Avast WEBforum
Other => General Topics => Topic started by: fredvries on August 12, 2010, 11:22:49 AM
-
Geolocation is a rather secret feature of some programs (browsers and toolbars) and smart phones. It allows the creator of that program to get a fix on the location of your computer to within a few meters of where you actually live. For the potential dangers read the article from BBC News entitled 'Web attack knows where you live' here (http://www.bbc.co.uk/news/technology-10850875).
The question is therefore how to effectively disable this feature. At this moment my little weblog offers solutions for
• Programs: Apple Safari, Firefox, Flock, Google Chrome, Google Toolbar, Opera and Twitter.
• Phones: Apple iPhone, Blackberry, Google Nexus One, Motorola Droid and Palm Pre
More info here (http://no-geolocation.blogspot.com).
-
Update of my list of programs/phones that use geolocation.
Added:
Disabling of geolocation/GPS for Blackberry.
See here (http://no-geolocation.blogspot.com).
-
I have already disabled it in Firefox
Nice read!
-
I have already disabled it in Firefox
Nice read!
+1
-
Hi fredvries,
Thanks for your contribution.
You know I support your initiative to inform us about this,
A new site in Holland points out the danger of services that use geolocation like Foursquare.
Did it ever cross your mind that all that you publish on the Internet about yourself can also be read by criminals, and when a service like mentioned tells you are there and there, the criminals know you are not at home for instance. So run a script on the site like Foursquare to see when someone is updating to tell them where they are is enough. The warning script was put up by some folks (Barry Borsboom, Frank Groeneveld, Boy van Amstel) that made such a script, they use it for ad-launching and to point out the dangers of geolocation to common users of social sites. When they can do this, cybercriminals can do this as well,
your forum friend,
polonus
-
Hi malware fighters,
Well you can test if you are lucky enough that Google does not have your geo-location yet:
http://foss-boss.blogspot.com/2010/08/bash-oneliner-get-gps-location-street.html
/bin/echo '{"version": "1.1.0","host": "maps.google.com","request_address": true,"address_language": "en_GB", "wifi_towers": [{"mac_address": "' $( iwlist wlan0 scan | grep Address | head -1 | awk '{print $5}' | sed -e 's/ //g' ) '","signal_strength": 8,"age": 0}]}' | sed -e 's/" /"/' -e 's/ "/"/g' > /tmp/post.$$ && curl -X POST -d @/tmp/post.$$ http://www.google.com/loc/json | sed -e 's/{/\n/g' -e 's/,/\n/g'
more info even with
wget -q --post-data="`/bin/echo-n "{\"version\": \"1.1.0\",\"host\": \"maps.google.com\",\"request_address\": true,\"address_language\": \"en_GB\", \"wifi_towers\": [`iwlist scan 2> /dev/null | tr -d '\n' | sed -e 's/Cell [0-9]* - Address: \([0-9A-Z:]*\)[^C]*Channel:\([0-9]*\)[^S]*Signal level=\([0-9-]*\) dBm[^E]*E[^E]*ESSID:"\([^"]*\)"/\{"mac_address": "\1","signal_strength": \3,"age": 0,"channel": \2,"ssid": "\4"}/g' -e 's/[^{]*{/{/' -e 's/}[^{]*{/},{/g' -e 's/\}[^}]*$/\}/' `]}" | curl -s -X POST -d @/dev/fd/0 http://www.google.com/loc/json
Then start getting worried, or look here: http://www.mygeoposition.com/
polonus
-
according to your link Polonus, I'm supposed to be based in London ??? ;D
( http://www.mygeoposition.com/ )
-
Interesting ... it shows exactly the same position for me. London, Ont., is about 3000 miles closer, but even that's about 70 miles down the road from here.
-
Hi Logos,
Well it is in the EU anyway, so what does it matter?
With me they came no further as to pinpoint to Amsterdam, so I never got out of the ISP server location.
But let us stay on topic. The geo-location issue is more of a problem for mobile applications and as you could have read from the link I gave not so much for users on Static IP via cable/adsl etc. The whole discussion started when the Google van came to the streets, and earlier when GPS could trace mobile phone users with an accuracy of a couple of square inches of where you have the gadget. In densely populated areas with a lot of antennas (cover) and transmission transport the problems are felt more. I think people do not care mainly because they haven't tried to visualize it, when you do that you see the beams to trace you come from everywhere. You have a chip in your passport, they can trace it, you have a chip in the shirt you bought somewhere, you can trace that, you have a chip in a book you bought, they can trace it, you have a chip in your packet of cereals, they trace it etc. etc. and also the combination of all that tracking gives the herders of man an immense data load enough really to quite likely predict your habits to profit from that greatly, so the problem is geo-location combined with a lot of issues - the transparent citizen...1984BB revisited in 2010...
And for the second thing you two observed...
