the machines that betrayed their masters
DESCRIPTION
Your machine (mobile phone, bluetooth device, router etc etc) may betrayed you and can be used to detect your position or even invade your privacy. They are watching you, stay alert.TRANSCRIPT
![Page 1: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/1.jpg)
The Machines That Betrayed Their Masters
ZeroNights 2013
![Page 2: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/2.jpg)
@glennzw
Glenn Wilkinson@glennzw
SensePost.com
![Page 3: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/3.jpg)
@glennzw
•2-y Donskoy proyezd, 7/1, Moscow
•Leninskiy prospekt., 2А, Moscow
•Ulitsa Bakhrushina, 24 строение 1, Moscow
•Rublevskoye shosse, 44, Moscow
•Krylatskaya ulitsa, 23, Moscow
•Ulitsa Sushchevskiy Val, 46 строение, Moscow
•Ulitsa Krasina, 3, Moscow
•Bolshaya Sadovaya ulitsa, Moscow
![Page 4: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/4.jpg)
@glennzw
•P132, Kaluzhskaya
•Nevsky Prospect, 114, Saint Petersburg
•Prospekt Medikov, St Petersburg
•Ulitsa 8 Marta, 41, Yekaterinburg
![Page 5: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/5.jpg)
@glennzw
•North 16th Street, Philadelphia, USA
•Captain Cook Drive, Australia
•Trillerpark, 1210 Viena, Austria
•3 Luvianpuistokatu, Satakunta, Finland
![Page 6: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/6.jpg)
@glennzw
•Wingate by Wyndham, Dallas, Texas, USA
•Hotel Strata, California, USA
•Hotel Hacienda, Spain
•Sunrise Diamond Beach Resort, Egypt
•5Footway Inn, Singapore
•H2O Hostel Ljubljana, Slovenia
![Page 7: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/7.jpg)
@glennzw
![Page 8: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/8.jpg)
@glennzw
![Page 9: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/9.jpg)
@glennzw
![Page 10: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/10.jpg)
Machines? Betrayal?
![Page 11: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/11.jpg)
@glennzw
![Page 12: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/12.jpg)
@glennzw
Machines?
![Page 13: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/13.jpg)
@glennzw
Betrayal?
![Page 14: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/14.jpg)
A Device
![Page 15: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/15.jpg)
A Unique Signature
![Page 16: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/16.jpg)
A Link from Signature to a Human
![Page 17: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/17.jpg)
@glennzw
Snoopy Framework
![Page 18: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/18.jpg)
@glennzw
![Page 19: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/19.jpg)
@glennzw
![Page 20: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/20.jpg)
@glennzw
![Page 21: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/21.jpg)
@glennzw
XBee
XBee
XBee3G
![Page 22: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/22.jpg)
@glennzw
XBee
XBee
XBee3G
XBee
XBee
XBee3G
Ethernet
Ethernet
![Page 23: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/23.jpg)
@glennzw
![Page 24: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/24.jpg)
A Unique Signature
![Page 25: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/25.jpg)
98:03:ab:32:11:33
![Page 26: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/26.jpg)
Linking the Signature
![Page 27: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/27.jpg)
Linking the Signature
1. Passive Linking
![Page 28: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/28.jpg)
BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?
98:03:ab:32:11:33
![Page 29: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/29.jpg)
BTBusinessHub-2DF1
Virgin-AFVT
Starbucks
Starbucks
Virgin-AFVT 50.507 -0.128Starbucks 50.408 -0.041
BTBusinessHub-2DF1 50.601 -0.045Starbucks 50.391 -0.050
SSID GPS Lat GPS Long
![Page 30: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/30.jpg)
@glennzw
BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?
98:03:ab:32:11:33
![Page 31: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/31.jpg)
@glennzw
Linking the Signature?
2. Active Linking
![Page 32: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/32.jpg)
@glennzw
BTHomeHub-AFV1, are you there?Starbucks, are you there?Virgin-AFVT, are you there?Is anyone out there?
98:03:ab:32:11:33
Hey iPhone! It’s me, Starbucks!
![Page 33: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/33.jpg)
Intertubes
BTOpenzoneVirginMedia-AR45
BTHomeHub-BHA7Starbucks
00:11:22:33:44:55
00:22:33:44:55:66
Drone001
Client00100:11:22:33:44:55
Client00200:22:33:44:55:66
Drone002
Client00311:22:33:44:55:66
Client00444:55:66:77:88:99
squidsslstripmitmproxy
<script src=profiler.jsp>IP= 10.2.0.45
Site= www.facebook.comCookie = supersecretcookie
IP= 10.2.0.45Site= www.facebook.com
username: joepassword: secret
Traffic Inspector
Social Media APIs
SnoopyServer
![Page 34: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/34.jpg)
@glennzw
![Page 35: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/35.jpg)
@glennzw
![Page 36: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/36.jpg)
@glennzw
![Page 37: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/37.jpg)
@glennzw
![Page 38: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/38.jpg)
@glennzw
Scenarios
![Page 39: The Machines that Betrayed their Masters](https://reader033.vdocuments.net/reader033/viewer/2022052907/559436b41a28ab9a628b45b0/html5/thumbnails/39.jpg)
@glennzw
Conference Unique Devices Number of A4endees
Device Per Person
BlackHatVegas2012 4778 6500 0.74
ITWeb2012 1106 400 2.77
44CON2012 969 350 2.77
BlackHatEU2013 681 607 1.12
Securitay2013 375 100 3.75
BSides2013 208 474 0.44
Hackito2013 309 400 0.77
CERT Poland2013 598 500 1.2
ZeroNights2013 507 ?