Hot answers tagged

40

It's essentially a business decision, rather than a security one. The risks from a business perspective are that you lose users from that country, or who are accessing the site from VPNs located in that country, and that, whilst really unlikely, it's theoretically possible for IP assignments to change, meaning that if you didn't keep these blocks maintained ...


27

If you consent, Firefox gathers information about nearby wireless access points and your computer’s IP address. Then Firefox sends this information to the default geolocation service provider... https://www.mozilla.org/en-US/firefox/geolocation/ Firefox knows the IP address, which is used to connect to the VPN provider. Many geolocation services, however, ...


17

Banning ranges of IPs is generally not a good idea. You should only do this if a range is consistently a big problem for you. Here's why: Many people use VPNs or anonymizing networks such as TOR, meaning valid users may appear to have an IP from a country you don't consider to be part of your target audience. Users of such networks may not use your ...


14

One possibility is that modern browsers support a feature called the Geolocation API which states the following: Common sources of location information include Global Positioning System (GPS) and location inferred from network signals such as IP address, RFID, WiFi and Bluetooth MAC addresses, and GSM/CDMA cell IDs, as well as user input. No ...


13

I have used exiftool for this kind of work. It basicly lets you review and edit any meta information in your pictures. I used this to exploit a image service which echoed the geo details back at the user. I filled the images geo data with XSS and attacked other users viewing the picture.


13

If you are using the Facebook app on your phone then you have already agreed to let the app access location services. Accessing Facebook through the browser on your phone will ask for your location like this: m.facebook.com wants to use your device's location The IP address will indicate a very rough location like a city or region. The check-in ...


12

Use whois: http://tools.whois.net/whoisbyip/ Or/and you can try IP address geolocation services, like: http://www.ip2location.com/ http://www.digitalenvoy.com/ http://www.maxmind.com/app/ip_locate http://www.ip2country.com/ http://www.hostip.info/ http://www.atelierweb.com/iploc/ http://www.ip2country.net/ http://www.quova.com/


12

The pirate bay used multiple proxies around the world. As soon as one got detected, they switched over to another one. They used preinstalled encrypted images that they deployed at numerous cloud providers around the world. In order to stay hidden, the servers used many different techniques. All traffic between the proxies and the main servers was tunneled ...


11

Well, many people consider Location data to be sensitive, as you'd imagine. The classic example is someone being stalked - they don't want their location out on the Internet anywhere. I suppose what's special about location is that it usually happens automatically and so it's easy to accidentally leak information. For example, I'm unlikely to accidentally ...


10

There is a handy tool called prey that allows you to track your devices (laptops, tablets and smartphones) and reports back to you. If your device becomes missing you tell prey and it jumps into action. The device begins trying to 'phone home' and will report its IP and geolocation information. In the case of smartphones or laptops with built-in gps it ...


10

You will always have to reveal your IP to some party. Fortunately there are services which will mask your IP. These services are known as proxies. There can be a false sense of security as the proxy provider will still be aware of your IP address, but for the outside world you will be connecting from somewhere else. If the outside world really wants to know ...


9

The question requires some effort at precise definitions. Time Stamping is about proving the existence of some information at some date T. Data is just a bunch of 0 and 1, which have been known for millenia, so we need to define what we mean by: "some information which exists". We thus consider the notion of a message: a sequence of bits, with a beginning, ...


9

It all depends who steals your laptop. If its running Linux and the thief can't use it, then it's not going to be switched on, and prey will be useless. The attacker is just going to install Windows and sell it on eBay. What happens when you steal a hacker's computer is interesting. Due to the fact that he had an insecure setup and that the thief could ...


9

(Well, one of biggest the dangers of Ingress is driving or stepping into harm's way while playing the game, and I know of at least one nasty car accident. And then there is the risk of losing your job or relationship or use of your thumb due to its addictive properties....) The privacy of geolocation data and association data between people is always a ...


9

The range of possibilities is literally infinite, since the data collection and aggregation typically plays only a minor role in the overall malfeasance, whatever that may be. Typically the worry surrounding location and other PII data is that it could be used to "identify" you in some context. By analyzing where you go, they may be able to deduce your ...


