Improving Your Internet Search SkillsBoolean Basicswith Tony Stemen:

Sourcing & Research Manager @ The Novo Group@TonyStemen LinkedIn.com/in/tonystemen

How to Find Personal Contact Info:Old-School Online Sleuthing Methods

with Glenn Gutmacher:Founder, Recruiting-Online.com & Co-Founder/ Leader, Boston Area Talent Sourcing Association@GlennGutmacher LinkedIn.com/in/gutmach

History of Boolean Logic• Invented by George Boole in the 1800’s – English Mathematician– Author of “The Laws of Thought”

• Boolean logic is a system of thought that shows the relationships between sets

• Utilized in mathematics, computer programming, and INTERNET SEARCH

Why we use Boolean in Search?• Sourcing is 50% logic and 50% creativity• Logic:

– Ability to learn the tools and languages of sourcing, and continually learn.

• Creativity:

– Thinking “outside the box” to master the logic and provide value.

• Boolean is the core of logic and creativity – no matter what tool you use!

Boolean: Automation vs. Manual• Automation is a recent buzzword in sourcing• Examples of automation tools:– Social Talent’s SourceHub.co– Boolean Bar

• While these are useful tools, you cannot underestimate the value of fully understanding the Boolean language. Gaining a core competency will help you to understand how automation tools work, and how to tweak them for creative results.

Basic Boolean Operators• OR – Used to differentiate similar keywords to ensure that one is included

within a search– Example: mechanical OR electrical

• AND– Used to combine keywords to ensure all are included within the search– Example: mechanical AND engineer

• AND NOT– Used to subtract keywords to ensure they are not included in the

search– E.g.: mechanical AND engineer AND NOT electrical

Basic Boolean Modifiers• Quotation Marks “”– Use to group a phrase together within a search – 2 or more words– Example: “application security”, “business systems analyst”• Parentheses () – Use to group together similar keywords; best in an OR statement– Example: (mechanical OR electrical) AND engineer• Asterisk *– Used to find words birthed out of a stem/root of a word– Example: electric* will return electrical, electrician, electricity, etc.– Google uses it differently: Google stems the words automatically, so Google

uses it as a 1+ word place holder (example: “mechanical * engineer”)

Let’s Put it Together!• Best Practice: If You Follow The Basic Rules, You Can Have

Endless Combinations in Your Search String!• Example String: • ("application security" OR appsec) AND (mobile OR embedded OR

static) AND ("secure code" OR "code review") AND "speakers" AND NOT "network security"

• Straight Quotes vs. Smart Quotes• Short hyphen vs. long dash

Let’s Get Advanced

• As you master the “basics” of Boolean, you can adapt them to fit different search engines and search tools.

• Different engines and tools use Boolean operators and modifiers in their own fashion!

• Let’s look at the way that Google uses Boolean– Example: • Basic Search Example we’ll show in Google• (mechanical|electrical) (engineer|engineering) -industrial

Tony’s Favorite Advanced Operators• Filetype:

– Targets specific file extension, and only pulls back results of that filetype– Example:

• filetype:xls “financial analyst” (list|attendees|members) (email|phone|cell)

• Site:– Indexes a website domain on the web to show results hosted only on that

specific site– Example:

• site:linkedin.com “financial analyst”

Two Advanced Examples• Let’s use filetype: search to find a list of Financial Leaders in Atlanta for Glenn…

– filetype:xls "financial analyst" (atlanta|georgia) (list|attendees|members) (email|name|cell|mobile|phone)

– Link to list: http://bit.ly/GlennsList• Let's use site: search to find a list of application security industry speakers for

Glenn…– site:owasp.org 2014 boston speakers– Link to list: http://bit.ly/1MIuuiD

Despite all the sourcing tools, what you still can’t find is…

• Kudos to free tools like Prophet and Email Hunter that make it easy to find someone’s work email when viewing a social network profile (my free 3-tab email bookmarklet gives 3 other ways).

• If not provided, go to the company website for the main phone, then ask for the person by name (or use dial-by-name directory if available).

• But what if the gatekeepers are difficult and you want their personal email and phone (mobile or home)?

Broadlook Capture, SellHack, etc. (and particularly Connectifier) are also useful, but they don’t always get what you need or there may be a cost. Get ready…

Home contact example – Finance

• Mac Plumart in Marietta, GA: Not on LI, so Google name and location (use quotation marks!)• ZoomInfo result says his name is MacArther,

and this result shows he golfs (ice breaker data).• Found on LI using full name (in nearby

Alpharetta) & for 2nd degree contact, ping a common intermediary for contact info.12

Tony’s finance pros in the bottom section have only work contact names/phones. Can we find home info?

(NOTE: links work if logged into sites listed.)

Home contact (cont.)• From LI, it seems he runs

MRP Capital Investments (googling finds website).

• “About” and “Contact” pages show he runs it solo, so contact info listed will reach him. Reverse phone search shows it’s his mobile # and zoom in on Google Maps of address shows it’s a residence.

• And he’s also on many social networks (e.g., just search by name on FB) if you wanted additional info.

