[ NNSquad ] Using traffic analysis to infer SSL Google Maps data

[Lauren Weinstein <lauren@vortex.com>]

Using traffic analysis to infer SSL Google Maps data

http://j.mp/xHaUGy  (threat post)

   "Vincent Berg of IOActive has written a tool that can monitor SSL
    connections and make some highly educated guesses about the contents
    of the requests going to Google Maps, specifically looking at what
    size the PNG files returned by Google Maps are. The tool then attempts
    to group those images in a specific location, based on the grid and
    tile system that Google uses to construct its maps."

 - - -

A reminder of what the spooks have long known -- traffic analysis can
yield significant information even from typically encrypted channels.

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Co-Founder: People For Internet Responsibility: http://www.pfir.org 
Founder:
 - Data Wisdom Explorers League: http://www.dwel.org
 - Network Neutrality Squad: http://www.nnsquad.org 
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
 - PRIVACY Forum: http://www.vortex.com 
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren 
Tel: +1 (818) 225-2800 / Skype: vortex.com


_______________________________________________
nnsquad mailing list
http://lists.nnsquad.org/mailman/listinfo/nnsquad