Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: John McAfee Exposes His Location in Photo About His Being on Run - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
John McAfee Exposes His Location in Photo About His Being on Run

Generally speaking, if you're on the run from the authorities over a homicide, you're probably best laying low and not making too much noise.  Sure, there is a case for trolling "the man", but it usually comes back to haunt you.

Take the case of John McAfee who is currently on the run.  A journalist for a shady website involving narcotics is apparently spending some time with him while he's on the run.  It put up a post with a picture with John and the Editor-in-chief of said publication.  (You can find it without too much effort, but it's NSFW).

Well, if you download the picture and use any of the standard tools to get metadata (I use exiftool), it happily reports not only the make and model of the camera, but the GPS coordinates of where the picture was taken (today).  We can say that, yes, John McAfee is apparently no longer in Belize. ;)

A humorous post to point out something many of us don't realize, our smartphones and devices are increasingly location-aware and that information makes it into the media that those devices create.

See earlier SANS ISC posts on EXIF/location information:

Twitpic, EXIF and GPS: I Know Where You Did it Last Summer

Snipping Leaks

--
John Bambenek
bambenek \at\ gmail /dot/ com
Bambenek Consulting

John

245 Posts
ISC Handler
But here's the thing. Couldn't you take the picture, and then use similar tools to alter the GPS data to make it look like you were somewhere that you weren't? And then sit back and laugh as everyone scrambles around trying to find you in that other location?

Eric

43 Posts Posts
Can you put the cat bag in the bag without getting scratched?
Anonymous
Posts

Sign Up for Free or Log In to start participating in the conversation!