36
PAGE 1 | I´m not a number, I´m a free man Vicente Diaz, Senior Security Analyst, Kasperksy Lab Virus Bulletin 2012

I´m not a number, I´m a free man

Embed Size (px)

DESCRIPTION

My privacy talk in Virus Bulletin conference 2012, Dallas

Citation preview

Page 1: I´m not a number, I´m a free man

PAGE 1 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I´m not a number, I´m a free man

Vicente Diaz, Senior Security Analyst, Kasperksy Lab

Virus Bulletin 2012

Page 2: I´m not a number, I´m a free man

PAGE 2 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

The story of the 9 friends

Page 3: I´m not a number, I´m a free man

PAGE 3 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

The story of the 9 friends

Page 4: I´m not a number, I´m a free man

PAGE 4 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Who profiles me?

Page 5: I´m not a number, I´m a free man

PAGE 5 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Who profiles me?

Page 6: I´m not a number, I´m a free man

PAGE 6 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Who profiles me?

Page 7: I´m not a number, I´m a free man

PAGE 7 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Who profiles me?

Page 8: I´m not a number, I´m a free man

PAGE 8 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Remember Gator Corporation? [1998-2008]

!   “The leader in online behavioral marketing” !   2003: installed on 35 million PCs !   Spyware? I will send you my lawyers !   Report behavior, replace Ads !   Top management: most in the online Ads industry now

Page 9: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 9 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Regulation?

Better protections. Consumers Union, the advocacy arm of Consumer Reports, wants a national privacy law that holds all companies to the same privacy standards and lets consumers

tell companies not to track them online

Page 10: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 10 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Business is business

Page 11: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 11 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Business is business

In November, regulators in Germany found that such

information was being collected on Facebook users for up to two years even after they deactivated their accounts. Facebook said that was needed to enhance security, a

claim German regulators rejected. Both sides say they are willing to talk, but Facebook’s website says it doesn’t share such data without your permission and deletes it or makes

the information anonymous within 90 days.

Page 12: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 12 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

!   Google Privacy Policy •  Information you give to us

•  Information we get form your use of our services

•  Device information (HW model, OS, UDI, Phone number) •  Log information

–  search queries –  phone number, forwarding numbers, time and date of calls, duration

of calls –  IP –  Device info (system activity, browser language, date and time of your

request and referral URL) –  Cookies

•  Location (GPS, WIFI Aps, cell towers) •  Applications

Source: www.google.com/policies/privacy

Page 13: I´m not a number, I´m a free man

1 2 3 4 5 6

Tracking

Page 14: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 14 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Simple tracking GET index.html Host: news.com

GET xxx Host: domain1.com Referer: news.com

GET xxx Host: domain2.com Referer: news.com

GET xxx Host: domain3.com Referer: news.com

Page 15: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 15 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Simple tracking GET index.html Host: news.com

GET xxx Host: domain1.com Referer: news.com

GET xxx Host: domain2.com Referer: news.com

GET xxx Host: domain3.com Referer: news.com

http://www.google.es/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&ved=0CCUQFjA

A&url=http%3A%2F%2Fwww.productosflower.com%2F&ei=MZ1cUNPJGYjIhAfo6IGYCw&usg=AFQjCNFmmOdGYUOZ

8XNFiDK9XpX_7iYktQ

Page 16: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 16 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Advanced tracking

!   Identify the user: !   Passive data: headers, plugins, browser, OS

!   JS: screen resolution, custom resource detection via Plugins API

(i.e. printers via PDF, fonts via Flash, etc.) !   Track ID

!   Cookies, Flash cookies (allow cross-domain references),

HTML5 storage, silverlight

Java: own download cache, applets can read embedded resource streams

!   Future? Apps and games in social networks.

Page 17: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 17 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Advanced tracking

!   Identify the user: !   Passive data: headers, plugins, browser, OS

!   JS: screen resolution, custom resource detection via Plugins API

(i.e. printers via PDF, fonts via Flash, etc.) !   Track ID

!   Cookies, Flash cookies (allow cross-domain references),

HTML5 storage, silverlight

Java: own download cache, applets can read embedded resource streams

!   Future? Apps and games in social networks.

