lockfale/OSINT-Framework

Questionable Recomendations

JASory opened this issue · 3 comments

JASory commented

Taking a brief survey over the "resources" enumerated in the source code, some issues keep emerging. Many of these provide no additional capability over an internet search, and possibly even more of them are primarily ads for their own service.

One particularly unusual selection is the Epic browser. Chromium is open-source, Firefox is open-source , you can do anything with Chromium and Firefox that Epic browser claims (TOR uses Firefox and it has much stronger standards, and it too is open-source). So why is Epic so evasive when it comes to publishing it's source code?

That's only one example. This entire list should be reevaluated.

I think this falls outside the scope of the goal of this tool. None of the tools have to be secure or private to fulfill the goal of performing passive reconnaissance.

Except it's primarily advertising. Anyone with some technical proficiency knows that these don't provide any unique capability. I cited the Epic browser as an egregious example as it is 1. obscure 2. Everything it claims is done better and in a verifiable way by much more notable browsers.

"None of these have to be secure or private to fulfill the goal of passive reconnaissance"
There is nothing passive about connecting to a website. In fact traceability is a common concern in the OSINT community, as subjects that can trace users can cut-off information access.

The critique here is that it is just a list of various websites and softwares, with no curation or evaluation of whether or not they are actually useful. Many of which are apparently useless, or even security risks. (see #328)