Using XSS & Google To Find Physical Location

wiredmikey sends along a brief (and quite poorly written) report from Security Week on Samy Kamkar's talk at Black Hat last week. In the video, which is amusing, he demonstrates how to obtain location information (within 30 feet, in the example he shows) of a user who does no more than visit a malicious website. The technique involves sniffing out the local router, breaking into it to obtain its MAC address, and sending that to Google to extract the router's location from Google's Street View database.

It's this:

[Anonymous Coward]

Apple Computer Inc
1 Infinite Loop
Cupertino, CA 95014

Awesome!

[Anonymous Coward]

It was off by only a few houses! Privacy be ignored, this here be progress! To Google! Our future overlord!