ΕΕΛΛΑΚ - Λίστες Ταχυδρομείου

paper: Privacy Threats through Ultrasonic Side Channels on Mobile Devices

  • Subject: paper: Privacy Threats through Ultrasonic Side Channels on Mobile Devices
  • From: "Theodoros G. Karounos" <karounos [ at ] eellak [ dot ] gr>
  • Date: Thu, 4 May 2017 19:32:15 +0300
Fyi...



Begin forwarded message:

*From:* Richard Forno <rforno [ at ] infowarrior [ dot ] org>
*Date:* May 4, 2017 at 11:08:54 AM EDT
*To:* Infowarrior List <infowarrior [ at ] attrition [ dot ] org>
*Cc:* Dave Farber <dave [ at ] farber [ dot ] net>
*Subject:* *paper: Privacy Threats through Ultrasonic Side Channels on
Mobile Devices*


Privacy Threats through Ultrasonic Side Channels on Mobile Devices

Daniel Arp, Erwin Quiring, Christian Wressnegger and Konrad Rieck

Technische Universita ̈t Braunschweig Brunswick, Germany

Abstract—Device tracking is a serious threat to the privacy of users, as it
enables spying on their habits and activities. A recent practice embeds
ultrasonic beacons in audio and tracks them using the microphone of mobile
devices. This side channel allows an adversary to identify a user’s current
location, spy on her TV viewing habits or link together her different
mobile devices. In this paper, we explore the capabilities, the current
prevalence and technical limitations of this new tracking tech- nique based
on three commercial tracking solutions. To this end, we develop detection
approaches for ultrasonic beacons and Android applications capable of
processing these. Our findings confirm our privacy concerns: We spot
ultrasonic beacons in various web media content and detect signals in 4 of
35 stores in two European cities that are used for location tracking. While
we do not find ultrasonic beacons in TV streams from 7 countries, we spot
234 Android applications that are constantly listening for ultrasonic
beacons in the background without the user’s knowledge.

< - >

http://christian.wressnegger.info/content/projects/
sidechannels/2017-eurosp.pdf
 
----
Λαμβάνετε αυτό το μήνυμα απο την λίστα: Λίστα αλληλογραφίας της ομάδας εργασίας της ΕΕΛ/ΛΑΚ για την Ασφάλεια Πληροφοριακών Συστημάτων και Προστασία Προσωπικών Δεδομένων,
https://lists.ellak.gr/wg-privacy/listinfo.html

Μπορείτε να απεγγραφείτε από τη λίστα στέλνοντας κενό μήνυμα ηλ. ταχυδρομείου στη διεύθυνση <wg-privacy+unsubscribe [ at ] ellak [ dot ] gr>.