Short answer: OSINT journalism is reporting built entirely out of material anyone can legally look at — satellite photos, flight trackers, ship transponders, corporate registries, leaked databases, and the holiday snaps a soldier posted to a Russian social network in 2014. No confidential source. No leaked envelope. No official who agrees to talk only if you don't use their name. The evidence is public. The work is noticing it, cross-checking it, and proving what it shows. * "Open source" here has nothing to do with software. It's an old intelligence-world term for information you don't have to steal. Spy agencies have used it for decades. What changed is that the raw material stopped being rare. Once every phone was a camera, every camera knew where it was, and every satellite image was one browser tab away, a person sitting in an apartment could look at the same pictures a national intelligence service was looking at — and sometimes get to the answer first. * The clearest example is Bellingcat. It was founded in 2014 by Eliot Higgins, a British blogger with no journalism training who had been writing about Syrian weapons under the name Brown Moses while working an admin job. He launched the site with money raised on Kickstarter. Weeks later, Malaysia Airlines Flight MH17 was shot down over eastern Ukraine on July 17, 2014, killing all 298 people on board — and the site's volunteer community started doing the thing that made its name. * Here is what that work actually looked like, because "open source investigation" sounds abstract until you watch it happen. Bellingcat's researchers collected videos and photographs that Ukrainians had posted of a military convoy moving through their towns. They matched vehicles in that convoy to vehicles visible in photographs that Russian soldiers had posted of themselves at their own base near Kursk. They identified more than 200 soldiers' social media profiles. From that, they traced the Buk missile launcher back to Russia's 53rd Anti-Aircraft Missile Brigade. All of it from material that was, at the time, sitting in public on the internet, uploaded voluntarily by the people it incriminated. * That's the part people miss about OSINT. It isn't hacking, and it isn't magic. It's an enormous amount of patient, boring cross-referencing: geolocation (finding the exact spot a photo was taken by matching a treeline, a pylon, a roof shape against satellite imagery), chronolocation (dating it from shadow angles, weather records, or how much foliage is on the trees), and verification (finding the same event in a second, unrelated source before you believe the first one). * And it holds up outside the internet. On November 17, 2022, the District Court of The Hague convicted Igor Girkin, Sergey Dubinskiy and Leonid Kharchenko in absentia over the downing of MH17 and the murder of the 298 people aboard, sentencing all three to life; a fourth defendant, Oleg Pulatov, was acquitted. The court found the missile was fired from a farm field near Pervomaiskyi, in separatist-held territory. A criminal court arrived in the same place a group of volunteers with screenshots had — which is the strongest argument the method has ever made for itself. * Bellingcat did it again with names. In September 2018 it identified the Salisbury poisoning suspect travelling as "Ruslan Boshirov" as Colonel Anatoliy Chepiga of Russia's GRU, a decorated Hero of the Russian Federation. In October 2018 it identified the second suspect, "Alexander Petrov," as Dr. Alexander Mishkin, a military doctor recruited by the GRU. On December 14, 2020, working with The Insider, Der Spiegel and CNN, it used telecom and travel records to tie an FSB team of chemical-weapons specialists to the Novichok poisoning of Alexey Navalny. Passport databases, phone records, frequent-flyer trails: in Russia that data leaks and is quietly for sale, and Bellingcat turned somebody else's carelessness into an identification. * Who pays for this matters, so here it is. Bellingcat is a Dutch foundation — Stichting Bellingcat — plus a registered US nonprofit. It says roughly half its money comes from grants from private and public foundations, with the rest from workshops, individual donors and, genuinely, the Dutch Postcode Lottery. It does not take money from the governments it investigates, which is the line it gets attacked over most, usually by the governments it investigates. * Now the honest part, the bit the hype skips. OSINT is powerful precisely because it's checkable — you can be handed the coordinates and go look yourself — but that same openness is its weak spot. A confident geolocation can be wrong. Old war footage gets recycled and captioned as a new one. And crowdsourced identification has produced real disasters: after the 2013 Boston Marathon bombing, online sleuths publicly named innocent people, including a missing student who had already died. Being able to see everything is not the same as knowing what you're looking at. * So how should this change the way you read a story? Look for whether the outlet shows its work. An OSINT-based report should tell you where the footage came from, when it was posted, how the location was confirmed, and what was done to rule out the obvious alternative explanation. If it says "verified by our investigations team" and stops there, you're being asked to trust an authority rather than being shown evidence — which is the exact thing this method was invented to replace. * And notice who's doing it now. Newsrooms that once had foreign bureaus and now don't — the BBC, the New York Times, the Washington Post, AFP — all run visual-investigations desks that work this way. Partly because it's excellent journalism. Partly because a small team with satellite subscriptions is cheaper than a bureau in a war zone. The tool that let outsiders break into the story is also, conveniently, the tool that lets shrunken newsrooms cover a world they can no longer afford to visit.