RE: Hacking Pictures?

["Steven Bonici" <sbonici () ilaonline org>]

Wow, as they say, you learn something new each day.  I knew pictures
contained certain information, but never realized how much and pictures
coming off of cell phones.  And as someone pointed out, its a stalker
paradise.  So for anyone with kids, I would warn them or disable the
"feature" of recording all that data.
 
I appreciate all your input.  Thanks.

-----Original Message-----
From: PacketNull [mailto:packetnull () gmail com] 
Sent: Saturday, January 22, 2011 9:17 AM
To: Steven Bonici
Cc: <security-basics () securityfocus com>
Subject: Re: Hacking Pictures?

steven,

i have some resources you can look at

http://www.exif.org
- provides some sample file information fron different cameras (if its  
a specific brand of camera it stamps model#, serial, etc.

http://idlastro.gsfc.nasa.gov/idl_html_help/Getting_Information_About_SA
VE_Files.html
- some nasa paper i just ran into.

please note that i haven't done actual testing on this yet. but it has  
come to my attention before when someone asked me about a file that  
they generated for a stem cell research software and told me that  
their admin knew that it was that said person who generated the file.

good hunting,
packetnull

On Jan 21, 2011, at 10:42 AM, "Steven Bonici" <sbonici () ilaonline org>  
wrote:

> I was speaking to someone from DHS (not a tech) and he was telling me
> that there are applications that can "look" at a picture taken from a
> cell phone and can get the location of where the picture was taken.   
> Is
> this true?  If so, can someone provide more information?  If this  
> can be
> done, people posting pictures from their cell phones to social sites
> should be aware of this...
>
> Thanks - Steven
>
> --- 
> ---------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs  
> an SSL certificate.  We look at how SSL works, how it benefits your  
> company and how your customers can tell if a site is secure. You  
> will find out how to test, purchase, install and use a thawte  
> Digital Certificate on your Apache web server. Throughout, best  
> practices for set-up are highlighted to help you ensure efficient  
> ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> --- 
> ---------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------