The Core

Why We Are Here => Hardware & Technology => Topic started by: bill on January 23, 2014, 01:26:27 AM

Title: the massive Google privacy breach thread
Post by: bill on January 23, 2014, 01:26:27 AM
The thread where we can post all of the topics pertaining to Google's ongoing abuse of our private data




Chrome Bugs Allow Sites to Listen to Your Private Conversations (http://talater.com/chrome-is-listening/)

By exploiting bugs in Google Chrome, malicious sites can activate your microphone, and listen in on anything said around your computer, even after you've left those sites.

Even while not using your computer - conversations, meetings and phone calls next to your computer may be recorded and compromised.


Yikes! Glad I don't use Chrome anymore.
Title: Re: Chrome Bugs Allow Sites to Listen to Your Private Conversations
Post by: ergophobe on January 23, 2014, 05:40:24 PM
Have you seen recent reports about how by using your computer microphone a hacker can theoretically break 4096-bit RSA encryption on your computer? This was recently demonstrated by one of the inventors of RSA (the S guy).

Similarly, if someone has your email address and can manage to leave a cell phone next to your computer and send emails and listen with the phone's microphone, they can also break 4096 bit RSA.

This comes on the heels of revelations about viruses that transmit from one computer to the other using ultrasonic sound waves to encode and transmit data.

So this ability to listen in goes way beyond hearing what you're saying. If someone has access to the sound system on the computer, they have access to the whole system.

One solution: get a speaker and microphone that only covers say 100hz to 2000hz which covers most of human conversation. Not great for music obviously, but it would make it much harder to surrpetitiously send data
Title: Re: Chrome Bugs Allow Sites to Listen to Your Private Conversations
Post by: rcjordan on January 23, 2014, 06:10:35 PM
Should we start new threads for G ecosystem privacy issues? Maybe just pin them to one huge thread at the top which everyone will then ignore?

Another Google Privacy Flaw - Calendar Unexpectedly Leaks Private Information
http://shkspr.mobi/blog/2014/01/another-google-privacy-flaw/
Title: Re: Chrome Bugs Allow Sites to Listen to Your Private Conversations
Post by: bill on January 24, 2014, 02:07:59 AM
I actually like the idea of a massive Google privacy breach thread. It really is all the same topic.



I did hear about the 4096 bit encryption being broken via a microphone, but that's a pretty targeted attack and they would have to be decrypting mails of which the content was known, using specific software. Also I'd assume you'd need a pretty quiet environment to pick up those sounds. I wonder if simply keeping music on in the background would thwart such an attack.

QuoteOne solution: get a speaker and microphone that only covers say 100hz to 2000hz which covers most of human conversation.
The 4096-bit RSA hack was listening to the vibrations of the PC's internals, so speakers wouldn't come into play. Having a microphone that covered limited ranges might help against those Chrome browser bugs though.
Title: Re: Chrome Bugs Allow Sites to Listen to Your Private Conversations
Post by: rcjordan on January 24, 2014, 02:39:48 AM
>massive Google privacy breach thread

Me, too. Worked for quotes and terminator.  It's your thread, you get the honors of changing the title.  Make it something catchy, like "the massive Google privacy breach thread" hhh.

'Course, then if it only has 4 posts then 'massive' is going to look pretty toopid.
Title: Re: the massive Google privacy breach thread
Post by: bill on January 24, 2014, 02:57:48 AM
Great idea RC! Done!   :P

Now I'm off to find more topics...
Title: Re: the massive Google privacy breach thread
Post by: rcjordan on January 27, 2014, 07:21:21 PM
The (NSA) documents also specifically instruct agency staffers in intercepting Google Maps queries made on smartphones, and using them to collect large volumes of location information.

The agencies also made use of their mobile interception capabilities to collect location information in bulk, from Google and other mapping apps. One basic effort by GCHQ and the NSA was to build a database geolocating every mobile phone mast in the world – meaning that just by taking tower ID from a handset, location information could be gleaned.

A more sophisticated effort, though, relied on intercepting Google Maps queries made on smartphones, and using them to collect large volumes of location information.

So successful was this effort that one 2008 document noted that "t effectively means that anyone using Google Maps on a smartphone is working in support of a GCHQ system."

http://www.theguardian.com/world/2014/jan/27/nsa-gchq-smartphone-app-angry-birds-personal-data