Well there are preferred router routes taken, so akamai servers may re-route you not directly as you would expect but route your packets via a preferred data transmission support route, and then you go via Amsterdam, or Frankfurt, London is also a possibility for you (thanks to the Akamai boys, there they have to rethink geo-location a bit), well anyway the logging will be rather profound. What is also interesting to couple is the last refresh date of the page of the blogger combined with other data, run from a script or bookmarklet (The server indicates that the page here was last modified: 08/13/2010 22:56:17 as of the moment that I write this posting for this forum.avast.com page)
polonus
-
Hi Logos,
Well it is in the EU anyway, so what does it matter?
polonus
hi,
you're kidding :D that means that somehow from that site the geo location is broken. There are other places on the web that do a more precise job than that, like get you a result that's a few km away from where you actually live (somewhere around your ISP's nearest server).
edit: not mentioning that for Mike, the location was the same as mine, and he lives in Canada :D It's just not operational on that site.
-
Hi Logos,
No, that is not the case. With you and with Mike the packets were routed via London, when this is done by support services where they send the animal in slices, you may have to wait longer depending on your location for the complete sausage to be delivered. It is just as it is done by the big data stream handler, see: a92-122-217-73.deploy.akamaitechnologies.com
Researches at Carnegie Mellon University and MIT are working on a new algorithm that is designed to route internet traffic to areas where the cost of energy is lower. This move could possibly save millions of dollars that would normally be spent on massive energy bills. Review, the algorithm is capable of calculating the best way to route internet traffic based on the expense of routing traffic further as opposed to how much money would be saved based on ..and there you could fill in a couple of ideas...
Damian
-
Hi malware fighters,
To make out a well balanced debate we should also hear those that think there is nothing than good coming from geo-location, so for all that benefits you have not thought of read here: http://thesocialcustomer.com/maxgladwell/28012/10-ways-geolocation-changing-world
And for those optimists that always see the glass half full, here is to simple it up: http://simplegeo.com/
I found one issue a bit troubling SimpleGeo and SiteContent: http://simplegeo.com/page/terms-of-service.html
and there you see geo-location could be used to trace content, so content right bounty hunters could come up with settlement offers in case you used something on your blog that was an infringement, they lean back and see the cash flow coming in, Acta laws will give them the legal framework... benefit for you the user, I think not...
polonus
-
to make things clear, I for one am not particularly fond of geolocation, but as said and described already it's very easy to dismiss it through about:config in Firefox or more simply in the options in Chrome. Again, whenever there's a way to use technology to make money, it will be used extensively, and there's nothing to prevent commercial companies from doing that. People there are working to make money. Doesn't mean that you have to allow them to trap you of course, but here, it's so easy to block them that I'm wondering what was the need of starting a second thread on the same topic. I know, the other one was also about GPS. Never mind, I just think there's absolutely no need to be alarmist, that's all.
-
Thank you. I have disabled it in Firefox and Chrome, but when I type about:config in Firefox, the warning says it may void my warranty, what's up with that?
-
It's also showing me in London. ???
-
Wow, I just went on a mini vacation to London by following your link Damien. Thanks. :) ;D
Consider this post as coming from one of those who likes GPS or, Geo Location. Google did an excellent job.
The fact that others have taken this technology down a darker road, doesn't change the great achievement.
-
Geolocation is a rather secret feature of some programs (browsers and toolbars) and smart phones. It allows the creator of that program to get a fix on the location of your computer to within a few meters of where you actually live. For the potential dangers read the article from BBC News entitled 'Web attack knows where you live' here (http://www.bbc.co.uk/news/technology-10850875).
The question is therefore how to effectively disable this feature. At this moment my little weblog offers solutions for
• Programs: Apple Safari, Firefox, Flock, Google Chrome, Google Toolbar, Opera and Twitter.
• Phones: Apple iPhone, Blackberry and Google Nexus One.
More info here (http://no-geolocation.blogspot.com).
With my Motorola Droid, there is a clear option to turn off GPS in the system settings. I assume there's a similar option with other smart phones (?).
Personally, I travel quite a bit, and I've used my phone for everything from turn by turn directions, to finding restaurants, etc. It's also nice to know that authorities could find me in an emergency (though as others have pointed out, I also have found, that exact positioning leaves a bit to be desired - especially if I were lying in a ditch in a wrecked car).
Agreeing with Bob, I find the feature of great value that I use often, rather than a violation of my privacy.
(However, of course, if I we're fleeing a bank I just robbed, I'd probably feel a little threatened by the GPS function on my phone...)
-
just wanted to add, without naming anyone, when you spend more time protecting your system than using it, there's a problem somewhere ??? extreme and systematic protection of every single move, in the context of malware research, is one thing. On a daily basis it makes no sense, it's like running CIS Def+ in "paranoid mode" and get alerted about every single move and click that you do. Unless you're into malware research or the CIA is after you, it makes no sense ::)
-
Update of my list of programs/phones that use geolocation.
