Geolocation XSS Tracker Proof of Concept 102
Jamie found a bit of a scary link this morning that demonstrates a router XSS getting your MAC address and using it to map your current location. Which I'm sure is totally no big deal for anyone.
Or, maybe it doesn't (Score:5, Interesting)
Apparently my router is currently sitting in the former main office of the major telco for my area. Which is across town from me.
And here I was thinking it was on my desk.
So, fail
Re:"from other data sources" (Score:3, Interesting)
re: broadcast SSID (Score:3, Interesting)
I find broadcasting the SSID helps greatly in troubleshooting wireless issues for other people, if nothing else.
If I get called out to the typical home user's place to help them "fix their problems getting on the Internet", they often don't have any clue what their SSID is set to. All they know is that "It worked ever since the Geeksquad guys came out and set it all up for us!" or what-have-you.
On more than one occasion, I discovered the reason someone had issues had to do with neighbors buying new Linksys routers that had default SSID's of "linksys", matching the default of THEIR Linksys router they'd been using for months/years. Sometimes they were actually connecting to a neighbor's unsecured router for quite some time, before that neighbor made changes that booted them out -- and only THEN did they think they had things mis-configured.
Wierd (Score:4, Interesting)
I have two Wireless APs -- one of which is only active occasionally for guests. Here's what I got when I entered my MACs:
Everyday (always on) router: It found my city, but the address was about two miles away.
Guest router: It pinpointed my father-in-law's address. This is strange, because my router has never been located at his house. But, HE HAS CONNECTED TO MY ROUTER. Interesting.
I checked the first address again, and this would be a friend's house, who I once connected his laptop to my network when I was fixing it.
I'm not completely familiar with 802.11, but it would appear that computers that had previously connected to my MAC are regularly pinging this MAC in such a way as to be received by the Google drive-by's and recorded as actual MACs of actual APs. Is there another explanation?
PDF Presentation (Score:2, Interesting)