Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)
-   -   Web attack knows where you live and Google Paranoia. (https://www.cableforum.uk/board/showthread.php?t=33667998)

vanman 03-08-2010 17:58

Web attack knows where you live and Google Paranoia.
 
Quote:

One visit to a booby-trapped website could direct attackers to a person's home, a security expert has shown.
Quote:

"This is geo-location gone terrible," said Mr Kamkar during his presentation. "Privacy is dead people. I'm sorry.
http://www.bbc.co.uk/news/technology-10850875

scary stuff !

Kymmy 03-08-2010 18:28

Re: Web attack knows where you live
 
Scary??? Paranoid more like it...

Most IP's don't have a lot of geo-location details, VM have more than many but even do geo-locating puts me between 4-8 miles away.. 9 meters is only relevant when the IP belongs to a source they can truly trace..

You're in more danger of people finding you through details you've put on the net yourself than anything else...

vanman 03-08-2010 18:40

Re: Web attack knows where you live
 
Quote:

Demonstrating the attack, Mr Kamkar located one router to within nine metres of its real world position.
Quote:

This database links Mac addresses of routers with GPS co-ordinates to help locate them. During the demonstration, Mr Kamkar showed how straightforward it was to use the attack to identify someone's location to within a few metres.

danielf 03-08-2010 19:23

Re: Web attack knows where you live
 
Quote:

Originally Posted by Kymmy (Post 35067054)
Scary??? Paranoid more like it...

Most IP's don't have a lot of geo-location details, VM have more than many but even do geo-locating puts me between 4-8 miles away.. 9 meters is only relevant when the IP belongs to a source they can truly trace..

You're in more danger of people finding you through details you've put on the net yourself than anything else...

As I understand it, Google created a database of router Mac addresses and associated GPS location when it went around for streetview. That database, in association being able to rig someone's router to give up the mac address could be sufficient.

Quote:

However, Mr Kamkar found a way to booby-trap a webpage via a browser so the request for the ID information looks like it is coming from the PC on which that page is being viewed.

He then coupled the ID information, known as a MAC address, with a geo-location feature of the Firefox web browser. This interrogates a Google database created when its cars were carrying out surveys for its Street View service.
Google Street View car, Getty The attack uses data gathered by Google's Street View cars

This database links Mac addresses of routers with GPS co-ordinates to help locate them. During the demonstration, Mr Kamkar showed how straightforward it was to use the attack to identify someone's location to within a few metres.

Kymmy 03-08-2010 19:30

Re: Web attack knows where you live
 
But you're talking about the difference between public and not public data..

Google does need their backsides kicked for gathering the data.. Even if this data was to become public it'll be outdated by then (and possibly now for a good proportion of the data) and all you need to do is simply change your IP and router MAC

As I said it's paranoid big brother style mentality

vanman 03-08-2010 19:54

Re: Web attack knows where you live
 
Quote:

Originally Posted by Kymmy (Post 35067092)
and all you need to do is simply change your IP and router MAC

change ip is easy . router mac not so easy.
if your router is a vm all in one with mac address on vm,s database and you change mac address you will not be able to log in

Kymmy 03-08-2010 19:58

Re: Web attack knows where you live
 
Which very few people have..

As I said the database is already out of date and will be more so as time goes by..

Do Virgin Media residential even supply these all-in one modem/routers?

vanman 03-08-2010 20:01

Re: Web attack knows where you live
 
Quote:

Originally Posted by Kymmy (Post 35067102)
Which very few people have..

As I said the database is already out of date and will be more so as time goes by..

Do Virgin Media residential even supply these all-in one modem/routers?

not sure but bt do and sky

Kymmy 03-08-2010 20:03

Re: Web attack knows where you live
 
So because a few ISP's do we should all get paranoid??? ;)

vanman 03-08-2010 20:06

Re: Web attack knows where you live
 
furthermore it applies to the rest of the world not just the uk


“Just because I'm paranoid doesn't mean they're not out to get me”
or did you think that google maps was just in the uk

Kymmy 03-08-2010 20:22

Re: Web attack knows where you live
 
Nope, but as I will say again it's outdated data... It's a snapshop of a certain time, nothing more and nothing less.. Yet the news claims is that "Privacy is dead"

Big Brother is watching us... let's all put on our tin foil hats!!!!