Added:
Disabling of geolocation/GPS for Motorola Droid.
See here (http://no-geolocation.blogspot.com).
-
Update of my list of programs/phones that use geolocation.
Added:
Disabling of geolocation/GPS for Palm Pre.
See here (http://no-geolocation.blogspot.com).
-
Hi fredvries,
this might interest you...
http://forum.avast.com/index.php?topic=52252.msg531194#msg531194
asyn
-
Hi Asyn,
Added your info on the weblog.
Fred
-
Hi :)
Fredvries will you add updates for Flock browser ver 2.6.1. Thx
-
+1
Damian aka polonus
-
@JuninhoSlo
Sure. But is the solution for disabling geolocation in Flock 2.6.1 really different from the last version?
-
Done.
;D
-
facebook is implementing it too:
http://www.theregister.co.uk/2010/08/19/facebook_places1/
takes a sec to deactivate in FB privacy settings >>> customize your settings and go to "places I check in", set to only me. Now if you think you need the feature, leave it on, but in the particular case of Facebook I wouldn't advise it. Feature is present on mobile phone versions of Facebook too, so watch out ;)
-
@ Logos. Thanx
Update of my list of programs/phones that use geolocation.
Added:
Disabling of geolocation/GPS for Facebook.
Can someone check if my solution works?
See [urlno-geolocation.blogspot.com]here[/url].
-
Hi malware fighters,
Check at this location finder, it is much more accurate: http://www.enbecom.net/geolocation/
I am near Rotterdam and they got me roughly at Gorinchem (25 km range), it is not my exact geo-location!
polonus
-
Hi malware fighters,
Geo-location became more problematic when social web browsing came in: http://www.techradar.com/news/world-of-tech/location-aware-websites-scare-us-silly-676285?src=rss&attr=all
There are so many mainly young users that entrusted so much information to these online services that in order to not get troubled by their Internet past they'd better had change their names, as Google's Eric Schmidt has warned - link:
http://www.dailymail.co.uk/sciencetech/article-1304004/Google-says-Facebook-users-change-names-escape-cyber-past.html
So geo-location means an added thread to the unaware, dumbed down user that takes facebook for his confident, Dusty Springfield already sang about this on the Reputation album entitled "In Private": http://www.youtube.com/watch?v=k1z5DZEse3I
polonus
-
***
Seems to work like I would want it to work. :)
Hi malware fighters,
Check at this location finder, it is much more accurate: http://www.enbecom.net/geolocation/
I am near Rotterdam and they got me roughly at Gorinchem (25 km range), it is not my exact geo-location!
polonus
Click the image below to see where I am not located. ;)
***
-
Hi CharleyO,
Thank your Service Provider for that,
polonus
PS with NS and RP active, they cannot get me either,
D
-
Hi malware fighters,
Check at this location finder, it is much more accurate: http://www.enbecom.net/geolocation/
I am near Rotterdam and they got me roughly at Gorinchem (25 km range), it is not my exact geo-location!
polonus
It could not find meWe could not work out where you are - sorry! This is usually because the IP address you are using right now cannot be mapped to a location.
;)
-
Hi malware fighters,
Check at this location finder, it is much more accurate: http://www.enbecom.net/geolocation/
I am near Rotterdam and they got me roughly at Gorinchem (25 km range), it is not my exact geo-location!
polonus
Interesting, they got me pretty close too, "somewhere near" Cambridge Ont. which is just about the same distance from me as you'd noted. Actually it might even be dead-on, since I don't know where my ISP's servers are physically located.
Even more interesting, this was with the geo thing in Firefox disabled, per the directions in an earlier post-and-link.
-
For me it was fairly close using Chrome (within 50 miles)
In Firefox it was right on the money once I allowed it to use Geo Location.
-
Hi malware fighters,
Check the geolocation support of your particular browser here: http://www.browserscope.org/alltests
Security:
1. PASS postMessage API
2. FAIL JSON.parse API
3. PASS toStaticHTML API
4. PASS httpOnly cookie API
5. PASS X-Frame-Options
6. PASS X-Content-Type-Options
7. FAIL Block reflected XSS
8. PASS Block location spoofing
9. FAIL Block JSON hijacking
10. PASS Block XSS in CSS
11. FAIL Sandbox attribute
12. FAIL Origin header
13. FAIL Strict Transport Security
14. FAIL Block cross-origin CSS attacks
15. FAIL Cross Origin Resource Sharing
16. FAIL Block visited link sniffing (with all tests NS and RP disabled)
And do the test here: http://benwerd.com/lab/geo.php
Result for me: This is provided for:
* Privacy-conscious web users, so you know exactly the kind of geo-data your browser is reporting to web applications that request it
* Developers (the code for this page is public domain)
Your browser does not support geolocation. and polonus says OK
polonus
-
And do the test here: http://benwerd.com/lab/geo.php
Result for me: This is provided for:
* Privacy-conscious web users, so you know exactly the kind of geo-data your browser is reporting to web applications that request it
* Developers (the code for this page is public domain)
Your browser does not support geolocation. and polonus says OK
Yawn! ::)
Browser geolocation test
If your browser supports HTML 5's geolocation functionality, and you allow this page to have access to your location, a breakdown of the data provided will be displayed below.
