Page 1 of 5   1 2 3 > last >>
Bookmark this page: Add OT but   Hacker pilfers browser GPS location via router attack   The  Register to Yahoo MyWeb Add OT but   Hacker pilfers browser GPS location via router attack   The  Register to Google Bookmarks Add OT but   Hacker pilfers browser GPS location via router attack   The  Register to Windows Live Add OT but   Hacker pilfers browser GPS location via router attack   The  Register to Del.icio.us Digg OT but   Hacker pilfers browser GPS location via router attack   The  Register! Add OT but   Hacker pilfers browser GPS location via router attack   The  Register to Netscape
  •  
  • Subject
  • Author
  • Date
If you were  Registered and logged in, you could reply and use other advanced thread options
Posted by nickw7coc@gmail.com on January 5, 2010, 3:21 pm


I know this really isn't to do with GPS, but it's the sort of thing
that is likely to start a discussion here due to it being another sort
of incursion into the realms of geolocation...

If you're surfing the web from a wireless router supplied by some of
the biggest device makers, there's a chance Samy Kamkar can identify
your geographic location.

That's because WiFi access points made by Westell and others are
vulnerable to XSS, or cross-site scripting, attacks that can siphon a
device's media access control address with one wayward click of the
mouse. Once in possession of the unique identifier, Kamkar can plug it
in to Google's Google Location Services and determine where you are.

More at http://www.theregister.co.uk/2010/01/05/geo_location_stealing_hack/

Posted by Bert Hyman on January 5, 2010, 3:28 pm


In

> That's because WiFi access points made by Westell and others are
> vulnerable to XSS, or cross-site scripting, attacks that can siphon a
> device's media access control address with one wayward click of the
> mouse. Once in possession of the unique identifier, Kamkar can plug it
> in to Google's Google Location Services and determine where you are.
>
>

How would knowing my PC's MAC address or the MAC address of my router
tell anyone where it's sitting?

--
Bert Hyman        St. Paul, MN        bert@iphouse.com

Posted by PeterD on January 5, 2010, 6:15 pm



>In
>> That's because WiFi access points made by Westell and others are
>> vulnerable to XSS, or cross-site scripting, attacks that can siphon a
>> device's media access control address with one wayward click of the
>> mouse. Once in possession of the unique identifier, Kamkar can plug it
>> in to Google's Google Location Services and determine where you are.
>>
>>
>How would knowing my PC's MAC address or the MAC address of my router
>tell anyone where it's sitting?

It wouldn't. Knowing the IP address would, and hell all IP addresses
are basically known and public. There are many IP locator sites on the
web, though many are not terribly accurate, or only indicate a given
region or state.

Posted by Bert Hyman on January 5, 2010, 6:35 pm



>
>>In
>>> That's because WiFi access points made by Westell and others are
>>> vulnerable to XSS, or cross-site scripting, attacks that can siphon
>>> a device's media access control address with one wayward click of
>>> the mouse. Once in possession of the unique identifier, Kamkar can
>>> plug it in to Google's Google Location Services and determine where
>>> you are.
>>>
>>>
>>How would knowing my PC's MAC address or the MAC address of my router
>>tell anyone where it's sitting?
>
> It wouldn't. Knowing the IP address would,

Well, no. It would tell you the address my ISP used when the net was
registered, which has very little to do with where I'm sitting at the
moment. It gets the state right though.

The registration info for my machine at work would say I'm in
Pennsylvania.

> and hell all IP addresses are basically known and public. There are
> many IP locator sites on the web, though many are not terribly
> accurate, or only indicate a given region or state.


--
Bert Hyman        St. Paul, MN        bert@iphouse.com

Posted by Sam Wormley on January 5, 2010, 3:51 pm


On 1/5/10 2:21 PM, nickw7coc@gmail.com wrote:
> I know this really isn't to do with GPS, but it's the sort of thing
> that is likely to start a discussion here due to it being another sort
> of incursion into the realms of geolocation...
> If you're surfing the web from a wireless router supplied by some of
> the biggest device makers, there's a chance Samy Kamkar can identify
> your geographic location.

Nothing to do with WiFi, or routers

http://www.ip-adress.com/ip_tracer/87.112.87.33
http://isc.sans.org/ipinfo.html?ip=87.112.87.33
http://www.rbltest.com/index.html?ip=87.112.87.33

http://groups.google.com/groups/profile?user=nickw7coc@gmail.com
http://centralops.net/co/EmailDossier.aspx?email=nickw7coc@gmail.com

Here's some of the information your browser gives away:
http://centralops.net/asp/co/BrowserMirror.vbs.asp
http://www.bufftony.com/browserinfo.html

host 87.112.87.33
33.87.112.87.in-addr.arpa domain name pointer
87.112.87.33.plusnet.ptn-ag2.dyn.plus.net.

dig -x 87.112.87.33

; <<>> DiG 9.6.0-APPLE-P2 <<>> -x 87.112.87.33
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32327
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;33.87.112.87.in-addr.arpa.        IN        PTR

;; ANSWER SECTION:
33.87.112.87.in-addr.arpa. 42693 IN        PTR
87.112.87.33.plusnet.ptn-ag2.dyn.plus.net.

;; AUTHORITY SECTION:
87.112.87.in-addr.arpa.        5104        IN        NS        ns2.force9.net.
87.112.87.in-addr.arpa.        5104        IN        NS        ns1.force9.net.

;; ADDITIONAL SECTION:
ns1.force9.net.                126457        IN        A        195.166.128.16
ns2.force9.net.                126457        IN        A        195.166.128.17

;; Query time: 38 msec
;; SERVER: 129.186.1.200#53(129.186.1.200)
;; WHEN: Tue Jan 5 14:46:38 2010
;; MSG SIZE rcvd: 173


X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.9.1.6)
        Gecko/20091201 Firefox/3.5.6 (.NET CLR 3.5.30729),gzip(gfe),gzip(gfe)

Security tools such as nmap can determine a lot more about your
computer.


Page 1 of 5   1 2 3 > last >>