CSINT Research, an open-source research archive

Ahmet Göker's open-source research archive, each finding with the document it rests on.

Recently added

  1. Credence, Post Office's data for reviewing branch work, names the subpostmaster.Source, Post Office, Helen Rose report POL00030214, DRAFTPDF page 212 June 2013

    CSINT-NEWS-2026-010Reading

    The user code in the Lepton record

    A reversal recorded in Horizon under a Lepton subpostmaster's code was, according to Fujitsu's reply and the court's judgment, made by the system.

  2. The same file was decoded whole and as a region. x=200 was requested, and the library started the region at 192 because of the block boundary.Source, The test's terminal recordingRaw recording 1, 0:5517 October 2026

    CSINT-NEWS-2026-011Test

    Same JPEG, different pixels

    Decoding only a region of a JPEG with libjpeg-turbo changed 574 pixels on the region's two edge columns, and the compiled code shows why.

  3. Actual PDF crop retained from 8 September 2026.Source, FBI / Regional Computer Forensics LaboratoryPrinted p. 11, PDF p. 13, second paragraph of the “BTK” section

    CSINT-CASE-2026-019Reading

    Dennis Rader / BTK

    A name on a disk, a record on the open web.

  4. At the end of the recording the ozet command reads the values from the package's log files.Source, The test's screen recordingAt 6:27 in the recording, terminal area5 October 2026, 17.21 to 17.48 (UTC+3)

    CSINT-NEWS-2026-009Test

    Mullvad VPN, nine tests on one Mac

    With the VPN on, no DNS request showed on the wire, and DAITA cut 76 different packet sizes down to 2.

  5. The solvers' paper gives the full Z340 plaintext and corrects the misspellings in brackets.Source, David Oranchak, Sam Blake, Jarl Van Eycke, The Solution of the Zodiac Killer's 340-Character Cipher (arXiv 2403.17350v1)PDF page 31, printed page 30, end of section 5.52024-03-26

    CSINT-CASE-2026-017Reading

    Zodiac: 340 symbols and a message with no name

    How did 3 private citizens read Z340 after 51 years, and what did the message leave unknown?

  6. Glass negative LC-B2- 5986-12, "Parliament B'ld'g, Angora".Source, Library of Congress, Bain

    CSINT-CASE-2026-018Case analysis

    A photo labelled 1915: the archive gave another range

    Do the archive, building and shadows support the 1915 label on this Parliament photograph?

  7. Eight days before the fire.Source, Sentinel-2 L2A, Earth Search20 July 2021

    CSINT-NEWS-2026-008Case analysis

    Manavgat fire: the same slopes, 25 days apart

    I compared real satellite images and measured how the area count changes with the threshold.

  8. AAP FactCheck reports that the video circulating after the earthquake is an old recording and says where it was filmed.Source, AAP FactCheckFact-check article, screenshot taken on 29 September 202629 April 2026

    CSINT-GEO-2026-001Case analysis

    Where is this wave?

    I find the roof used to film a 2011 tsunami video that spread again in 2026, using 2011 aerial photos and open maps.

The whole archive