Bitcoin Forum

Bitcoin => Hardware => Topic started by: nightengale on June 20, 2013, 11:27:22 PM



Title: PSA: ASIC Theft & EXIF Geolocation Data
Post by: nightengale on June 20, 2013, 11:27:22 PM
I'm sure a lot of you out there are aware of this, but for those who haven't thought of it...

Don't forget that if you use your phone to take a picture and show off your new miner, or of a rig that you're posting for sale, the photo may have embedded geolocation data that tells everyone exactly where it was taken... Thus enabling miscreants to come take your stuff.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: VolanicEruptor on June 20, 2013, 11:28:05 PM
link?


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: nightengale on June 20, 2013, 11:29:43 PM
Don't have a link. Just read about the Avalon burglary and it was something I'd been thinking about. I'm sure there are photos out there that prove my point, but it doesn't make any sense to expose anyone here.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: VolanicEruptor on June 20, 2013, 11:31:28 PM
I was just wanting a link to the story, nothing more... I have no idea what you're talking about


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bitcoinorama on June 20, 2013, 11:31:43 PM
http://securityandrisk.blogspot.co.uk/2010/08/free-of-charge-web-based-photo-geo.html


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Gomeler on June 20, 2013, 11:32:07 PM
imgur striped EXIF data. Very useful for posting semi-anonymous pictures.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bitcoinorama on June 20, 2013, 11:34:13 PM
imgur striped EXIF data. Very useful for posting semi-anonymous pictures.

Is that standard, or a feature?


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: nightengale on June 20, 2013, 11:39:16 PM
To my knowledge, it is enabled by default in iOS devices; I'm not sure about Android.

Depending on the app that is used to send a photo, it may be stripped of EXIF data, or it may not be.

Some point-and-shoot cameras are also GPS enabled and will embed geolocation data.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Gomeler on June 20, 2013, 11:40:50 PM
imgur striped EXIF data. Very useful for posting semi-anonymous pictures.

Is that standard, or a feature?

I believe EXIF stripping has been set by default for a while now. Can't provide a source, just remember a discussion on this on Reddit.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: whitefeather on June 21, 2013, 12:32:14 AM
I'm sure a lot of you out there are aware of this, but for those who haven't thought of it...

Don't forget that if you use your phone to take a picture and show off your new miner, or of a rig that you're posting for sale, the photo may have embedded geolocation data that tells everyone exactly where it was taken... Thus enabling miscreants to come take your stuff.

+1

A while back I was browsing pictures of people's rigs on this forum and some pictures have exactly what you are talking about. I believe most of those pictures with the geo data on EXIF were taken by iPhones. At the time, I was curious to see how a BFL FPGA was running at a certain fast firmware given that the person lived in a rather hot and humid place. I can easily see how a criminal can exploit this type of information to zero in on a device to steal it.



Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: J35st3r on June 21, 2013, 07:58:07 AM
I suppose a crude way of striping EXIF would be to take a screen shot (ALT-PrintScreen) of the image, paste it into MSPaint, crop it and save it again. (I did say crude, but if you're in a hurry...)


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: PaperClip on June 21, 2013, 03:15:18 PM
I suppose a crude way of striping EXIF would be to take a screen shot (ALT-PrintScreen) of the image, paste it into MSPaint, crop it and save it again. (I did say crude, but if you're in a hurry...)
This is most secure way :)
Or just open image in Paint, save as BMP (it does not allows to include EXIF data in file), open bmp, save it as JPG


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bitcoinorama on June 21, 2013, 03:17:46 PM
Can you not just disable the function in the iPhone settings??


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: braindead on June 21, 2013, 03:56:02 PM
Can you not just disable the function in the iPhone settings??


Yes u can , u just need to disable location on the settings menu   :D  almost every person forgot about this little detail, not only pictures but everything u make on the web sends your location


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bitcoinorama on June 21, 2013, 03:58:03 PM
Can you not just disable the function in the iPhone settings??


Yes u can , u just need to disable location on the settings menu   :D  almost every person forgot about this little detail, not only pictures but everything u make on the web sends your location

You configure per app though, from what I'm looking at, there's a location option under 'privacy' in the main settings window. I was looking under each app before...

This is correct, right?


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: TheSwede75 on June 21, 2013, 05:28:25 PM
1. Embed fake exit data in 100 Avalon photos pointing to the same location
2. Post sale threads with inflated prices
3. Wait at exit location with baseball bat
4. . . . :)
5. profit


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: pixl8tr on June 21, 2013, 05:32:13 PM
1. Embed fake exit data in 100 Avalon photos pointing to the same location
2. Post sale threads with inflated prices
3. Wait at exit location with baseball bat
4. . . . :)
5. profit

I would wait there with my sidearm, they break into my place, goodbye thief.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: braindead on June 21, 2013, 06:31:26 PM
Can you not just disable the function in the iPhone settings??


Yes u can , u just need to disable location on the settings menu   :D  almost every person forgot about this little detail, not only pictures but everything u make on the web sends your location

You configure per app though, from what I'm looking at, there's a location option under 'privacy' in the main settings window. I was looking under each app before...

This is correct, right?


Well i wouldn´t trust on that ... but yes that option is there for that matter


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bogart on June 21, 2013, 06:37:16 PM
I was just wanting a link to the story, nothing more... I have no idea what you're talking about

https://bitcointalk.org/index.php?topic=239450.msg2537611


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Bitcoinorama on June 21, 2013, 07:30:12 PM
I was just wanting a link to the story, nothing more... I have no idea what you're talking about

https://bitcointalk.org/index.php?topic=239450.msg2537611

I think there is more to that story personally.

The guy put his entire life online.

Sold a Porsche for BTC300

Appeared in loads of mainstream press and boasted a lot about his Bitcoin wealth.

Is easily found on Twitter and other social networks.

Has made no effort to hide himself or his whereabouts online, including address.

I know it's not cool, but he practically invited it...

There was a post in a previous thread, he has started more than one of these bounty threads and another forum member, replied 'is that you?'... And just threw up everything about the guy, his name, address, family details, sh*t loads of press, interviews, articles in this forum where he's been gloating. He was the epitome of how to get robbed.


Title: Re: PSA: ASIC Theft & EXIF Geolocation Data
Post by: Gordon Bleu on June 21, 2013, 07:43:22 PM
but a lot are aware of that Problem or just lucky,  they are mostly removed today
but me too if i like what i see i want to know where it is