Remix.run Logo
edm0nd 7 hours ago

You just work backwards.

Here's what I would do working off just a single license plate number w OSINT.

I would pivot immediately into license plate databases that have been breached. For example, ParkMobile got popped in 2021 and the db has 20.9M license plates in it. prob have low success rate and iirc its pretty US centric. It has their full name, address, phone, email, all kinda data.

If you had paid fancy tools, like Lexis Nexis, you could plug it into there and easily find the owner.

There are also plenty of license plate look sites online where it will tell you the VIN and make/model details.

Idk, would just take digging and keep spidering out with all new info you find. Would yield a few hits eventually.

monerozcash 6 hours ago | parent [-]

Sure, and so what? You can look up people on Accurint without license plates. Depending on what kind of account you have, you can just search by a zip code, or a state with no further identifiers.

What would be the point of running a website collecting the license plate numbers of random visitors?

diydsp 4 hours ago | parent | next [-]

You need to think more evil!

Lets brainstorm!

Theres a parking lot... what are the 10 wealthiest car owners...and the 10 frailest oldest people... or maybe the 20 women aged 19-25 blond under 150 pounds... and when do they get off work tired, drive home each day? What's the most isolated gas station,convenience store they stop at? Ones where few other cars pass by? Who's homes don't show a 2nd car in driveway? Owned by 6'5" 200 pound man? Who frequently visits a karate studio?

Or: im a car salesman, in comes a customer, whining abt lowering the price bc Theyre broke... lemme just look up where they eat supper every night! How much time they spend at airports! What school they drop off their kids! Who comes to their house? Nannies? Oh look drug dealers, i can threaten them with blackmail!

Sound ridiculous? All the data brings it into focus. A local detective told me theyre focusing on robberies of $ethnicity restaurants bc that group stockpiles cash in their homes...

And this is all assuming good info, but when u get creative:

..what if we look for mistakes... hey that annoying $religious neighbor pissed me off with his loud music. His kids car shows up as visiting thr wrong side of town..probably a wrong digit but lets report him anyway!!!

Or: Hey lets scan all the wifi dbs for ssids that seem like defaults, then offer them csam-insurance: you pay me $1000 cash rn and ill insure i dont browse csam from your network! And my alpr data says when youre home and your iot devs tell me when you go to sleep so we'll slip it in at before-bed-wank-time!

monerozcash 3 hours ago | parent [-]

Oh no, I can think very evil. I just don't see what kind of evil thinking would arrive at "Hey lets use this website to collect IP address/license plate pairs at a small scale"

That just doesn't strike me as a very efficient way of doing evil.

You can just go on accurint and find the oldest people living alone in the richest neighbourhoods near you. You can even fairly reliably find out whether or not they have living relatives.

All this deeply sensitive data is already readily available. I don't think IP+license plate data would be particularly interesting unless you're Google and able to gather that at an absolutely massive scale. But even then, you'd be using it for extremely boring kinds of evil.

rightbyte 6 hours ago | parent | prev [-]

Pairing IPs to persons?

monerozcash 6 hours ago | parent [-]

You can just get an API which does that and skip the middle steps?

Or even skip the API part and just buy that data in bulk. Or just collect it from a variety of freely leaked databases.