This is provided for:
Privacy-conscious web users, so you know exactly the kind of geo-data your browser is reporting to web applications that request it
Developers (the code for this page is public domain)
Your browser does not support geolocation
-
Hi :)
Fredvries will you change your settings for Flock browser 2.6.1 . The best way is:-about:config-New-Boolean(geo.enabled)-False. or Documents and Settings-your name-AppData-Flock-Browser-Profiles-ml2mlzak.default-prefs and paste this in scrapbook user_pref("geo.enabled", false);
Thx and have a nice day :) Lep dan
-
@JuninhoSlo
Thanks for mentioning this to me.
I've now added Flock 3.0 (based on Google Chrome) next to Flock 2.6 (based on Mozilla Firefox). I will check your solution very soon and adapt the page if needed.
Fred
-
Hi readers of this thread,
Here an example where such a service can be used for more information awareness:
http://greatmap.blogspot.com/ mainly for mapping knowledge domains.
Just like a hammer can be used to either sculpt or utterly ruin, geo-location can also be used for good and bad.
But I agree the use should always be optional (opt-out given at once) and not have an opt-out offered to you,
after you have been sufficiently mapped,
polonus
-
Update of my list of programs/phones that use geolocation.
Updated:
Disabling of geolocation/GPS for Flock. Solution now reflects Flock's change from Firefox to Chrome.
See here (http://no-geolocation.blogspot.com).
@JuninhoSlo: You were right! Thanks.
-
Update of my list of programs/phones that use geolocation.
Added:
• A new section '[04] How to Opt-Out of Apple's Geolocation Aware Ads'
See here (http://no-geolocation.blogspot.com).
-
Hi fredvries,
In the States facebook will enroll their location sharing service "places", to show others the place where you are.
It does not surprise as the new Web 2.0 generation will have a complete different view on anonimity or better said the total lack thereof,
Damian
-
found a new one >>> big brother(s) can't be stopped :o
GSM mobile phone tracking system via the GPS-TRACK satellite network
http://www.themobiletracker.com/english/index.html
-
@ Logos.
Strangely it's both funny and scary.
-
Update of my list of programs/phones that use geolocation.
Updated:
Disabling of geolocation/GPS for Samsung Galaxy. Solution now reflects Flock's change from Firefox to Chrome.
See here (http://no-geolocation.blogspot.com).
-
found a new one >>> big brother(s) can't be stopped :o
GSM mobile phone tracking system via the GPS-TRACK satellite network
http://www.themobiletracker.com/english/index.html
it's pretty old but is still a great gps track satellite network
-
found a new one >>> big brother(s) can't be stopped :o
GSM mobile phone tracking system via the GPS-TRACK satellite network
http://www.themobiletracker.com/english/index.html
it's pretty old but is still a great gps track satellite network
yeah, someone told me already that it was old, but I just found it, really operational, it just works.
-
Hi Logos,
The site you come up with has a bad reputation at WOT's, Site Advisor:
McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution.
Some say the site is a JOKE, some say it is a phishing site,
This site requests email and name and then pretends to do a search. Then admits its a spoof. Do not use this site,
Finjan secure browsing has no problem with it,
polonus
-
Hi Logos,
The site you come up with has a bad reputation at WOT's, Site Advisor:
McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution.
Some say the site is a JOKE, some say it is a phishing site,
This site requests email and name and then pretends to do a search. Then admits its a spoof. Do not use this site,
Finjan secure browsing has no problem with it,
polonus
hi,
yeah okay I didn't check the main point is a joke, that you can't just like that track a cell phone unless you're granted access through special administration privilege, cops or else. Where did you see the option to enter an email address? I just entered a random cell phone number and went through the whole processing joke ;D
edit: yeah, the option to enter an email address appears once the joke process has ended, in order to send it to a friend. Honestly, hundreds of online sites use this method, including main medias, and as a rule I never use their mail interface ;)
-
Hi Logos,
The site you come up with has a bad reputation at WOT's, Site Advisor:
McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution.
