A company can deny pollution and still commit to a specific number in the same statement. Perenco told Human Rights Watch 220 flare points are permanently out. HRW's own findings, same week, neither confirm nor rule it out. Neither side gave a date. That's the actual story.

Three tankers struck in the Strait of Hormuz in 24 hours, all on a route Iran's own broadcaster had warned ships off days before. UKMTO flagged the risk first. None was ever claimed. Issue #003 walks through how to verify that. signalandshadow.io/p/hormuz-tan...

Iran struck three tankers in Hormuz, no formal claim

Iran's own state broadcaster warned ships off this exact route days before three tankers were hit there. No formal claim ever followed.

signalandshadow.io

Which app should I use to talk to sources? It's the wrong question. New on Signal & Shadow: HUM-002, a reference card on secure source communications. signalandshadow.io/p/secure-sou... #OSINT #SourceProtection #Pegasus

Secure source comms against state-level interception

Signal, SecureDrop and Tails OS each defend a distinct threat surface. MVT device forensics confirm integrity before any contact resumes.

signalandshadow.io

Signal & Shadow is open. Come take a look. #OSINT signalandshadow.io

Seventeen characters across nine weeks. Cipher text: KPGQOHSUDVVWVVWLC. Vigenère. Key: SHADOW. DM the plaintext. First fifty solvers get a signed numbered card set. signalandshadow.io #OSINT

Signal & Shadow publishes for OSINT practitioners. Weekly briefing, tutorial series, investigations, reference cards. Catalogue opens to subscribers Sunday, public Tuesday. signalandshadow.io #OSINT

An investigation can produce a true finding without producing a defensible one. The chain of custody is what makes it both. Half the work. signalandshadow.io #OSINT

A newsroom audited once a year knows what its practice was twelve months ago. A discipline maintained quarterly is a discipline that holds. signalandshadow.io #OSINT

Most newsroom training ends Friday and is forgotten by Tuesday. Training that survives is training adapted to the specific newsroom: actual beats, actual tools, actual constraints. signalandshadow.io #OSINT

A card teaches what to do. A template teaches the form. A playbook teaches the structure. None teach judgement. Two days, sixteen practitioners, the whole Method in sequence. signalandshadow.io #OSINT

"Do you verify your sources?" gets you "yes." "Show me your custody log for the last investigation" gets you the truth. Most newsrooms can defend two of five categories. signalandshadow.io #OSINT

Techniques are tools. A methodology is the order, stopping conditions, and rules for moving between them. Most practitioners accumulate techniques. Few document a methodology. signalandshadow.io #OSINT

A custody log written into a blank document loses half the chain. A log written into a fixed template does not. The discipline is in the form. signalandshadow.io #OSINT

A tutorial in your inbox is a reference for an hour. The work is in the distillation: making it searchable, linked, structured for the desk. signalandshadow.io #OSINT

A useful reference card holds one workflow, one OPSEC note, one tested query set. Anything more is a textbook in miniature. signalandshadow.io #OSINT

None of the techniques are secret. The methods are documented. The tools are public. The difference is the discipline. signalandshadow.io #OSINT

For ten years, the method has lived in private files. Working documents. Notebook pages. Templates. In four weeks, those files become products. signalandshadow.io #OSINT

Thirty-six days. The signal sharpens. The practice is about to leave the notebooks. Pre-launch access closes Friday 3 July. signalandshadow.io

OPSEC gets dismissed as paranoia by people who have never had a source at risk. It is not about you. It is about the people on the other end of the chain. It is the minimum courtesy you owe.

An investigation that cannot withstand scrutiny is not an investigation. It is a story. The defence is half the work. signalandshadow.io

Methods is the structured tutorial series. One technique per piece, end to end. Intake. Verify. Log. Publish. signalandshadow.io #OSINT

A useful geolocation is a stack. Terrain. Sun angle. Building geometry. Shadows. Each layer narrows the candidate set. If the stack does not fit on a card, the geolocation is not yet defensible. #OSINT

The byline says one name. The chain of custody says four. The byline is a contract with the reader. The chain is a contract with the work. signalandshadow.io #OSINT

Shadow Analysis is the investigations work. Evidence-based reporting. Technical debunks. From shadow to signal. signalandshadow.io #OSINT

A reverse image search returns four results. One match verified. Two ambiguous. One absent. The match is a lead. The absence is a question. Neither is a verification. #OSINT

#OSINT Cards is the reference library. One domain per card. One workflow. One OPSEC note. Tested queries. Built to be used in the field, not to look complete on a shelf. Subscribers see it Sunday 5 July.

Investigators who refuse templates think they are protecting their craft. They are slowing themselves down. The form clears the way for the thinking. #OSINT

Every artefact has a fingerprint. A 256-bit string that says: this file, exactly as it is now, was the file you saw on this date. Without it you have a memory. With it you have a chain. #OSINT

A vessel turns off its transponder at 03:14 UTC. Three sources place it by 03:22. By 03:40, one is wrong. Knowing which is the work. #OSINT

The investigation is one part of the work. The infrastructure that supports it is the rest. Templates. Chain of custody. Peer review. Archive. Most newsrooms do not have it. There is a better way. #OSINT