3 ms·
That’s a neat idea. I’d love to know more details about what you’re monitoring? It feels like you’d need a Krebs on Security type level (and a lot of money to b
by chrismeller 9y ago
That’s a neat idea. I’d love to know more details about what you’re monitoring? It feels like you’d need a Krebs on Security type level (and a lot of money to blow on purchasing data) to be really effective at scanning for leaks.
- graystevens 9y agoFunny you should mention Krebs - he was partially the inspiration for the idea. Currently I actively scan 30+ pastebin style websites, including those on the dark web, but I feel the insiders themselves will be the key. Each has a unique email address assigned to them, which can be added to your userbase. That way, as soon as it receives anything abnormal, you are alerted that there’s been a potential breach somewhere. The insiders also come with real local mobile numbers, to catch targeted phishing attacks after a breach has taken place. Not unheard of. Eventually I was scale up to purchasing datasets, dark market dumps etc., however this will take time. Definitely on my radar though.