Security Basics mailing list archives

Re: Hacking Pictures?


From: Archangel Amael <archangel.amael () gmail com>
Date: Sat, 22 Jan 2011 02:07:31 +0100

They are likely referring to EXIF (Exchangeable Image File) data. I
will spare the wiki link.
The amount of info that a photo has tacked onto it depends on the
camera really. But it generally ranges from information about the
camera (make and model, F-stop settings) to GPS coordinates at the
time the photo was taken.  There is a lot of information around the
web on extracting, using and or abusing this data. For instance Larry
Pesce from pauldotcom  created one way of showing the potential
dangers. http://icanstalku.com/ There are many tools to work with this
data, even picasa (from google) shows this data along with photos that
are uploaded. As for whether people are aware, in the age of facebook,
it may not matter to many.

Hope that helps.


On Fri, Jan 21, 2011 at 5:42 PM, Steven Bonici <sbonici () ilaonline org> wrote:
I was speaking to someone from DHS (not a tech) and he was telling me
that there are applications that can "look" at a picture taken from a
cell phone and can get the location of where the picture was taken.  Is
this true?  If so, can someone provide more information?  If this can be
done, people posting pictures from their cell phones to social sites
should be aware of this...

Thanks - Steven

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: