learn-by-doing/privacy-hacking

Testing the limits of privacy invasion techniques to better understand how to protect ourselves in a post-privacy world

privacy-hacking's Issues

RFID tag sniffing

With a powerful enough receiver it is possible to read RFID tags on various items that a person might be carrying (e.g clothing, shoes, or electronic devices). These RFID tags might contain information like the type of item or from which store they were purchased.

More information:

• https://electronics.stackexchange.com/questions/168737/recommendation-for-low-cost-rfid-receiver-approx-0-5-meter-range

WiFi network spoofing and man-in-the-middle

Is it possible to spoof a WiFi network and trick a phone into connecting with our spoofed network? If yes, how can this be levered to gather further information about the phone's internet activities.

Ideas:

• Reverse DNS look-ups to learn which services the phone is using:
  • dig -x <IP ADRESS>

WiFi sniffing

Most people carry their personal phones with them everywhere they go. So it is likely that a person entering the "stalker booth" will have theirs as well. So we can attempt to use their phone's WiFi capabilities to sniff which networks they are trying to connect to. We can then check publicly available databases of WiFi network names to find the networks' geolocations. This will tell us where the person has connected to a WiFi hotspot - usually their office or home.

Public databases/APIs for finding geolocation of WiFi networks:

• https://api.wigle.net/

Profile enumeration

Given a name, username, or email address; how would you find the person's other profiles online?

Some ideas:

• Search the name, username, or email address in Google/Bing/other search engines.
• Search on Facebook, Linkedin, and other social networks.

Reverse image search

Automate the process of finding the name, email, or profile of a person from only a picture of their face.

Using a publicly available search service might be a good place to start. Here are a few that we've found already:

• https://pimeyes.com/en/
• https://findface.pro/en/