Etika e OSINT-it

OSINT practitioners operate at the edge of what is technically legal and what is ethical; this lesson focuses on how to stay on the right side.

Aggregating public information is usually legal in most jurisdictions, but it can still cause real harm. Doxxing — publishing someone's personal details — has led to harassment campaigns, swatting, and in extreme cases physical violence. Journalists and researchers who publish OSINT findings must weigh public interest against individual safety and must never publish information that enables stalking or retaliation. Professional codes of conduct exist: the Bellingcat guidelines, the SANS OSINT framework, the journalism codes of SPJ and Reuters. Common principles include: only collect what is necessary for the stated purpose, verify every claim with at least two independent sources, do not deceive or impersonate to gain access, protect vulnerable subjects especially minors, respect legal jurisdiction (GDPR in the EU imposes strong limits on processing personal data), and keep detailed notes of every step for reproducibility and accountability. For security-focused OSINT inside an organization (pen-test recon, breach response), the engagement scope and rules of engagement define what is allowed. Always operate under a written agreement. Never use OSINT techniques against your own coworkers or ex-partners — it is unethical, it is often illegal, and it will end your career.

Referenca etike:

• OSINT Code of Ethics (OSMOSIS / Institutes).
• GDPR (EU) — edhe të dhëna publike mund të kenë kufij.
• Rregulloret e secilit sajt (ToS).

Praktika të mira:

• Përdor konto 'sock puppet' të dedikuara, jo personale.
• Kurrë mos arrij në sisteme me kredenciale të rrjedhura — ky është krim.
• Minimizo të dhënat e mbledhura; mos mbaj më shumë se sa duhet.
• Dokumento burimin dhe datën e çdo finding-u.

1. Shkruaj një rule-of-engagement 1-faqe për një investigim OSINT të një individi.
2. Diskuto ku kalon kufiri midis OSINT dhe stalking.

• SANS — OSINT Ethics.
• Bellingcat — Online Investigation Methodology.