Some say the site is a JOKE, some say it is a phishing site,
This site requests email and name and then pretends to do a search. Then admits its a spoof. Do not use this site,
Finjan secure browsing has no problem with it,
polonus
I personally would trust Finjan before I put any trust into the WOT ratings. >:(
-
yeah I agree definitely WOT is a joke...I got it as part of an add-on in Chrome, and I turned it off. It's really useless, based on users' reports, meaning that it depends on whether anyone bothered or didn't bother to report anything. WOT just doesn't lead to anything that can be interpreted as conclusive.
-
yeah I agree definitely WOT is a joke...I got it as part of an add-on in Chrome, and I turned it off. It's really useless, based on users' reports, meaning that it depends on whether anyone bothered or didn't bother to report anything. WOT just doesn't lead to anything that can be interpreted as conclusive.
+1
Did you come back home? ;D
-
Did you come back home? ;D
yes ;D ...landed a few minutes ago, nice to post "normally" again, had to send messages in Morse to a friend when I was there, he was then posting for me here :)
-
Hi Logos,
First my apologies to fredvries. We do not want to go off-topic in his thread again, will we?. Well blame that link, we won't do it again. But as the issue popped up I address it here.
Then we return to good old geo-location, it is with us quite some time now since UMTS, because the last word has not been said about this subject and more and more aspects of this technique are brought in. Thinking of the fact that two major grocery chains in Holland are starting an experiment to ban normal currency altogether in 2011 (they will have one little point only where customers need not pay with a bank card and you can use normal currency, later this will also go) combined with geo-location tells me all developments are being brought in faster than I thought.
For conclusive link checking I also use: http://www.m86security.com/resources/url-analysis.asp (former finjan url checker)
It is also good to operate WOT and finjan alongside each other to see the discrepancies there.
Sometimes I have a look at jsunpack (for experts only, mind you let NoScript run all the time and RequestPolicy) and look up redirects in the malzilla browser (not for the meek either). WepaWet and the VT Scan current site add-on also is an option.
I had the DrWeb url checker as a browser add-on, but it does not scan deep enough and misses out a lot
It is a pity Scandoo has left us, it never returned as a free browser tool. Who acquired it? I think it is now commercialized as SearchAhead,
I do not use SiteAdvisor since it was acquired by McAfee.
Also use URLVoid and unmasked parasites or google diagnostics: http://www.google.com/safebrowsing/diagnostic?site=
are rather good, and this is as reliable as the sites scanned and the database: https://safeweb.norton.com/report/show?url=x&x=16&y=10
But there still is an enormous amount of suspicious pages that will go under the radar anyway, re:
http://www.net-security.org/secworld.php?id=8956
Hope to catch them using the best scanner there is, called C.S. (Common Sense) ;D
Do not be paranoid, you do not need these browser rear windows, if you toggle NoScript and RequestPolicy and trust the avast shields, more protection, not necessary. The rest of the info is only good "after the fact" or as a general surfing guide and compass,
pol
-
is Geolocation in Internet Explorer? ???
-
Internet Explorer does not have a geolocation feature (yet).
But IE7 has geolocation support via Google gears
Read backgrounds here: http://en.wikipedia.org/wiki/W3C_Geolocation_API
The location is returned with a given accuracy depending on the best location information source available.
Geolocation is a Google driven issue: and is heavily influenced by Google Gears Geolocation API. In fact, Firefox’s Geolocation implementation[5] uses Google’s network location provider[6].
Google has sponsored the Mozilla browsers and of course wants something in return to be able to better profile you according to location, and then they think to freely use a Dutch proverb "Who has the young on their side, owns the future?
Re: http://www.kidsgeo.com/geography-for-kids/0016-plotting-your-location.php
polonus
-
Update of my list of programs/phones that use geolocation.
Updated:
• Disabling of geolocation/GPS for Firefox.
See here (http://no-geolocation.blogspot.com).
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for HTC Desire and HTC Wildfire.
See here (http://no-geolocation.blogspot.com).
-
Updated:
• Disabling of geolocation/GPS for Firefox.
Do you have some background info on ‘geo.wifi.uri’...??
Please share..!!
asyn
-
A nice write-up can be read here (http://dougt.org/wordpress/2009/04/geolocation-in-firefox-3-5-and-fennec/).
The part that may interest us all is:
'...The URL is configurable by preferences (“geo.wifi.uri”). The data sent includes a version number, access token, and an array of public WiFi access points data. The access token basically acts like a two week cookie, and if you clear cookies in the browser, this value is deleted and a new one is used.'
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for Dell Aero.
See here (http://no-geolocation.blogspot.com).
-
Hi malware fighters.
Tested here: http://browserspy.dk/geolocation.php
Geolocation supported in browser? No. The navigator.geolocation object is not available
Another online test for this feature: http://www.tothepc.com/archives/check-geolocation-feature-of-browser-online/
Interesting to read: http://www.xconomy.com/boston/2009/07/10/the-browser-geolocation-wars-skyhooks-ceo-on-why-google-maps-is-misreading-your-location/
polonus
-
Hi malware fighters.