Contact info example off tech listTony’s tech search leads to this speakers list, including Jared DeMott:• Plenty of results googling his name, including profiles on

LinkedIn, Twitter, blog on employer’s site, various speaking engagements, etc.

TIP:Use free context menu search Chrome extension to search in myriad ways by right mouse clicking on highlighted text

• Personal website has email & contact form, but no address/phone• WhoIs search takes care of

that (home address, another email and landline phone)!

More difficult tech list exampleAlso on speakers list is George Ehrhorn (bio says bridge player + math):• He’s on LinkedIn & Contact Info tab goes to his Twitter - personal info

for your outreach icebreakers.• Twitter says he lives in Wayland, MA & links to a G+ profile (personal

info!) so can assume on Gmail: use email permutator to find a match on lastname@• Google “George Ehrhorn” “Wayland, MA” to find his Github profile

(confirms home email).• Whitepages result yields specific Wayland address, middle initial C (

this shows it’s Charles). Guessed age 35-39 syncs with 2002 undergrad degree date on LI…

TIP:

If you had the Connectifier extension (free trial available), you’d already have personal email & several social network profile links

More difficult tech (cont.)• Googling “whois” “George ehrhorn” finds phones

on LocateFamily.com back when he was in PA, but reverse phone search shows none are his now.• Pipl search finds him on Facebook (matches LI

photo!). His top Likes are all Pennsylvania-related, so that’s probably where he once lived.• Search his FB friends for Ehrhorn to find his

eponymous father in Phoenixville, PA, so could call his phone.

TIP:

Get many of the same free, customizable search tools we’ve used today, conveniently pre-loaded in your Chrome browser:

• Glenn’s bookmarklets• Search Bar extension• Context Menu search extension• Multi-domain Email Permutator

Common name? Start with LI RecruiterFind info for Rob George:• LI says “Orange County, California” area

but LIR tells you exact zipcode (here, Lake Forest, CA)

• Google "rob george" "LAKE FOREST, CA"• This result is for a recent (2015) multi-

family garage sale on Chaparral Lane, Lake Forest, CA 92630

• Is he on that street?

Common name (cont.)• A page of results for his name on FindUSA (another good one for home

phones) has only one Lake Forest address: 25632 Hazelnut Ln, Lake Forest, CA 92630

• Click through to details and it shows a phone matching Robert George (also found using Pipl later)

• Zoom in on the Google map of the garage sale location and you see Hazelnut Lane is definitely part of that multi-family garage sale neighborhood.

• Additionally, Pipl finds him on Facebook (LI image match) which seems to sync with Amazon (says he has 1 boy & 2 girls)

LIR is even better in Canada…

Find personal info for Rosine Fenjiep in Montreal, Canada area:1. Using my bookmarklet on Montreal

Canada metro name (also available as free Chrome extension), we see it’s on Rue Filion, Laval, QC H7L 2W3

LIR is even better in Canada (cont.)2. Using Pipl search, we find the result mentions phones 514-771-2559 and 450-

628-7569.

3. And another name of Rosine Fenjiep Tchakountio from her Facebook profile so we have a backup to reach her (which is good, because the Email Permutator does not find another matching email) so Fenjiep is probably her maiden name.

4. Since we think she’s in Quebec, test both phones on Canada directories: 514-771-2559 is a mobile # near Montreal, and 450-628-7569 is even better because it’s associated with R. Tchakountio (her surname!) with address (149 Filion RueLaval, QC H7L 2W3) that matches the LIR location exactly!

Cool sleuthing for mobile phone…For Kyle Kingsbury, you can find social profiles (Facebook, Github, GooglePlus, Twitter) but normal phone searches find no personal #.

HOWEVER, note LI profile’s Education section calling out his fraternity - a good sign he had an officer role as a student:George Mason University - School of Business B.S. … 2003 – 2007 Activities and Societies Sigma Phi Epsilon

So Google "sigma phi epsilon" "george mason" "kyle kingsbury"This is one of 2 results. While the doc won't let you do find-in-page, scroll far enough & you get to this:

"I am the president of the Virginia MU chapter of Sig Ep at George Mason.... please call me directly at 703-609-8707. Best of wishes to you, Kyle Kingsbury Sigma Phi Epsilon - President '07"

A match on name, fraternity, college and year! Reverse phone shows a name match on mobile #!

Gravatar + expired domains can helpWhat home info can we find for Richard Hopkins?1. LI Recruiter indicates Huntington

Beach 926472. Google his name and location

(both in quotes)3. MyLife has

partly blinded addresses; currently $1 for 7 days of unlimited searching.)

4. But unblinded in 2 other results!

5. Under Additional Info on his LI profile, it says: blog http://souladin.wordpress.com/

6. We find several social links (use Pipl if you lack Connectifier): Twitter, Github, Google+

Gravatar + expired domains (cont.)7. But the About Page on his blog links to his Gravatar profile which is the best,

as it shows the personal email!8. Googling "richard hopkins" "92647" also yields step #4’s results:

a) FindUsa.com result has a home address and phone that matches the MyLife and LI address (landline #)

b) STATS∞ - SOULTECHOC.COM Domain Name Info has the same name/address with a different phone (mobile #) and on the actual linked page we see the email matches what we found on his Gravatar page, which confirms this is (was) his domain. This is good info because the regular whois search for soultechoc.com shows the domain was sold and has no info!

