Hot answers tagged geolocation
11
I have used exiftool for this kind of work. It basicly lets you review and edit any meta information in your pictures.
I used this to exploit a image service which echoed the geo details back at the user. I filled the images geo data with XSS and attacked other users viewing the picture.
11
One possibility is that modern browsers support a feature called the Geolocation API which states the following:
Common sources of location information include Global Positioning
System (GPS) and location inferred from network signals such as IP
address, RFID, WiFi and Bluetooth MAC addresses, and GSM/CDMA cell
IDs, as well as user input. No ...
10
Use whois: http://tools.whois.net/whoisbyip/
Or/and you can try IP address geolocation services, like:
http://www.ip2location.com/
http://www.digitalenvoy.com/
http://www.maxmind.com/app/ip_locate
http://www.ip2country.com/
http://www.hostip.info/
http://www.atelierweb.com/iploc/
http://www.ip2country.net/
http://www.quova.com/
10
If you consent, Firefox gathers information about nearby wireless access points and your computer’s IP address. Then Firefox sends this information to the default geolocation service provider...
https://www.mozilla.org/en-US/firefox/geolocation/
Firefox knows the IP address, which is used to connect to the VPN provider. Many geolocation services, ...
9
Well, many people consider Location data to be sensitive, as you'd imagine. The classic example is someone being stalked - they don't want their location out on the Internet anywhere.
I suppose what's special about location is that it usually happens automatically and so it's easy to accidentally leak information.
For example, I'm unlikely to accidentally ...
9
The question requires some effort at precise definitions.
Time Stamping is about proving the existence of some information at some date T. Data is just a bunch of 0 and 1, which have been known for millenia, so we need to define what we mean by: "some information which exists". We thus consider the notion of a message: a sequence of bits, with a beginning, ...
8
It all depends who steals your laptop. If its running Linux and the thief can't use it, then it's not going to be switched on, and prey will be useless. The attacker is just going to install Windows and sell it on eBay.
What happens when you steal a hacker's computer is interesting. Due to the fact that he had an insecure setup and that the thief could ...
7
I've mentioned some of this in comments already, but I'll just go ahead and flesh it out here.
Even if there is a phone that does not have a GPS device installed these days, it does not negate the possibility of anyone being able to track it. A cell phone's location can be tracked by any number of ways:
Cellular signal triangulation - Like any other ...
7
The range of possibilities is literally infinite, since the data collection and aggregation typically plays only a minor role in the overall malfeasance, whatever that may be.
Typically the worry surrounding location and other PII data is that it could be used to "identify" you in some context. By analyzing where you go, they may be able to deduce your ...
6
There should be no problems with this from a legal/personal information perspective, as if you are using IP ranges in aggregate to understand stats per country you are not storing information about an individual.
Your problem may be that you rely on the IP data to give you results - remember the IP address you see a connection coming from may have nothing ...
6
(Well, one of biggest the dangers of Ingress is driving or stepping into harm's way while playing the game, and I know of at least one nasty car accident. And then there is the risk of losing your job or relationship or use of your thumb due to its addictive properties....)
The privacy of geolocation data and association data between people is always a ...
5
If you are using the Facebook app on your phone then you have already agreed to let the app access location services.
Accessing Facebook through the browser on your phone will ask for your location like this:
m.facebook.com wants to use your device's location
The IP address will indicate a very rough location like a city or region. The check-in ...
5
It is possible. You have to edit your Tor config. Vidalia Control Canel > Settings > Advanced > Edit current torrc.
https://www.torproject.org/docs/faq.html.en#ChooseEntryExit
You have to add:
ExitNodes {ua}
StrictNodes 1
"ua" is Ukrainian 2 letter country code. Be advised that bandwidth and latency over Tor are very poor.
5
Some ISPs force a connection reset every 24h and you get a new IP address assigned, others don't force you and yet others give you a fixed ip address.
There are laws requiring the ISPs to log the User - IP association (which in turn is associated with your contract)... but e.g. in the EU there is the data retention directive that requires ISPs to even log ...
5
Are you running NoScript?? Google uses JavaScript to find out most of its data, along with cookies, Flash Cookies, and metadata. Try clearing your cache, clearing your cookies, and using a different browser if you really want to fool google maps, also don't log in to google before you check. You most likely can't fool Google unless you are completely ...
