Owntracks - Creeping on IoT with MQTT

It seems that IoT is everywhere these days. While many people love to see what things can be done with IoT, some see much of it as a privacy (maybe even safety) concern. I was recently contacted by a friend asking to do an evaluation of their IoT setup for their house and see if someone could easily spy on them or potentially even harm them. In this post, I'll show how IoT (to me) became horrifying. Before I begin, I was authorized to perform testing on my friend's connection. Always get consent before poking things you do not own.…

Read More

Protecting Your Privacy - Recommendations

It's quite frequent that I see a blog post on "How to remain anonymous online" or something similar. To me, however, some of these posts seem to be pushing a VPN or similar product in your face for a referral click or due to sponsorship and don't really do much to help you/provide resources. As you, a reader of this blog may know, I do not post referrals nor do I push products (though, I may recommend one) because they sponsor me or whatever. So, here's my take to help you protect your privacy. This will be…

Read More

iMessage Preview Forging - Research Update 1

It appears that I am not the only researcher who had found that iMessage on the latest iOS and Mac OS gives away your IP and device information. Perhaps I should have distributed that post more; seeing as research by others has gotten more traction. meh. Here is my previous post on iMessage: https://protoxin.net/your-iphone-mac-is-giving-you-away-imessage/ This post is going to be quite lengthy compared to my usual; go grab some coffee. Here we go!!! Intro#### Regardless of the basic privacy concerns for iMessage previews, another issue became greatly recognised. I realised that I can be the one that…

Read More

Your iPhone/Mac is Giving You Away-ish - iMessage

We live in an ever-growing age of surveillance, hacking, and tracking. Thankfully, a few companies are taking a positive stance on privacy. Unfortunately, adding new shiny features can reduce privacy. In this case, we look at an interesting issue with iMessage that nets you the IP of a sender. This is a quick read, I promise. This isn't necessarily a MAJOR issue, however, I think it's something people should be aware of. Did you recently upgrade to the latest and greatest Apple iOS or MacOS? I'm glad to report that newly added features are great and things are much faster.…

Read More

Join EFF!