Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Did Fried Brain Cells Bag John McAfee?
Dice ^ | Dec 7, 2012 | Dawn Kawamoto

Posted on 12/13/2012 8:44:36 PM PST by null and void

How is it possible that John McAfee–John McAfee, the pioneer in protection against hacking, for goodness sake–was tracked down in Guatemala by a hack so simple it doesn’t really deserve to be called a hack?

First, Vice magazine posted a picture of McAfee snapped by an iPhone-bearing staffer who was visiting the fugitive. Then, the enterprising Twitter user Simple Nomad downloaded the photo and extracted the metadata from special headers, EXIF tags, embedded in most digital images. Based on longitude and latitude, the type of device used, and sometimes even the name of its owner, the metadata can reveal precisely where a photo was taken.

Revealing Details
This isn’t even cutting-edge stuff. The capability to glean information from image headers has been around for years in traditional digital cameras, says Johannes Ullrich, who heads the Internet Storm Center for the SANS Technology Institute. “Its original intent was to help you store information like what type of lens you were using, or the aperture setting. But as cameras became fancier, more information was stored in these headers.”

While few digital cameras have GPS capabilities, they–like cameras–are a given in smartphones.

Getting Tagged
Back in 2010, Ullrich tested the prevalence of EXIF tags. He collected 15,291 images from Twitpic.com, analyzed their EXIF data and found:

• Approximately 10,000 images had basic EXIF information, such as camera orientation and resolution.
• 5,247 included camera model.
• 399 noted camera location at the time the photo was taken.
• 102 included the photographer’s name.
• The bulk of images with GPS information came from iPhones.
(Apparently, iPhones store the most extensive amount of EXIF data.)

Wanna Peek?
Ullrich offered up a photo he took with his iPhone:

Here’s image’s EXIF information, as it appears when collected with a tool called exiftags:

Take the latitude and longitude, pop them into a mapping site and…Voilà:

Taking Precautions
The complications this can cause for pretty much anyone are apparent, whether they’re an on-the-run millionaire or someone just skipping work for the day. If you want to avoid any trouble, disable the location services on your smartphone. You won’t be able to arrange your pictures geographically, but that could be a small price to pay.

Unfortunately, removing data from images you’ve already posted online is harder. “There are some commercial tools, but it’s nothing I would recommend to consumers at this point because it’s too hard to use and too expensive for the use it would get,” Ullrich says.

There’s also the of time and effort. You’d have to download the images you wanted to scrub and then rub them through one of the available EXIF tools. But if you’re determined to do it, take a look at exiv2 and ImageMagick, which can help you review and strip out the image’s header information.

But before you freak out thinking about of all of the pictures you’ve got on Facebook, Google+ or wherever, Ullrich notes that some sites strip out the metadata before it’s posted.

In fairness, a number of reports say it was an “unseasoned” Vice staffer who posted the photo without scrubbing the metadata.


TOPICS: Culture/Society; Miscellaneous
KEYWORDS:
A word or two to the wise.
1 posted on 12/13/2012 8:44:42 PM PST by null and void
[ Post Reply | Private Reply | View Replies]

To: null and void

I am not impressed with his AV program.


2 posted on 12/13/2012 9:46:01 PM PST by rawcatslyentist ("Behold, I am against you, O arrogant one," Jeremiah 50:31)
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void

Simply don’t buy an IPhone or other GPS-tagging device in the first place. And if you do certainly don’t publish photos anywhere.


3 posted on 12/13/2012 9:57:12 PM PST by steve86 (Acerbic by Nature, not NurtureĀ™)
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson