Not sure if this has made the rounds yet but here.
http://www.takethislollipop.com/
Go on, PD. Take it.
And have a Happy Halloween weekend.
That is such a fucking cool website.
Quote from: Suu on October 29, 2011, 04:25:17 AM
That is such a fucking cool website.
I KNOW.
Great Halloween idea, which also makes you aware acutely aware of just how much information about yourself is out on the internets.
Going to be hard to top that for YEARS.
All it does is ask me for permission to share on Facebook. :?
Did you give it permission? It's a safe app.
Quote from: Suu on October 29, 2011, 04:13:19 PM
Did you give it permission? It's a safe app.
No, because I dislike having dumb shit show up in my feed.
Just disable it after you see it.
It's fucking CREEPY. :D
I saw a blue lollipop with a razor in it. I deleted my Facebook acct two weeks ago, WTF does it do?
Show you how Facebook can rape your privacy when you give some random app Facebook permissions?? Did you need a site to demonstrate that?
READ HERE: http://www.principiadiscordia.com/forum/index.php?topic=30336.0
90% of what's posted in the "Privacy Thread" is about Facebook.
There's a reason I deleted my account1 ...
Still I would like to hear what this site actually does?
1 not so much because I actually fear that Facebook's privacy violations will negatively affect me specifically, but because I am morally opposed to what they are doing and how they do it (against EU privacy regulations), and by having a FB acct I am supporting them. And not even just in a "support them by buying their product" manner (like boycotting Nike or Nokia/Siemens), but by marking other FB accts as your friends and sharing things, you are building their social network for them, you are providing them with tremendous business value, by connecting your different circles of friends with eachother.
It's one thing to use their service for free even if you perhaps disagree with their business model (like Google), but it's a bit too much for me to swallow to actually voluntarily provide them with the very data that validates their existence.
That, and being somewhat privacy-conscious, I don't want to have to bother having to keep an eye on them all the time to see what line they crossed again this week.
FINE.
That was interesting... I am curious that it had him going to an address on Oak St, presumably the last place I google mapped a week and a half ago.
You deleted your FB Trip, so even if you created a new one, it wouldn't have the same effect as if you still had your original, but being a net geek you would probably work out the Google maps bit, and it has a hell of a creepy vibe, so turn the sound way up for best effect. Create a sock puppet, upload a few pics, and give it a run.
Nigel: still puzzling over the Google maps thing it does. I'm thinking it's IP but I can't be sure. I don't list my address anywhere, but it gets close to my address, just not close enough. It flashes by so fast. I should try and screen cap it to see exactly where it goes.
Quote from: Disco Pickle on October 29, 2011, 05:35:36 PM
You deleted your FB Trip, so even if you created a new one, it wouldn't have the same effect as if you still had your original, but being a net geek you would probably work out the Google maps bit, and it has a hell of a creepy vibe, so turn the sound way up for best effect. Create a sock puppet, upload a few pics, and give it a run.
I know but that's a bit more effort than I'm willing to spend, so I'm just asking what it does :)
QuoteNigel: still puzzling over the Google maps thing it does. I'm thinking it's IP but I can't be sure. I don't list my address anywhere, but it gets close to my address, just not close enough. It flashes by so fast. I should try and screen cap it to see exactly where it goes.
I suppose the fastness is done on purpose, to hand-wave inaccuracy.
It's got your IP, but IP-location can be extremely inaccurate. And even when it's accurate, it can't give much more than city/district, kinda, except for universities and corporate internets that bought their own fiber optic line or something.
I'm assuming it zooms in slightly more accurate than that, or?
It's gotta be something to do with access to your FB account, otherwise it's quite hard to pin an IP to a certain neighbourhood or street, without getting into all sorts of esoteric timing measurements traceroute correlation trickery (really cool) or clickjacking (which would be illegal cause it's a security exploit stealing your permission to access location data your browser can gather from triangulating nearby WiFi routers).
OK, giving it away:
My account of this will do it no justice what so ever. You really should just check it out, for nothing else other than the visceral effect you get.
After you approve access to the app for all aspects of your FB account, it starts a video with a guy, sitting in a filthy room, logging into your facebook account. He starts browsing through your photos, clicking different ones. Starts to become agitated, freaking out.
He google maps you, gets somewhere close to your location, looks at the camera and it cuts to him in his car.
The car scene really has to be experieced. Really.
Ends with him getting out, leaving the door open and walking up to (presumably) your house, with your profile pic tacked to the dashboard.
Really Trip, check it out. It's worth the 15 minutes you'll take setting up a sock puppet Facebook.
I think I heard of this one before, forget where... But okay I might check it out.
As for how they do it, I just came across this:
http://ilektrojohn.github.com/creepy/
Now this one doesn't target Facebook, but it does reveal an interesting attack vector: geolocation data in photographs. The EXIF data in JPEGs has some fields for geolocation data, though I'm not sure which cameras actually fill in these fields--they'd have to have access to GPS of some sort, so maybe iPhone cameras? Is that on by default? If so, I'd disable it, it may sound nice to save the GPS location of all your photos together with the photo, but really, the rare few times that this data is actually nice to have do not (IMO) weigh up against every social network and photo sharing website knowing exactly where you take your pictures.
It's indeed crazy how much data we (some people) leak every day.
He's got really bad skin, too. Kind of an acne Freddy Kruger.
After he offs you, a screen comes up with a countdown clock and your name taped on a red lollipop. At the bottom it names one of your friends and says they"re next.
I know, it's crazy the info you can find on people on the internet; stalkers used to have to actually open the phone book and turn paper pages or call information to find out where you lived!
I liked that it came up with a location across town for me, and I have absolutely no idea who the "friend" is who came up as next. Maybe I'll do it again and see if it gets any closer.
Seriously, it was interesting because it's also indicative of how off the conclusions drawn from data on the internet can be.
Google maps showed a house down the street as being my address for the longest time. Would have been a horrormirth if I'd actually had an internet stalker.
:? It didn't even get close to my house. Got the name of the town I live in, but nothing else.
I don't have address on Facebook, so it just went to Providence.
What's scary is that I have a secure account and I block everything except to friends. I have maximum security levels, but as soon as you give it permission to access, it's that simple to get all of that data. That's why I hate FB apps and games.
Quote from: Suu on October 30, 2011, 01:50:35 AM
I don't have address on Facebook, so it just went to Providence.
What's scary is that I have a secure account and I block everything except to friends. I have maximum security levels, but as soon as you give it permission to access, it's that simple to get all of that data. That's why I hate FB apps and games.
Thats why I deleted every last one, and didn't allow this one access.
I also disactivate my account when I'm not on Facebook, which helps with security (your account cannot be accessed until you log back on).
Ha that was pretty badass.
Except the guy went to the wrong city with no address. But meh, whatever.
The odd part is that porn ads find the correct city all the time, with no asking for access. Ah well.
I clicked on the lolipop and absolutely nothing happened. :sexybeast:
If you're using Firefox, get NoScript and tell it to block "fbcdn.net" unless you're actually on the facebook.com domain. It's much easier than refusing to use sites that have the "Like us on facebook!" button ( i.e., the eye that the panopticon that is Facebook uses to spy on you.)