Page 18: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 18 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Advanced tracking

!   Identify the user: !   Passive data: headers, plugins, browser, OS

!   JS: screen resolution, custom resource detection via Plugins API

(i.e. printers via PDF, fonts via Flash, etc.) !   Track ID

!   Cookies, Flash cookies (allow cross-domain references),

HTML5 storage, silverlight

Java: own download cache, applets can read embedded resource streams

!   Future? Apps and games in social networks.

Page 19: I´m not a number, I´m a free man

1 2 3 4 5 6

How much tracking?

Page 20: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 20 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

www.elmundo.es

| September 28, 2012 PAGE 20 |

Page 21: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 21 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

www.elmundo.es

| September 28, 2012 PAGE 21 |

Page 22: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 22 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Analyzing World´s top traffic (I)

!   The experiment

•  Browsed top 100 sites country by country according to Alexa

•  Sniffed all the traffic •  Set up a database of tracking sites (around 1500 domains)

Page 23: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 23 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Analyzing World´s top traffic (II)

!   Countries with most requests to tracking domains

28

29

30

31

32

33

34

35

36

GB QA YE NP US AU PK SD AL CA

World avg. 24,58%

Page 24: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 24 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Top world trackers

! fbcdn.net

!   doubleclick.net

! google-analytics.com

! facebook.com

! twitter.com

! google.com ! twimg.com

! googlesyndication.com

! yimg.com

! scorecardresearch.com

! ytimg.com

! googleapis.com

!   yieldmanager.com

Page 25: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 25 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Top world trackers

! fbcdn.net

!   doubleclick.net

! google-analytics.com

! facebook.com

! twitter.com

! google.com ! twimg.com

! googlesyndication.com

! yimg.com

! scorecardresearch.com

! ytimg.com

! googleapis.com

!   yieldmanager.com

Page 26: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 26 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Analyzing World´s top traffic (III)

!   Top 100 domains WITHOUT references to tracking sites (country by country avg):

!   Why so low? !   Let´s take top 10 sites instead of top 100 !   References to tracking sites:

!   Top 100 world sites: 89% tracking (source: digitaltrends.com)

92,32%

49,96%

Page 27: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 27 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Analyzing World´s top traffic (III)

!   Top 100 domains WITHOUT references to tracking sites (country by country avg):

!   Why so low? !   Let´s take top 10 sites instead of top 100 !   References to tracking sites:

!   Top 100 world sites: 89% tracking (source: digitaltrends.com)

92,32%

49,96%

Page 28: I´m not a number, I´m a free man

1 2 3 4 5 6

1 year ago …

Page 29: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 29 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I looked at the eyes of Diablo – VB 2011

Page 30: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 30 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I looked at the eyes of Diablo – VB 2011

Page 31: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 31 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I looked at the eyes of Diablo – VB 2011

Page 32: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 32 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I looked at the eyes of Diablo – VB 2011

Page 33: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 33 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

I looked at the eyes of Diablo – VB 2011

Page 34: I´m not a number, I´m a free man

1 2 3 4 5 6

Conclusions

Page 35: I´m not a number, I´m a free man

1 2 3 4 5 6 PAGE 35 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B

Conclusions

•  Recipe for the disaster: tons of money, low regulation, relaxed self regulation •  Privacy vs business objectives •  User´s awareness raising: who is offering them solutions? We did help with Gator in the past. The difference? They installed unwanted software. However it was the same goal using different means. In 2012 is not about protecting the device, but protecting the user.

Page 36: I´m not a number, I´m a free man

PAGE 36 |

Gradient colors

14 149 115

0 121 91

13 137 105

R G B

Diagrams

142 230

0

127 205

0

137 222

0

R G B

242174107

255131

0

24016182

R G B

166 166 166

140 140 140

159 159 159

R G B

207 19

149

177 18

128

202 20

146

R G B

1 152 255

0 137 230

0 122 201

R G B

0 63

137

0 59

130

0 44 95

R G B

103 66

148

87 55

125

75 48

108

R G B

24193

104

237 41 57

238 68 80

R G B

164 208197

45 136113

0 10985

0 93 69

R G B

Tables

0 130102

0 109 85

R G B

230234232

201213207

182197190

171188179

R G B

22022 64

19519 57

18318 52

R G B

Competitors

254208106

25318217

228158

2

R G B PAGE 36 |

Thank you!

Vicente Diaz, Senior Security Analyst @trompi Virus Bulletin 2012

I´m not a number, I´m a free man