Public-works staff want the legal name of a Reddit user who posted a photo criticizing a paving job. The civic need is to find the failed curb in the picture. What is in OSINT scope?
Select an answer to reveal the explanation.
Short Explanation
The job is to find the bad curb, not to hunt the person who took the snapshot. Treat the photo as a location problem and leave the critic's legal name alone. Doxing a resident who complained is not civic OSINT.
Full Explanation
When public-works staff want the legal name of a Reddit user who posted a photo criticizing a paving job, and the civic need is to find the failed curb in the picture, OSINT scope is to identify the issue and location in the picture; unmasking the critic is out of civic scope. Purpose limitation keeps municipal OSINT on the asset defect rather than retaliatory identity hunting that chills public feedback. Making the critic’s legal name the primary deliverable fails as mission creep and privacy harm unrelated to fixing the curb. Sending a friend request from a real staff Facebook account to identify the user fails as OPSEC-poor bridging across platforms to unmask a resident who complained. Posting the user’s other handles on the department’s official page as a public warning fails as doxxing and inappropriate official speech. Exam caveat: if harassment or true threats appear, that is a separate authorized path with counsel—not a free pass to unmask ordinary criticism of paving quality. Operational check: geolocate the curb from the photo; open a work order with sourced imagery; explicitly decline the unmasking request in the task log with the civic-purpose rationale recorded for auditors.