:omg: :omg: :omg: :omg: :omg:

Stuart 03-08-2010 20:27

Re: Web attack knows where you live
 
By default, Firefox asks if you wish to share your location with a website. The article mentions using Firefox. Unless he has found a way to bypass the query (which is possible), then the user would need to consent to send their location.

Still, you can always disable it: http://www.mozilla.com/en-GB/firefox/geolocation/

vanman 03-08-2010 20:29

Re: Web attack knows where you live
 
Quote:

Originally Posted by Kymmy (Post 35067120)
Nope,

Big Brother is watching us... let's all put on our tin foil hats!!!!

:omg: :omg: :omg: :omg: :omg:

don't own one.:shocked:
:idea: but can i borrow your,s

Kymmy 03-08-2010 20:54

Re: Web attack knows where you live
 
Sorry but mine a specialist fit, it has an anti-stupid chip built in.. ;) and gawd do I need to get rid of my stupid thoughts :) They're telling me to do naughty things!!!

vanman 03-08-2010 21:04

Re: Web attack knows where you live
 
Quote:

Originally Posted by Kymmy (Post 35067142)
Sorry but mine a specialist fit, it has an anti-stupid chip built in.. ;)

sorry to hear that kymmy i dont mind that your stupid chip is set for your brain it will properly not affect any one else :D:D

Maggy 03-08-2010 21:26

Re: Web attack knows where you live
 
Quote:

Originally Posted by vanman (Post 35067041)

If you are that scared then get off the internet...:rolleyes:

vanman 03-08-2010 21:42

Re: Web attack knows where you live
 
Quote:

Originally Posted by Maggy J (Post 35067156)
If you are that scared then get off the internet...:rolleyes:

may all your hard drives have bad clusters

v0id 03-08-2010 22:14

Re: Web attack knows where you live
 
Hey if it helps those adverts pinpoint where exactly those sexy young girls in my area who want to have sex with me are, I'm all for it :D

speedfreak 03-08-2010 22:18

Re: Web attack knows where you live
 
Quote:

Originally Posted by v0id (Post 35067201)
Hey if it helps those adverts pinpoint where exactly those sexy young girls in my area who want to have sex with me are, I'm all for it :D

until you turn up to find...Bob, 68, retired accountant looking for fun :p:

Gary L 04-08-2010 00:09

Re: Web attack knows where you live
 
Quote:

Originally Posted by speedfreak (Post 35067205)
until you turn up to find...Bob, 68, retired accountant looking for fun :p:

Don't know how it works where you are, but they always come to me.

and I've never had a Bob :D

Stuart 04-08-2010 00:30

Re: Web attack knows where you live
 
Quote:

Originally Posted by Stuart C (Post 35067124)
By default, Firefox asks if you wish to share your location with a website. The article mentions using Firefox. Unless he has found a way to bypass the query (which is possible), then the user would need to consent to send their location.

Still, you can always disable it: http://www.mozilla.com/en-GB/firefox/geolocation/

OK, so I have read a little more on this. The above was based on my reading of the BBC Article, which, it seems, is wrong in the way it describes some of the more technical aspects of the attack.

According to El Register, the attack uses some javacript to log in to the router's web based admin site from the victim's machine. That machine retrieves the MAC of the router from the admin site and sends it elsewhere. I suspect the victim's machine sends the MAC to Google's Location Services, retrieves the location and sends that elsewhere.

I am not sure if I see this as a threat. I complained about Google's actions because Google maintain a *lot* of data tied to a Google ID, including the IP(s) used to access it. With their Street View data theft, they have the rough (to within a few metres) position of those IPs, so they may well have a fairly good idea of who, in what house, has been accessing what. Even if you don't access Google sites regularly, if you have signed into a Google site on a PC, then any sites you visit that use Google AdWords will be logged along with your Google ID.

But, your average hacker probably would not have access to that data. OK, so if you proudly boast on a social networking site that you are off out, and they have your ID on that site, then you could have a problem.

Pauls9 04-08-2010 09:43

Re: Web attack knows where you live
 
I thought Google admitted they were wrong in collecting that data. If that's the case, why is it still available? Why haven't they destroyed it?

Stuart 04-08-2010 10:24

Re: Web attack knows where you live
 
Quote:

Originally Posted by Pauls9 (Post 35067398)
I thought Google admitted they were wrong in collecting that data. If that's the case, why is it still available? Why haven't they destroyed it?

