Upload
ken-westin
View
113
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Over the past few years I have developed and used technologies that help recover stolen devices ranging from laptops, cell phones, iPods, flash drives and even high end digital cameras. One tool was CameraTrace which is a massive database of camera serial numbers discovered via distributed bots that scan popular photo sharing and social media websites extracting serial numbers and other data from the metadata of images. The tool has led to the recovery of several stolen cameras and is being utilized by law enforcement agencies across the country including the Homeland Security Investigations Cyber Crimes Center (HSI C3) Child Exploitation Investigations Unit who is using it along with several other sophisticated tools to help track down child pornographers and pedophiles many times before they are able to hurt a child.
Citation preview
KEN WESTIN [email protected]
kwestin dv8.io
PICTURE THIS TRACKING THIEVES, PEDOPHILES AND MORE WITH IMAGE METADATA
EXIF
Extensible Image Format
SMILE YOU’RE ON STOLEN LAPTOP CAMERA!
Source: 1000memories.com
Source: 1000memories.com
STOLEN PHONE SELFIES
ENHANCE!
Exif Data• Exchangeable Image File Format
• Data in images, video and audio
• Cell phones embed GPS coordinates
• High end digital cameras embed serial numbers
• Time Stamp
Free Tool: ExifScan.com
Exif = Who, Where & When
High School Photo Bomber
Oh Dear! John
Not So Anonymous
Nudes From Hacked Phone? Nope.
Blackberry Bold 9000 October, 12, 2010 at 8:02PM
300px/inch Progressive DCT Scanning
EXIF EVERYWHERE!
Flickr 500px Twitpic Tumblr Blogger
Panoromio Tumblr Picasa Yfrog Twitter
Experiment – Distributed Scan
John Heller
Theft List
Creepy
http://ilektrojohn.github.io/creepy/
Wedding Crasher
Law Enforcement Use
Free for law enforcement 32 agencies currently HSI Cyber Crimes Center (C3)
Child Exploitation Investigations Unit
Victim Identification Unit
Next Steps
Scaling database and bots Converted to new site Exif.io Network Redux donating servers More complex scanning, Deep Web,
Silk Road API Integration with agency tools Integrate data from other services