8

Some ISPs force a connection reset every 24h and you get a new IP address assigned, others don't force you and yet others give you a fixed ip address. There are laws requiring the ISPs to log the User - IP association (which in turn is associated with your contract)... but e.g. in the EU there is the data retention directive that requires ISPs to even log ...


8

It is possible. You have to edit your Tor config. Vidalia Control Canel > Settings > Advanced > Edit current torrc. https://www.torproject.org/docs/faq.html.en#ChooseEntryExit You have to add: ExitNodes {ua} StrictNodes 1 "ua" is Ukrainian 2 letter country code. Be advised that bandwidth and latency over Tor are very poor.


8

Finding out that a user is using a VPN service provider isn't that difficult. Most of them have static IP addresses for their exit gateways, so it could just be using a list of known IP addresses to identify VPNs. And even when they don't have a list, a simple reverse DNS lookup might tell them that the IP has a hostname which is obviously a VPN provider and ...


7

I'm afraid shopping questions are offtopic for here, however some advice: A keylogger is not a locator - what you want to google for is a locator/phone home/remote control/remote wipe application The application itself will not have gps - you need a physical gps receiver to do that - but if it can report its IP address that may help, and some can hook into ...


7

Something isn't adding up here. I've tried so many combinations and I wasn't able to reproduce your situation. This leads me to believe that your VPN provider is leaking your original IP address. 1. I opened ikea.com using a clean browser (fresh portable Firefox). It took me to to the default locale selection page. 2. Using another clean browser, I ...


7

It's not entirely clear from your question what you're after, but fundamentally your ISP know who you are because they're providing the service you're using to connect to the internet. This will either involve a physical connection to your property plus all of the associated billing or a mobile connection which is triangulated between the cell masts your ...


6

Are you running NoScript?? Google uses JavaScript to find out most of its data, along with cookies, Flash Cookies, and metadata. Try clearing your cache, clearing your cookies, and using a different browser if you really want to fool google maps, also don't log in to google before you check. You most likely can't fool Google unless you are completely ...


6

Yes. ISPs do store all DHCP ip assignment logs. They know exactly who had what IP address and when. For them it is a legal obligation to harvest this information to facilitate any legal queries and investigations. In the US, they have to follow The Federal Communications Commission (FCC) regulations. In the US, ISPs keep track of these items (as available)...


6

There should be no problems with this from a legal/personal information perspective, as if you are using IP ranges in aggregate to understand stats per country you are not storing information about an individual. Your problem may be that you rely on the IP data to give you results - remember the IP address you see a connection coming from may have nothing ...


6

There are many ways to track a users location on a mobile device (I will go into how that works later). None of the tracking methods are particularly easy to spoof. It can be done but it is simply outside of the realm of the average user as it generally requires either a modified device (physically or programmatically) or external gear. Moreover, it is ...


6

A 2014 discvery by prominent newspaper Aftenposten in Norway's capital, Oslo revealed several fake stations. This image shows the german crypto phone in action (revealing fake stations) Mind you, this is a small investigation that focused on politically/business sensitive areas of Oslo such as goverment buildings, embassies, high-profile enterprises etc. ...


6

If I have the MAC address and S/N of a Lenovo 3000 Laptop, is there some way for me to find exact street location of this laptop ? No, there is not. You can get somewhat along the way if you pre-provision the system with software intended to "phone home" (the IP address will point to the ISP, and the ISP can determine which account was using that IP ...


6

Given enough measurements so that you can remove variation caused by server load and network congestion, it should be possible to determine the "network location" of a system. I doubt that these measurements are accurate enough to get the geographic location, but they might be at least a start. Other information you could use are geographical information ...


6

Don't waste your time trying to maintain GeoIP blacklists. It's a kneejerk response, and is shortsighted and ineffective in practice. Think of it like terrorism-- Timothy McVeigh detonates a bomb in Oklahoma. You ban all white men from America. Does that really stop the problem? The majority of actual attacks I've seen come from botnets and/or anonymous ...


5

As the owner and operator of an ISP, I can say that most of us (90%) keep connection logs. We need these internally for troubleshooting purposes. From these logs I can tell you exactly which user account was assigned what IP address and how long they had that address for (start stop times). I further have MAC address information on the device that made ...



Only top voted, non community-wiki answers of a minimum length are eligible