I have a friend that works for a medium-sized company. She's very proud of her employment there & wears a jacket with the company's name embroidered on the front. I've been trying to convince her that this jacket could make her a target. At the very least it is leaking info.
But you know how people outside of infosec see us. We're their crazy, paranoid, yet somehow-still-endearing friends.
We went to a coffee shop yesterday afternoon. In the corner there was a middle aged gentleman, drinking some coffee. He was wearing a pullover, similar to the one my friend has. I decided to do an experiment.
I sat her next to me, and pulled out my laptop. Going off of nothing but the company name on his jacket and the area we were currently in, I was able to locate his name on LinkedIn.
I had his name, company, title, and location. A little more digging through social media and I found his Facebook page. It was private, but I can still look through profile pictures.
So I shuffle through those a little bit (by now my friend is already freaked out) and I find his wife's name, his kids name, his parents names.... you get the picture.
Long story short, I was able to find his phone number, where his kids went to school, and his parent's home address. All because he was hanging out in a coffee shop wearing a pullover with his company's logo on it.
Be aware of the information you are leaking. You might think that no one would go through the hassle of digging up information about you, but I promise you there are people who will. Hell, I just do it for fun.
THIS CONCEPT ALSO COUNTS FOR BUMPER STICKERS!!! I don't understand people's compulsion to tell the world where their kid plays soccer or takes ballet! It's ok to be proud of your kids, but hot damn. Be careful!