Tested here: http://browserspy.dk/geolocation.php
I seeNo. The navigator.geolocation object is not available
It did know I am in Canada but it is a big place.
Geolocation supported in browser?
Another online test for this feature: http://www.tothepc.com/archives/check-geolocation-feature-of-browser-online/
I see Your browser does not support geolocation.
I do not use Firefox.
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for Mozilla Thunderbird.
See here (http://no-geolocation.blogspot.com).
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for Sony Ericsson Xperia X10.
See here (http://no-geolocation.blogspot.com).
-
Hi fredvries,
For those amongst us that want to test their geo-location:
http://api.hostip.info/?ip=75.125.29.226 (URL of this webforum site), you get to this info:
look-up 122.264,38.1075 or (122.264000 38.107500) Houston, Texas, USA
Then look up here: http://msrmaps.com/advfind.aspx?panel=Decimal
polonus
-
Hi fredvries,
How to disable this for GMail? Scary news, that was published on Mar 25 2010. Read: Google has added some rudimentary geolocation technology to thwart Gmail hackers.
Pavni Diwanji, engineering director at Google, blogged that your Gmail account will automatically notify you if there's any suspicious activity.
"To determine when to display this message, our automated system matches the relevant IP address, logged per the Gmail privacy policy, to a broad geographical location," said Diwanji.
Gmail will try to resolve the IP address of potential hackers to a geographic location and present a log-in history. If there is something funny going on, Google will post a warning and a geographic estimation of where the hack is from. Users can then change their log-in details.
The technology doesn't have the power to determine exactly where you're being hacked from and Google says it should not be used a replacement for sensible practice.
"While we don't have the capability to determine the specific location from which an account is accessed, a login appearing to come from one country and occurring a few hours after a login from another country may trigger an alert. Keep in mind that these notifications are meant to alert you of suspicious activity but are not a replacement for account security best practices," it said.
This feature is being road tested in Gmail but Google wants to roll it out on Google Apps, too.
It is to be expected that the pin-pointing will be much more accurate and what if one then is being accused falsely of hacking and the hack was a result via another malcreant or malware on the machine that was logged for such activity. Scary indeed,
Quote added by me, Polonus...
polonus
-
hello Polonus,
click details in Gmail (bottom of the page)... it's been there for quite a while, very convenient to close old sessions and see from where they originated (IP), just in case your account would have been hacked, you'd know it straight away. There's nothing to say against that, and I honestly don't think that Google spends money on paying employees to watch the behavior or 175 000 000 Gmail users, they have other things to do.
It's the same old story again and again, people keeping ignoring that unless a judge has ordered it, your online data won't be scrutinized. I mean seriously people, anyone here has an idea how much it would cost in time wasted and money to track a few millions Joe Smith emailing another few millions Melinda Smith to tell them that they won't forget to buy milk for the kids? ;D
-
Hi Logos.
OK. I follow you. But there are a lot of crazy IT people walking in this place under the moon. Just imagine a scan seems to come from your local IP, but it was actually wrought by malware. The jittery G33k IT man informs your local provider and you are being mailed and noticed for abuse. I would know what to do in reply, but what about the digital illiterate, they could scare them to well ye know where? All technology that is being brought in could be abused "in between noticing the milkman and going to the hairdresser's" ;D
The above mentioned scenario happened in real life, I can assure you, and after such an incident American web masters will just block your whole IP range (everything works on their nerves, and they won't take half measures) and many have to suffer for the abuse of some/one, and when you want to go there, you see a message "Go from here to kindergarten and enjoy this simple online game (link provided) and do not sweep scan us anymore or you get the message "You are stalloned, you robot" with accompanying image of this known muscle man!",
polonus
-
Damien,
Not all of us see a glass as half empty. Some of us see it as half full.
There isn't always a boogie man under every rock or around each dark corner. ;) ;D
-
How to disable rudimentary geolocation in GMail.
• Scroll down on your GMail page until your reach 'Last account activity: 0 minutes ago on this computer. Details'
• Hit 'Details'
• Scroll down
• Check 'Never show an alert for unusual activity'
-
How to disable rudimentary geolocation in GMail.
• Scroll down on your GMail page until your reach 'Last account activity: 0 minutes ago on this computer. Details'
• Hit 'Details'
• Scroll down
• Check 'Never show an alert for unusual activity'
as said in my last post here I don't advise at all to disable that, because again, it's the only way to find out if someone else could access your account, and from where. I mean this is a security meant to secure your account, not to allow Google to track you...but I'm not going to explain it again ::)
edit: not mentioning that any web site (even without login in btw) has your IP guys...and this should include Google ;D >>> meaning that this "details" view is just an interface for the users, showing IPs and clients accessing your account. Turning it off won't stop the server from recording your IP :D
-
Damien,
Not all of us see a glass as half empty. Some of us see it as half full.