They never admitted to being wrong for collecting MACS. It's the other data they collected they admitted is wrong.

Maggy 04-08-2010 13:52

Re: Web attack knows where you live
 
Quote:

Originally Posted by vanman (Post 35067170)
may all your hard drives have bad clusters

I hit a nerve I gather.:D

Hugh 04-08-2010 17:38

Re: Web attack knows where you live
 
Quote:

Originally Posted by Gary L (Post 35067283)
Don't know how it works where you are, but they always come to me.

and I've never had a Bob :D

Only after your credit card details were validated.....;)

Gary L 04-08-2010 17:44

Re: Web attack knows where you live
 
Quote:

Originally Posted by foreverwar (Post 35067664)
Only after your credit card details were validated.....;)

I only pay cash.
as nice as they are, I wouldn't trust them with my card details :)

Stuart 04-08-2010 21:34

Re: Web attack knows where you live
 
Trolling posts removed.

Calm down. Now.

LSainsbury 06-08-2010 22:01

Re: Web attack knows where you live
 
OK - serious question - how did they manage to get the MAC of the router by driving by whist taking the streetview photos?

If your Wi-Fi is broadcasting, can they get the MAC from just driving by? My Wi-Fi is secured but DHCP is on. The only way I could see them getting the MAC would be by gaining access to the router - which is not possible 'cus they won't have the network key.

I'm sure DHCP broadcasts the MAC but they would have to logon with the network key first - yes?

Google have not come down our road so I'm safe!

xpod 08-08-2010 03:05

Re: Web attack knows where you live
 
Quote:

Originally Posted by LSainsbury (Post 35068904)
OK - serious question - how did they manage to get the MAC of the router by driving by whist taking the streetview photos?

If your Wi-Fi is broadcasting, can they get the MAC from just driving by? My Wi-Fi is secured but DHCP is on. The only way I could see them getting the MAC would be by gaining access to the router - which is not possible 'cus they won't have the network key.

I'm sure DHCP broadcasts the MAC but they would have to logon with the network key first - yes?

Google have not come down our road so I'm safe!

They dont need access to your router to get your routers mac address. They dont need access to anything at all to gather wireless router/access point mac addresses in fact. They can just pluck them right out the air so to speak, hidden or not.
I believe they actually used freely available software in conjunction with some Google specific stuff.

vanman 12-08-2010 00:31

Re: Web attack knows where you live
 
Google under probe in S.Korea over data collection

http://uk.reuters.com/article/idUKTRE6791BR20100810

Quote:

The probe in one of Asia's most wired countries came as a fresh setback to Google, which already faces investigation over "Street View" by 37 U.S. states as well as an informal investigation by the U.S. Federal Trade Commission, and a variety of probes overseas and class action lawsuits.

Security experts have said the data picked up by Google could include people's email messages and passwords, although Google has said that the United Kingdom's data protection authorities recently concluded that no "meaningful personal information" was collected by the cars.
also
http://uk.reuters.com/article/idUKTRE67A2VJ20100811
Quote:

TANTAMOUNT TO SPYING?

"The Stasi would be green with envy if they could have collected this kind of data," wrote the conservative Frankfurter Allgemeine Zeitung newspaper. "What in the past was called 'state snooping' is now called 'Google View'."

vanman 14-08-2010 20:58

Re: Web attack knows where you live
 
Google 'faces legal action in France' over Street View



http://www.telegraph.co.uk/technolog...reet-View.html

Quote:

The French data protection agency has carried out an investigation into whether it should prosecute the search engine for gathering the data after asking Google to hand over the information last month.

Maggy 14-08-2010 21:21

Re: Web attack knows where you live
 
I thought this thread's topic was web attack.Why are you now dragging in stuff about Google.

You really should have started a new thread about Google Paranoia vanman.

So do you want me to rename the thread or split the thread off into a new one?

vanman 14-08-2010 21:38

Re: Web attack knows where you live and Google Paranoia.
 
Quote:

Originally Posted by Maggy J (Post 35072750)
I thought this thread's topic was web attack.Why are you now dragging in stuff about Google.

You really should have started a new thread about Google Paranoia vanman.

So do you want me to rename the thread or split the thread off into a new one?

now maggy you don't have to shout :D your the boss you decide


All times are GMT +1. The time now is 06:58.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum