There's No Place Left to Hide

Discussion in 'BlackHat Lounge' started by Skyebug77, Feb 27, 2017.

  1. Skyebug77

    Skyebug77 Jr. VIP Jr. VIP

    Joined:
    Mar 22, 2012
    Messages:
    2,501
    Likes Received:
    1,842
    Occupation:
    Marketing
    Location:
    Portland,Or
    Crazy new cross browser finger print tracking leaves no place left to hide online.

    Source: http://mashable.com/2017/02/24/online-privacy-cross-browser-fingerprinting/#Dta2zBSQCmqa

    Story
    But with other things Ive read Tor may not even be the solution any more. What are your thoughts?
     
    • Thanks Thanks x 1
  2. Conor

    Conor Elite Member

    Joined:
    Nov 7, 2012
    Messages:
    3,618
    Likes Received:
    6,078
    Gender:
    Male
    Location:
    South Africa
    Virtual Machine?
     
    • Thanks Thanks x 1
  3. elavmunretea

    elavmunretea BANNED BANNED

    Joined:
    May 14, 2016
    Messages:
    2,221
    Likes Received:
    2,964
    Tor has not been the solution for a very, very long time.

    https://nakedsecurity.sophos.com/2015/06/25/can-you-trust-tors-exit-nodes/
    https://pando.com/2014/07/16/tor-spooks/
    https://pando.com/2014/12/26/if-you-still-trust-tor-to-keep-you-safe-youre-out-of-your-damn-mind/

    Going back 3 years.
     
  4. Nut-Nights

    Nut-Nights Jr. VIP Jr. VIP

    Joined:
    Jun 20, 2013
    Messages:
    6,798
    Likes Received:
    4,088
    Location:
    Hell
    Home Page:
    No one can track me. I am anonymous. This browser thing dont work on me0
     
  5. Skyebug77

    Skyebug77 Jr. VIP Jr. VIP

    Joined:
    Mar 22, 2012
    Messages:
    2,501
    Likes Received:
    1,842
    Occupation:
    Marketing
    Location:
    Portland,Or
    Thats prolly the only remaining solution.... But even then one needs to be careful about the footprints they do on that.
     
    • Thanks Thanks x 1
  6. terrycody

    terrycody Elite Member

    Joined:
    Sep 29, 2012
    Messages:
    1,958
    Likes Received:
    535
    Occupation:
    marketer
    Location:
    Hell
    Interesting, but any big companies already implemented this? Or what should we do to protect this happen and accounts lost?
     
  7. HoNeYBiRD

    HoNeYBiRD Jr. VIP Jr. VIP

    Joined:
    May 1, 2009
    Messages:
    8,073
    Likes Received:
    8,923
    Gender:
    Male
    Occupation:
    Geographer, Tourism Manager
    Location:
    Ghosted
  8. Floopa75

    Floopa75 Jr. VIP Jr. VIP

    Joined:
    Feb 6, 2014
    Messages:
    1,028
    Likes Received:
    812
    Gender:
    Male
    Occupation:
    Summit Rank Link Building
    Location:
    Canada
    Home Page:
    Was there ever a place to hide?
     
    • Thanks Thanks x 1
  9. tux

    tux Jr. VIP Jr. VIP

    Joined:
    Jul 11, 2016
    Messages:
    1,562
    Likes Received:
    898
    Gender:
    Male
    Yes they do. Big companies like Google, Microsoft do this. Those who are farming accounts for example say bing ads know that you can't create a clean account using different user agent and browser simulation, your machine needs to have clean Mac, serial etc etc. Technically, your layer 2 address I.e Mac should remain local to your local network (router), how Microsoft identifies Mac from your browser is kinda hard to explain, some form/exploit of ARP maybe? There must be someone on this forum having knowledge about this, can he/she elaborate it?

    To protect this in case of accounts farming such as bing ads you use a VM with different mac , OS , browser and list goes on, or use Amazon free tier vps to create a bing account (almost everyone does it this way)
     
    • Thanks Thanks x 1
  10. tux

    tux Jr. VIP Jr. VIP

    Joined:
    Jul 11, 2016
    Messages:
    1,562
    Likes Received:
    898
    Gender:
    Male
    No it's not, NSA knows everything about us already
     
    • Thanks Thanks x 1