5 Apr 2013 Killerbees   » (Journeyer)

Privacy In Public

I'm becoming increasingly disturbed by the possibility of what I call "MAC address stalking", where people could be located if their WiFi is on and if you can associate their phone number with the phone's MAC address. So imagine my horror this week when I saw these instructions for accessing free WiFi in ASDA stores..

Registering for Asda Wi-Fi couldn’t be easier with just a few simple steps:
1. Select Asda Free Wi-Fi from your network list on your phone
2. Enter your mobile number
3. Receive a text message with your access code
and from their Terms and Conditions this:
"By signing up to the WiFi service, you agree for us to share your information with ASDA and ASDA group companies for them to use this information for marketing and analytics purposes" 
Note that "ASDA group companies" probably means the whole of WalMart.
Doing this would mean that ASDA now have a link between MAC address and phone number.

At its most benign this means that whenever the same MAC address is seen nearby (you wouldn't even need to "connect" to their WiFi again) they could "use this information" to send a text or a call "for marketing" or just log you for "analytics purposes".

You wouldn't need to interact in any way for them to know that you walked past their store at 2am.

If this data got into the wrong hands (and ASDA isn't necessarily the right ones) it could be a stalkers charter.

Imagine if you could look up someone's phone number and get their phone's MAC address, then you could use the network to find out where they are connected, and use Google's location service to find their physical location.

Ok its not as simple as it sounds, but if I can imagine it, someone somewhere can make it happen. Interested?

Read more here:

android map - by samy kamkar
Stalker App Strikes Back at iPhones & Starbucks 
Hacker pilfers browser GPS location via router attack
Hack uses Google Street View data to stalk its victims 

Syndicated 2013-04-05 15:31:00 from Danny Angus

Latest blog entries     Older blog entries

New Advogato Features

New HTML Parser: The long-awaited libxml2 based HTML parser code is live. It needs further work but already handles most markup better than the original parser.

Keep up with the latest Advogato features by reading the Advogato status blog.

If you're a C programmer with some spare time, take a look at the mod_virgule project page and help us with one of the tasks on the ToDo list!