Full Disclosure mailing list archives

Re: Disabling iPhone Tracking ? Do it Yourself (DiT?DiY)


From: Charles Polisher <cpolish () surewest net>
Date: Wed, 27 Apr 2011 07:22:33 -0700

On Mon, Apr 25, 2011 at 01:33:28PM -0400, Jeffrey Walton wrote:
So, for those who are forced to live with the file "consolidated.db"
itself, TEHTRI-Security proposes to patch this Apple file, and to add
some lines of hacking inside it. We found that by adding SQL TRIGGERS
inside the file itself, we can totally get rid of the tracking issues.
I can envision it now.... A room full of lawyers formulating a
strategy to classify the SQL TRIGGERS as a DRM circumvention tool so
they can bring a PATRIOT Act like response.

Building on that:

create trigger alibi_in_WifiLocationHarvest after insert on
WifiLocationHarvest begin update WifiLocationHarvest set x_coord
= xcoord + large_random_permutation, ycoord = ycoord +
large_random _permutation; end; create trigger
alibi_in_LocationHarvest after insert on LocationHarvest begin
update LocationHarvest set x_coord = xcoord +
large_random_permutation, ycoord = ycoord +
large_random_permuitation; end;

On Mon, Apr 25, 2011 at 12:09 PM, Laurent OUDOT at TEHTRI-Security
<laurent.oudot-ml () tehtri-security com> wrote:
Disabling iPhone Tracking ? Do it Yourself (DiT?DiY) :-)
<snip/>
SQLite3 TRIGGER Patch examples:
create trigger privacy_in_WifiLocationHarvest after insert on
WifiLocationHarvest begin delete from WifiLocationHarvest; end;
create trigger privacy_in_LocationHarvest after insert on
LocationHarvest begin delete from LocationHarvest; end;
<snip/>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: