OSINT for Everyone: What a Single Photo Gives Away
Notes from the "You, Online" cybersecurity awareness session — digital footprints, image metadata, reverse search and the ethics of looking people up.
- Published
- Nov 2026
- Reading
- 6 min
- Topics
- OSINT, privacy, EXIF, awareness
Small clues, big picture
Usernames, profile photos, check-ins, school profiles and gaming accounts each look harmless. Combined, they reveal where someone studies, where they spend time and when they're away from home. The session opened with a fictional student's public profile and built his routine from nothing but public posts.
What OSINT actually is
Open-Source Intelligence is the practice of turning publicly available information — social media, news, public records, maps and imagery — into answers. No hacking is involved; the skill is in collection, correlation and verification.
Photo to reality
Photos carry hidden data. EXIF metadata can include GPS coordinates, the device model and a timestamp. Reverse image search shows where else a picture has appeared, and error-level analysis can expose edits. Even with metadata stripped, a logo, a road sign or a skyline can be enough to geolocate an image.
1# inspect — and then strip — metadata before sharing2exiftool photo.jpg3exiftool -all= photo.jpgThe same skill, two directions
Security teams use OSINT to find leaked data, journalists to verify footage and CTF players to solve intelligence puzzles. Attackers use exactly the same techniques for pre-attack reconnaissance and phishing. That's why the session ended with ethics rather than tools.
Just because you can doesn't mean you should
Before looking anyone up, ask four questions: is the information public, do I have permission, is my purpose legitimate, and could this harm someone? Every example in the session was fictional for the same reason.
Habits worth keeping
Post after you leave, not while you're there. Strip metadata. Use different usernames for different parts of your life. Review what your profile shows to people who aren't your friends.