5
If you are on the go and have an android phone...I have created a Android based IP-Geolocation tool that uses the Maxmind database to geolocate IP addresses. You can find it in the android market (search Geo IP) or download it from my website.
Also you can use the chrome extension that I created here
4
As you say, you cannot change the signal from the GPS.
Actually I did not find any official way of assessing the authenticity of the GPS signal. It is possible, but I can't really know, that the GPS M-signal reserved to military uses, has some functionality to detect tampering of the signal. It is also know as being able to mitigate the risk of jamming.
...
4
One of the problems with finding the location of an IP address is that they change frequently.
Currently the addresses between 46.36.160.0 and 46.36.191.255 are assigned to BA (Bosnia and Herzegovina)
We use the service at http://www.maxmind.com/app/geolitecity to import the current list of IP addresses and the code from ...
4
http://www.analysespider.com/ip2country/lookup.php
Pasting your IP address[ 46.36.191.14 ] in the above website gives:
Country : Bosnia and Herzegovina
ISP : Logosoft, information engineering and Internet providing
You can Internet pings on Windows platform using a procedure such as
...
4
Yes. ISPs do store all DHCP ip assignment logs. They know exactly who and when had what IP address. For them is it a legal obligation to harvest this information to facilitate any legal queries and investigations. In US they have to follow The Federal Communications Commission (FCC) regulations.
In US ISPs keep track of these items (as available) ...
3
I had only skimmed through the most popular tracking software there. After reading thoroughly the extensive FAQ of prey, I found this question to answer my original:
Will Prey still phone home if there’s no user logged in?
The answer is yes, since Prey runs in the background as the root
(system) user.
Now, if there’s no active session then ...
3
I attended a workshop for Splunk a few months ago. Splunk, if you are unfamiliar with it, is a type log viewer. You can find more out about them at their website: http://www.splunk.com. Essentially, you dump all of your log data into one place, and then analyze it, correlate, report on it, etc.
One of the use cases for Splunk was to correlate VPN logs with ...
3
I suspect that this is the work of the Geolocation API. Here are some scenarios:
You've probably added Facebook to the trusted list in your browser to allow it to use Geolocation information without asking.
Your browser is misconfigured (advanced configurations) and it allows any website to access Geolocation information.
Facebook is loading some ...
3
Cellphone towers can be used like GPS satellites to track your location. The fact that you are connected to the cell network means that "they" can track you irregardless of GPS or the software running on your phone.
Another problem is that malicious software is running on the phone, and you cannot fully control this device. Some paranoid friends of mine ...
3
A VPN does not guarantee anonymity from outside the private network. Those packets of information still have to get from you to the VPN gateway and vice versa, and that basically means TCP/IP routing between these two endpoints, so your computer must still know its IP address in the LAN it's currently connected to in order to receive the VPN packets, and the ...
3
Firefox extensions:
https://addons.mozilla.org/en-US/firefox/addon/ip-geolocation-search/
This IP geolocation search is made to help you quickly find the physical location of an IP address or domain name. It displays on a Google Map with additional whois information. The data comes from MaxMind and multiple whois databases.
...
2
When you are using a VPN your routing table gets modified and added the networks for which you can access. Perhaps I misread your question, but according to my understanding from your question - You are routed to Google through your internet connection and not the VPN. Unless you are going to Google from a terminal server through your VPN, which renders my ...
2
Actually, NoScript provides options for white listing and plugin behavior in the client preferences.
If you click on the NoScript icon in the browser toolbar, you should see a drop down menu link titled "options". Selecting that will open the NoScript preferences pane, and from there you can configure virtually all aspects of the NoScript behavior. In ...
2
You mentioned you are accessing the mobile version. Is this on a phone? If so, the GPS may be used or it could use the device's approximation of where it is based on IP and/or wifi hotspots and/or cellular towers and/or any other number of other indicators. A VPN will mask your IP address from the server, but if your computer responds to a request, it ...
2
A similar idea has been proposed in the following research papers:
Short Paper: Smartphones: Not Smart Enough?, Ian Fischer, Cynthia Kuo, Ling Huang, Mario Frank, ACM Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM 2012).
Intuitive security policy configuration in mobile devices using context profiling, Aditi Gupta, Markus ...
Only top voted, non community-wiki answers of a minimum length are eligible
