A housing-authority investigator is told that OSINT on a disputed application means hacking the applicant portal to read records that are not public. What is the correct response?
Select an answer to reveal the explanation.
Short Explanation
Owning the building does not turn lock-picking into library research. OSINT is public-source work, not breaking into the applicant portal. If a record is not public, it needs a proper internal process—not a hack dressed up as intelligence.
Full Explanation
PORP methods stay inside lawful, publicly available collection. Unauthorized access to a housing-authority portal is exploitation, even when the agency operates the system and the investigator has a civic purpose. Ownership of an application does not convert intrusion, credential guessing, or kiosk surveillance into open-source research. Non-public applicant records, if needed, must be obtained through authorized internal procedures, not through pentest-style access labeled as OSINT.