Cross-device tracking
Page 1 of 1
Invasor
Moderator



Posts: 7638
Location: On the road
PostPosted: Sat, 14th Nov 2015 15:02    Post subject: Cross-device tracking
Quote:
Privacy advocates are warning federal authorities of a new threat that uses inaudible, high-frequency sounds to surreptitiously track a person's online behavior across a range of devices, including phones, TVs, tablets, and computers.

The ultrasonic pitches are embedded into TV commercials or are played when a user encounters an ad displayed in a computer browser. While the sound can't be heard by the human ear, nearby tablets and smartphones can detect it. When they do, browser cookies can now pair a single user to multiple devices and keep track of what TV commercials the person sees, how long the person watches the ads, and whether the person acts on the ads by doing a Web search or buying a product.
...
Cross-device tracking can also be performed through the use of ultrasonic inaudible sound beacons. Compared to probabilistic tracking through browser fingerprinting, the use of audio beacons is a more accurate way to track users across devices. The industry leader of cross-device tracking using audio beacons is SilverPush. When a user encounters a SilverPush advertiser on the web, the advertiser drops a cookie on the computer while also playing an ultrasonic audio through the use of the speakers on the computer or device. The inaudible code is recognized and received on the other smart device by the software development kit installed on it. SilverPush also embeds audio beacon signals into TV commercials which are "picked up silently by an app installed on a [device] (unknown to the user)." The audio beacon enables companies like SilverPush to know which ads the user saw, how long the user watched the ad before changing the channel, which kind of smart devices the individual uses, along with other information that adds to the profile of each user that is linked across devices.

The user is unaware of the audio beacon, but if a smart device has an app on it that uses the SilverPush software development kit, the software on the app will be listening for the audio beacon and once the beacon is detected, devices are immediately recognized as being used by the same individual. SilverPush states that the company is not listening in the background to all of the noises occurring in proximity to the device. The only factor that hinders the receipt of an audio beacon by a device is distance and there is no way for the user to opt-out of this form of cross-device tracking. SilverPush’s company policy is to not "divulge the names of the apps the technology is embedded," meaning that users have no knowledge of which apps are using this technology and no way to opt-out of this practice. As of April of 2015, SilverPush’s software is used by 67 apps and the company monitors 18 million smartphones.
...
"For example, a company could see that a user searched for sexually transmitted disease (STD) symptoms on her personal computer, looked up directions to a Planned Parenthood on her phone, visits a pharmacy, then returned to her apartment," the letter stated. "While previously the various components of this journey would be scattered among several services, cross-device tracking allows companies to infer that the user received treatment for an STD. The combination of information across devices not only creates serious privacy concerns, but also allows for companies to make incorrect and possibly harmful assumptions about individuals."

http://arstechnica.com/tech-policy/2015/11/beware-of-ads-that-use-inaudible-sound-to-link-your-phone-tv-tablet-and-pc/
Back to top
StrEagle




Posts: 14059
Location: Balkans
PostPosted: Sat, 14th Nov 2015 17:27    Post subject:
most speakers can't output inaudible sounds Laughing


Lutzifer wrote:
and yes, mine is only average
Back to top
Invasor
Moderator



Posts: 7638
Location: On the road
PostPosted: Sat, 14th Nov 2015 17:29    Post subject:
StrEagle wrote:
most speakers can't output inaudible sounds Laughing

How would you explain this then?
Quote:
Computer scientists have proposed a malware prototype that uses inaudible audio signals to communicate, a capability that allows the malware to covertly transmit keystrokes and other sensitive data even when infected machines have no network connection.

The proof-of-concept software—or malicious trojans that adopt the same high-frequency communication methods—could prove especially adept in penetrating highly sensitive environments that routinely place an "air gap" between computers and the outside world. Using nothing more than the built-in microphones and speakers of standard computers, the researchers were able to transmit passwords and other small amounts of data from distances of almost 65 feet.


http://arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/
Back to top
VGAdeadcafe




Posts: 22230
Location: ★ ಠ_ಠ ★
PostPosted: Sat, 14th Nov 2015 18:13    Post subject:
Is there a POC? Theory sounds great but ...

Anyway, how many Android or IOS devices are imfexcted with malware? Confused
Back to top
WaldoJ
VIP Member



Posts: 32678

PostPosted: Sat, 14th Nov 2015 19:20    Post subject:
More android than ios


Sin317 wrote:
I win, you lose. Or Go fuck yourself.
Back to top
Invasor
Moderator



Posts: 7638
Location: On the road
PostPosted: Sat, 14th Nov 2015 20:00    Post subject:
They even have a pretty website about it:
http://www.silverpush.co/#!/uab
Quote:

Add Beacon: Add our patented inaudible audio beacon to your TV creative
Measure: Millions of users with SilverPush powered SDK are listening to TV ads everyday
Retarget: Reach out to mobile users who have watched your TV ad.


Quote:
Our Customers

Google
Samsung
Airtel
Kabaam
Dominos
Candy Crush

http://silverpush.wikia.com/wiki/Silverpush_Wiki
Back to top
AKofC




Posts: 4359

PostPosted: Sun, 15th Nov 2015 02:40    Post subject:
Well I should be safe. I do iOS and Android development, but funny enough I don't own a phone myself after my old one got nicked in 2012. I just couldn't be arsed to get a new one.

I have a tablet that hasn't been turned on since 2013.

And all my laptops have duct tape across the web cams.

Though this would explain why a dude on my Facebook has been creeped out because he did a phone search for a bike, and now all the ads on his PC are about that brand of bike. His phone is logged into google, his PC is not.

It would suck if all your ads ended up being about STD treatment like in that guy in the example. D:

Remember, if a service is free, you are the product.


...

Is...is... the hump free?


Gustave the Steel


Last edited by AKofC on Sun, 15th Nov 2015 07:42; edited 2 times in total
Back to top
VGAdeadcafe




Posts: 22230
Location: ★ ಠ_ಠ ★
PostPosted: Sun, 15th Nov 2015 02:57    Post subject:
Sometimes I think nfohump is some kind of research project about nerd culture or something. We may end up in someone's diploma paper Laughing Laughing

Title of the thesis: "(D)evolution of video game pirate and computer-centric nerd culture on antiquated forum software"
Back to top
Invasor
Moderator



Posts: 7638
Location: On the road
PostPosted: Sun, 15th Nov 2015 03:01    Post subject:
Back to top
pistolshrimp
Über-VIP Member



Posts: 11007

PostPosted: Sun, 15th Nov 2015 07:56    Post subject:
I believe they are doing it. Sometimes I really want to go back to the non smart phone. I want a dumb phone.

I was pissed off today. I walked into a salon just yesterday. I didn't buy anything. I was in there for 5 mins. It has maybe one sister store way across the city. Small, not one that can afford expensive advertising. Today I got their advertising on my Facebook feed. HIGHLY suspicious. I've never googled them on anything. I think they used google + location maps. I had disabled the feature on my phone. When I logged onto it today it was turned back on. I got a new phone a few months ago but never checked it.

Could be from the Facebook app itself and messenger. I will know soon if it happens again.

Greedy people. It really is a scam on the people.
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - General chatter
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group