Re: Hacking Pictures?

[Robert Craddock <technophile () gmail com>]

In a very simplistic sense, its already possible to match similar
images indexed across the web with sites like tineye.com.  I see no
reason that similar functionality cannot be replicated using mashups
of data gleaned from Images and metadata in Google Street View/Maps.
I'm sure they are already working on it.

FYI, Tineye is powered by an engine called Piximilar
http://www.ideeinc.com/products/piximilar/

-Robert

On Sun, Jan 23, 2011 at 6:14 PM, Stephen <stephen () greyhat-security com> wrote:
> Hi Steven, from what I know, there would be only two ways to do this.
> One, which is the most simple, and the majority of people could easily
> do it, is to look at the metadata from the photo, and extract the GPS
> co-ordinates from it (as most phones and some camera's now record this
> information into the picture by default). Alternatively, geolocation by
> identifying common landmarks would theoretically be possible, but need
> large clusters of supercomputers with a heck of a lot of info (I would
> say, anyway). There may be other ways, but that's what I'm aware of. Thanks,
>
> -Stephen
>
> On 22/01/2011 3:12 AM, Steven Bonici wrote:
> > I was speaking to someone from DHS (not a tech) and he was telling me
> > that there are applications that can "look" at a picture taken from a
> > cell phone and can get the location of where the picture was taken.  Is
> > this true?  If so, can someone provide more information?  If this can be
> > done, people posting pictures from their cell phones to social sites
> > should be aware of this...
> >
> > Thanks - Steven
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------