[2453] in Privacy_Forum
[ PRIVACY Forum ] Using traffic analysis to infer SSL Google Maps data
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Mon Feb 13 18:53:13 2012
Date: Mon, 13 Feb 2012 15:41:41 -0800
To: privacy-list@vortex.com
Message-ID: <20120213234141.GA4476@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Using traffic analysis to infer SSL Google Maps data
http://j.mp/xHaUGy (threat post)
"Vincent Berg of IOActive has written a tool that can monitor SSL
connections and make some highly educated guesses about the contents
of the requests going to Google Maps, specifically looking at what
size the PNG files returned by Google Maps are. The tool then attempts
to group those images in a specific location, based on the grid and
tile system that Google uses to construct its maps."
- - -
A reminder of what the spooks have long known -- traffic analysis can
yield significant information even from typically encrypted channels.
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Data Wisdom Explorers League: http://www.dwel.org
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
