI end, and he came in and did the command line, and at the end we
came together and did like a combined search, and yeah, we were like finding like who was
doing a live video sort of, yeah, sort of thing.
If you put filter, try filter periscope and see if that would work, and do that.
I saw another hand over there somewhere.
Oh, oh, yeah, okay.
Can you try to filter by GitHub?
I know there's a lot of people that have those in reference, but I think if they do
have a...
I'm not sure if it, I mean, it might fall under links still.
I'm not sure that it would be smart enough to know GitHub versus, because it's just reading
a link.
I don't think that it can read where it's from necessarily, like, because when you did
the source, you used the name so it knows to match the name with the name, but I don't,
I mean, you could try source GitHub, but I don't know if it does that.
Well, yeah, but I don't know if it knows GitHub, though.
I don't know if it's, if, I mean, that's one of those things for that, like, developer
blog, that I don't know if they've told Twitter to recognize that.
Remember, I'm garbage in, garbage out, you know.
If you don't, if you don't tell it to recognize GitHub, it's not going to recognize GitHub.
They probably told it to recognize, like, the top five social media platforms, you know.
So, yes.
I know that part of this does work for the account.
Could you repeat that again for everyone?
Can you hear it?
I know that that part itself does work for the account.
So you can't...
Can you get, tell, in the microphone, so tell everyone how to do that?
Yeah.
Sorry.
So, if you play around with the Twitter API, it has a lot of the things you mentioned,
and one of the things you definitely can do there is search for links based on the domain
name or fragments of the URL.
So you could do an API query for links to GitHub.
Okay.
Awesome.
Thank you.
Yeah, like I said, I haven't been a librarian for a year and a half because I just started
my soccer.
I got a job three weeks ago, so, yes, I am not on, I admit I am not super on top of some
of the things, but that's a, it's a good foundation to get you started.
That's basically just I wanted this talk to be, because so many people I talk to after
I give these things don't realize what all Twitter can do.
So, yeah.
So, I hope you liked it, and if you want candy, I have more candy.
I don't want to take this home, so please take the candy.
And, awesome.
Thank you so much for coming.
Thank you.
Thank you.
Thank you.
Thank you.