DEFCON 18: How I Met Your Girlfriend (for the nerds)

[RCA]

Part 1
[youtube]http://www.youtube.com/watch?v=fEmO7wQKCMw[/youtube]

Part 2
[youtube]http://www.youtube.com/watch?v=2ctRfWnisSk[/youtube]

Part 3
[youtube]http://www.youtube.com/watch?v=vJtmZZGcR54[/youtube]




TL;RW

• Guy recognizes Facebook uses php and he begins to replicate the php cookie that would allow him to log on as Anna's boyfriend

• He then compiles all the bits used to make up a php cookie (160 bits) and starts to deduce them until he reaches 20bits of possible data

• Once logged on as boyfriend he sends messages to Anna with a link to the hackers twitter

• The link was malicious and attacks the browser directly and through the magic of the tubes he is able to have free access to all ports on her home network

• Once this is done he retrieves the mac address of her home router and with some XXXSS magic and a simple Google search he finds the coordinates of her home

STL;DR

• Guy uses a php cookie venerability to find out the location of Anna Faris' home

[s0m3th1ngAZ]

Having a very rudimentary knowledge of what the hell was going on...he explained all of that very very well...and what an epic job I might add.

[RCA]

Having a very rudimentary knowledge of what the hell was going on...he explained all of that very very well...and what an epic job I might add.

Same here. I wasn't to sure about everything he mentioned, but he made it easy to keep up with and he was funny at times. Scary how people can think outside the box and come up with a solution to his "problem".

[s0m3th1ngAZ]

Well, the video drove me to download Noscript...

[RCA]

Well, the video drove me to download Noscript...

I was thinking about it but didn't. I'm not an important enough figure, if you want me all it takes is a Google search.

[Razi]

Defcon ftw.

[krimsonviper]

I don't know about you guys, but this thread sure could use some actual underboob.

[Razi]

All threads could!

[alms24sebring]

sideboob is also acceptable

[RCA]

I don't know about you guys, but this thread sure could use some actual underboob.

Am I doing it right?

[tigersharkdude]

Well, the video drove me to download Noscript...

Noscript is awesome. It's annoying sometimes though




*snip*


Please becareful of not posting nips.

[PoorManQ45]

He went the long way about it.

It would have been much easier to just view the metadata in her photos. If a device that has a GPS or aGPS in it was used then it will typically have location information.

[krash]

Yea but that GPS stuff just recently started being utilized in the general public. Most likely, random hottie on the internet doesn't have a GPS camera (or know how to turn on the GPS function). Cell phone pics maybe, but even then, doesn't the feature need to be turned on?

[PoorManQ45]

Yea but that GPS stuff just recently started being utilized in the general public. Most likely, random hottie on the internet doesn't have a GPS camera (or know how to turn on the GPS function). Cell phone pics maybe, but even then, doesn't the feature need to be turned on?

If you're using an Android phone that feature is turned on by default. If you only use aGPS(cellular triangulation) it will be accurate within about a mile. If you turned on GPS(most people do for maps) then it'll be accurate within 10 meters.

Who uses a dedicated camera to post on facebook though? Not many people.

I believe iPhones have this feature turned on by default also.

[Razi]

PMQ: Proving my theory that he is a professional creeper.

[krimsonviper]

Careful, you might spark an interest with him.

[RCA]

If you only use aGPS(cellular triangulation) it will be accurate within about a mile. If you turned on GPS(most people do for maps) then it'll be accurate within 10 meters.

I believe iPhones have this feature turned on by default also.

You mean in most cases when people use aGPS, correct? Because in the video he was ~30ft away not a mile. Using the triangulation from WiFi signals that are captured by Google Maps will me much more accurate than a mile.

Also yes, iPhones have it on by default.

[krash]

If you're using an Android phone that feature is turned on by default. If you only use aGPS(cellular triangulation) it will be accurate within about a mile. If you turned on GPS(most people do for maps) then it'll be accurate within 10 meters.

ah, ok

Who uses a dedicated camera to post on facebook though? Not many people.

Everyone has a little point and shoot lying around. Actually, for the most part, most of the pictures people post and stuff are from random point and shoot cameras. Maybe there are a few cell phone pics here and there, but usually its point and shoot cams.

[Razi]

Careful, you might spark an interest with him.

!
i r scared!

[PoorManQ45]

If you only use aGPS(cellular triangulation) it will be accurate within about a mile. If you turned on GPS(most people do for maps) then it'll be accurate within 10 meters.

I believe iPhones have this feature turned on by default also.

You mean in most cases when people use aGPS, correct? Because in the video he was ~30ft away not a mile. Using the triangulation from WiFi signals that are captured by Google Maps will me much more accurate than a mile.

Also yes, iPhones have it on by default.

the system is very accurate if atleast three towers are used. sometimes only two towers. when this happens you'll appear to be located between the two towers. this bumps the distance to about a mile.

you are correct that when three towers are used the accuracy will be very high.