EFF-Austin Meetup

(Jan 19)

Texas Electronic Privacy Coalition (TxEPC)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Geolocation Privacy

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Outline

1. What is geolocation data?
1. GPS Coordinates vs. Cell Tower ID
2. Historical vs. Realtime
2. Geodata-producing Devices
• GPS Tracker (trespass + direct collection)
• Mobile Devices (collection via third-party)
• IMSI Catchers or “Stingrays” (direct collection)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data: GPS Coordinates

For example:

​

Capital Factory

Lat: 30.268994

Lng: -97.740544

www.tobedetermined.org (2006)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data: Cell Tower ID

antennasearch.com

143 Towers

780 Antennas

​

within 4 miles of Capital Factory.

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data: Historical

http://radar.oreilly.com/2011/04/apple-location-tracking.html

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data: Realtime

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Device: GPS Tracker

www.wired.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

United States v. Jones (2012)

inforrm.wordpress.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data Source: all the Mobile things

haikudeck.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Third Party: Mobile Providers

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Mobile Networks (AT&T, 2011)

engadget.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Femtocells

dolcera.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Data Retention (DOJ, 2010)

www.pcmag.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Volume of Requests (Sprint, 2009)

http://paranoia.dubfire.net/2009/12/8-million-reasons-for-real-surveillance.html

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Tower Dumps

www.smh.com.au

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Signaling System 7 (SS7)

http://events.ccc.de/congress/2014/Fahrplan/events/6249.html

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

SnoopSnitch (Android App)

https://opensource.srlabs.de/projects/snoopsnitch

• Qualcomm-based, Android devices
• Detect fake base stations (IMSI Catchers)
• Detect Over-the-Air Updates
• Detect SMS and SS7 Attacks
• Optionally share data back

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Device: IMSI Catchers (“Stingrays”)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Haz: DPS, Houston, Fort Worth

Houston City Council (Oct 16, 2012)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Haz? Austin Police Department

www.austinchronicle.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Bonus Federal Device: DRT Boxes

www.wsj.com

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

Summarily...

Law enforcement should be required to apply for a warrant for geolocation data, providing for...

• Probable Cause (no fishing expeditions)
• Judicial Oversight (warrants issued by judge)
• Constraint on Use (esp. for direct collection)

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx

TxEPC Infos

Web: http://txepc.org/

FB: https://www.facebook.com/TxEPC

Twitter: @TxEPC

http://effaustin.org/

http://txepc.org/

Meetup (Jan 19)

#EFFatx