Sleuth the Pipl ResultsUzma Azim is somewhere in Dallas metro, but where?1. Use the LIR bookmarklet to indicate location is Plano, TX 750232. Several results from Pipl.com also indicate Allen TX and the name Uzma A Azim (middle initial helps later!).3. Googling distance allen tx to plano tx shows it’s only 12 minutes away, so either location could be valid (Dallas metro).

Sleuth the Pipl Results (cont.)

4. None of the Facebook results in Pipl indicate a US location, except one with no location lists a few Dallas-related orgs under her “Likes” section, indicating she’s the local one!

Sleuth the Pipl Results (cont.)5. No GooglePlus results in Pipl indicate a location, either, but on one of them, click “People in her circles”: a few say they work at Nerium, where she works! Add her to Google+ circles to mark her profile.6. Now test Gmail possibilities with the Email Permutator: Firstname.Middleinitial.Lastname @gmail.com is a match!7. What about home phone? Google "uzma azim" ("allen, tx" OR "plano, tx") -site:linkedin.com8. The only result with a local phone is on LocateFamily (do Ctrl+f to find Uzma on the page), it’s in Plano 75023 and a mobile # - bingo!

Better Info on Spouse’s Website #1Dennis Van Huffel:1. He links to his personal website but no details2. WhoIs has his Gmail, but shows a California

address and we're pretty sure he’s in Austin, TX.3. His Twitter account (via Google, Pipl, Connectifier,

etc.) says he's married to @localsavour4. Go to her Twitter which links to

http://localsavour.com/ and do WhoIs.5. Bingo – domain is under his name and shows full

contact info in Austin.

Better Info on Spouse’s Website #2• For Korbyn Forsman we can find plenty of links using Pipl

search on Twitter, Facebook and G+ but no home email or phone and our guesses don’t match anything.

• But Pipl’s link to his G+ profile says “Korbyn Forsman – Veronica Forsman” - his wife?

• His circles include a link to that name with YTI Coaching and Mentoring Services. The website has nothing, but WhoIs search shows he registered the domain & it has all his contact info. The town (Saanichton) listed matches his public LI profile; metro is same city listed on his Twitter. Bingo!

More examples: WhoIs + GmailDan Usher is not hiding himself:• Click on his first profile attachment; slide 2 says

he’s at sharepointdan.com• His work history says co-founder of Northern

Virginia (Nova) Mobile C# Developers' Group and if we google that, we find results leading to danusher.com and novamobiledev.org

But he’s hiding home contact info. Whois search reveals nothing on those domains – though your email to that cryptic-looking privacy email address will be delivered.

Whois on related domains are all privacy protected except for novamobiledev.net and the phone listed is a Google Voice VOIP (i.e., as permanent/good as a mobile #) and the email listed is a Gmail which leads to his G+ profile (using the Gmail compose trick) and a bunch of other great colleagues’ profiles.

Sleuth the Pipl results a bit deeperRyan Schwab is in the Calgary, Alberta metro.1. Google image search of LI profile photo shows nothing new.2. The Pipl tab results include many Facebook pages (it is a common name) but few show contact info, and the ones that do are in the wrong locations (Minnesota, Ohio, etc.). But if you scroll down, one of them stands out because it has a picture of someone who looks like a hockey player, and that is Canada’s national sport (see image attached) so this might be for a Canadian citizen.3. That FB profile does not say much, but in the left-hand column, we see his review of a barber (haircuts) shop in Okotoks, Alberta. Since this is 29 miles away from Calgary, it is in that metro area!

Sleuth Pipl results deeper (cont.)4. So this is someone named Ryan Schwab in Calgary, but is it the right one? Notice his username schwaby81 sounds like a nickname variation of his last name, Schwab.5. So Google "ryan schwab" "schwaby81" and we see almost all the results are posts from 2011-2012 about Cisco Unified Messaging, the kind of work he was doing at that time, with author name: "Ryan Schwab" <schwaby81 at shaw.ca>6. In addition, a couple of Google results are WhoIs records related to the domain name schwaby.com and it shows 2 other personal emails!

TIPNote how the same username is re-used by someone on various social networks, emails, etc., assisting your match. Search usernames with Namechk or PeekYou.

Sleuth Pipl results deeper (cont.)7. The record shows contact info for that domain which matches his city

location and that he also owns ryanschwab.com (nothing on that website, but same whois info) so we have home address, phone (Whitepages.ca says it’s a mobile # in Calgary) and 2 personal emails!

8. The actual website for schwaby.com is a pet-watching service and lists different contact info and phone (Whitepages says a landline in Medicine Hat, AB). Since his LI profile’s Education section included “Medicine Hat College 2000 – 2002”, he probably used to live near there and so this phone # might be current for his parents or other relatives (which you can call).

Any Questions?

(Boolean search?Contact info sleuthing?

Something else?)

You can also ping either of us later (contact info on slide 1). Thanks!