There isn't always a boogie man under every rock or around each dark corner. ;) ;D
+1
Imagine going through life thinking everyone is after you. Must be really hard.
How to disable rudimentary geolocation in GMail.
• Scroll down on your GMail page until your reach 'Last account activity: 0 minutes ago on this computer. Details'
• Hit 'Details'
• Scroll down
• Check 'Never show an alert for unusual activity'
as said in my last post here I don't advise at all to disable that, because again, it's the only way to find out if someone else could access your account, and from where. I mean this is a security meant to secure your account, not to allow Google to track you...but I'm not going to explain it again ::)
edit: not mentioning that any web site (even without login in btw) has your IP guys...and this should include Google ;D >>> meaning that this "details" view is just an interface for the users, showing IPs and clients accessing your account. Turning it off won't stop the server from recording your IP :D
+1
-
Hi folks,
Well of course it is not presented by me all that black and white, and fredvries thanks for the way to disable for those that want to do so for whatever reason they come up with. No, I am not a person that see a bogeyman hide around every corner and what I report I hope just stays in the realm of a single incident over a long, long period of time. On the other end I am also of the opinion well not to swallow all they feed you and not given it a second thought about the implications and possible abuse, and repeat like others "When they say so, it is good for you." Users have their own responsibility and should question things before making up their own minds and that has nothing to do with over-reacting, it is just about not taking everything for granted. Somehow people just follow like sheep. When it is OK, it is OK, when not, better be aware. Does not the Bible say: "But examine everything carefully; hold fast to that which is good;" also given as "But examine everything carefully; hold fast to that which is good; what was spoken they must put to the test",
polonus
-
@ polonus
Not every one wants to use Use NoScript, a limited user account and a virtual machine and be safe(r)!
Not everyone is a Lemming like you want to us believe.
If you want to quote the Bible then there are many quotes that can apply God Is Our Strength - Not Trusting In Our Own Strength
Exodus 15:2
The LORD is my strength and my song; he has become my salvation. He is my God, and I will praise him, my father's God, and I will exalt him.
Deuteronomy 4:37
Because he loved your forefathers and chose their descendants after them, he brought you out of Egypt by his Presence and his great strength,
Deuteronomy 6:5
Love the LORD your God with all your heart and with all your soul and with all your strength.
Deuteronomy 11:8
Observe therefore all the commands I am giving you today, so that you may have the strength to go in and take over the land that you are crossing the Jordan to possess,
http://encouragingbiblequotes.com/versesstrengtha.html
-
Hi YoKenny,
I have no reference to the beliefs of lemmings, I am a human being, furthermore I have never felt the urge of lemmings. If this is a humorous remark I say I cannot share your sense of humor, if you put this comment here in earnest I better fail to comment,
polonus
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for HTC Aria (AT&T)/Evo (Sprint).
See here (http://no-geolocation.blogspot.com).
-
Hi malware fighters,
Thanks to fredvries here for all the effort and expertise he has put in this here thread. There are a couple of things I like to explain to those that maybe did not completely have grasped what I tried to communicate in my previous observations concerning these issues. I have no objections against the geo-location service and technology as such. As all other things in the world it can be used towards good beneficial purposes and may have unwanted side-effects as well. I do not want to comment that. What I want to say is that we have to see where it might lead us all. I like services and applications that always have an opt-out, where there is always the possibility to disable it.
And this is just around the corner as is explained with Instant Automatic Search based on Physical Location:
http://www.readwriteweb.com/archives/google_ceo_next_great_stage_of_search_is_automatic.php
Just like with questionnaires on the phone, you can enlist somewhere if you do not want to be bothered in this way and no further like to receive these kind of calls. Silence will reign. Even worse are the scenario's where there is a free service and everybody is being brought on board through mentioning benefits and a lot of propaganda and later alternatives are no longer available and slowly but surely they are going to charge you for the service or alter the terms and conditions.
As fredvries has been so kindly showing us there are a lot of escapes from the technology and ways to opt out, but for the unaware that route isn't all that clear. Some know how to protect their anonymity whenever they need to, others like youngsters on Web 2.0 have to change their names to not longer be bothered by their Internet past to hunt them forever. So what I said is only, be aware, weigh all the arguments for yourself pro and contra and then make up your decision. Do not follow blindly, be aware you have free will. Nothing more and nothing less.
Sometimes there are no alternatives like with cashless banking, when the paperwork goes, new hey days for the phisher and the malcreant. So fredvries, thank you for starting the subject enabling all of us to discuss all the ramifications of the implementation of this technology in depth, I think here specifically of combinations of geo-location with tracking technology like fetchback tracking etc. etc.
polonus
-
Hi forum users,
Another implication of Google's geo-location will concern content access: Of course, many countries (like the US) elected to extend their periods of copyright protection mandated in the Berne Convention. This means that while some nations adhere to the Convention’s minimum standards, there are wild variations in other places. For example, the song “Happy Birthday to You” is ostensibly copyrighted until 2030 in the United States (although that is a point of contention for some), but only until 2016 in the European Union.
