You are on page 1of 38

MC8lLL

uLvlCL
18ACklnC
l1C: Sprlng rlvacy Serles
WashlngLon, uC
leb 19 2014
Lwluer: [ashk4n
ashkan.solLanl[gmall.com
lndependenL researcher & consulLanL

whoami
moblle devlce Lracklng
locauon aware devlces
devlce aware locauons
beneLs
concerns
mobile phones*
locauon aware devlces
locauon aware devlces
*Lhe devlce Lracks lLs locauon
apps
WhaL 1hey know - Apps
plauorms & prlvacy - shb 2011
hup://blogs.ws[.com/wLk-moblle/
locauon
whaL do we mean by 'locauon'?

*dlerenL levels of accuracy
8lueLooLh Low Lnergy
(l8eacons)
*app can send back lnfo
l8eacons
(8lueLooLh Low Lnergy)
devlce aware locauons
devlce aware locauons
*Lhe venue Lracks Lhe devlce
devlce aware locauons
moblle phones*
(anLennas)
gsm
gsm
(lnLercepuon)
wl/blueLooLh
(lnLercepuon)
oLher meLhods
ldenucauon
(Lracklng)
unlque ldenuers
unlque ldenuers
*refers Lo an lndlvldual person or devlce
hashlng
!echo -n "L8:06:88:78:LA:l3" | shasum -a 236
!48fe4d4f1b4cc93367a8794830401081cd91a
79b644782129e3c31369b88aa
*guaranLeed Lo be Lhe same every ume
'hashlng'
'hashlng'
beneLs
consumer beneLs
(opL-ln)
consumer beneLs
(opL-ln)
reLaller beneLs
(opL-ouL)
reLaller beneLs
(opL-ouL)
concerns
reLaller beneLs
(opL-ouL)
reLaller beneLs
(opL-ouL)
concerns
lnvlslble / passlve collecuon
opL-ouL vs opL-ln
dlmculLy of opL-ouL (l.e mac addr)
pseudo-anonymous ldenuers
unclear/lndenlLe reLenuon
convergence
convergence
convergence
(hashlng)
Lwluer: [ashk4n
ashkan.solLanl[gmall.com

questions?