This means that while the books Google’s scanning could be public domain in the country they are scanned in, they might not be public domain in the nation that the website is viewed in. By using location-based blocks, which won’t allow access to content in places where it is trademarked, Google can neatly sidestep any copyright infringement lawsuits. They also plan to provide links to purchase the content for viewers who are blocked.
While Google may be on the side of good against insane copyright extensions (95 years for music!), they surely don’t want to continue waging legal battles around the world. This makes it easy for Google to keep pace with the world’s rapidly shifting copyright laws. What the situation will be for the ACTA countries is to be seen. I think a lot of browser users do not know that the clamps are coming down unless you will find the right gates to search, re: http://www.oreillynet.com/pub/h/4807
polonus
-
Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geolocation/GPS for Pale Moon.
See here (http://no-geolocation.blogspot.com).
-
Hi forum users,
Another implication of Google's geo-location will concern content access: Of course, many countries (like the US) elected to extend their periods of copyright protection mandated in the Berne Convention. This means that while some nations adhere to the Convention’s minimum standards, there are wild variations in other places. For example, the song “Happy Birthday to You” is ostensibly copyrighted until 2030 in the United States (although that is a point of contention for some), but only until 2016 in the European Union.
This means that while the books Google’s scanning could be public domain in the country they are scanned in, they might not be public domain in the nation that the website is viewed in. By using location-based blocks, which won’t allow access to content in places where it is trademarked, Google can neatly sidestep any copyright infringement lawsuits. They also plan to provide links to purchase the content for viewers who are blocked.
While Google may be on the side of good against insane copyright extensions (95 years for music!), they surely don’t want to continue waging legal battles around the world. This makes it easy for Google to keep pace with the world’s rapidly shifting copyright laws. What the situation will be for the ACTA countries is to be seen. I think a lot of browser users do not know that the clamps are coming down unless you will find the right gates to search, re: http://www.oreillynet.com/pub/h/4807
polonus
content stolen from here:
http://thenextweb.com/us/2010/02/17/google-locationbased-content-filter-patent/
(edit: if needed...the link given in reference in the quoted post has little or nothing to do with the content of what was copied and pasted from another web site >>> link I gave)
-
Thanks polonus and fredvries.
-
[08oct10] Update of my list of programs/phones that use geolocation.
Added:
• Disabling of geotagging of photos for Apple iPhone.
-
[04mar11] Update of my list of programs/phones that use geolocation.
- Added disabling of geotagging of pictures taken by Blackberry.
The list can be found here (http://no-geolocation.blogspot.com).
-
[06apr11] Update of my list of programs/phones that use geolocation.
- Added disabling of geolocation for LG Phones.
The list can be found here (http://no-geolocation.blogspot.com).
-
[13apr11] Update of my list of programs/phones that use geolocation. Visit the list here (http://no-geolocation.blogspot.com).
- Added disabling of geolocation for Linux versions of Mozilla Firefox and Mozilla Thunderbird
-
Thanks for the list Fred.
-
As I am facing a ban for posting non-avast topics I will stop updating this topic.
Sorry about that.
-
As I am facing a ban for posting non-avast topics I will stop updating this topic.
Sorry about that.
??? ??? ???
-
As I am facing a ban for posting non-avast topics I will stop updating this topic.
Sorry about that.
??? ??? ???
He's having a sulk because his post's about avira were deleted and now he's disheartened and doesn't want to participate on the avast forum anymore and thinks he's going to be banned, he was pm'ing me earlyer about not notifying him about the post's being deleted, He'll get over it ::)
-
Thanks for the explanation. Agree with you on the Avira post.
Fine to post on their forum but doesn't belong here.
-
This was posted in the security forum but also effects updates:
Dropbox authentication: insecure by design
http://dereknewton.com/2011/04/dropbox-authentication-static-host-ids/
Dropbox experiment with update to solve security vulnerability
http://www.h-online.com/security/news/item/Dropbox-experiment-with-update-to-solve-security-vulnerability-1234815.html
yeah I've installed that yesterday, that's a forum build, ie you'll only get the link from their forums ;)
-
hmm... Bob... you're in the "Geolocation > No Geolocation" thread ;)
-
:-[ :-[ :-[ :-[
Blame it on the cr-48 that I'm using. ;D
-
:-[ :-[ :-[ :-[
Blame it on the cr-48 that I'm using. ;D
yeah report that to Google (bastards ;D ) ;)
-
Actually, it's a very sensitive touchpad.
Hover in one place for too long and it's selected. Apparently that's what
happened when I was selecting the forum.