Microsoft MAC address Database breaking security door: Anyone can locate you

Microsoft has been building a database that can publicly play MAC addresses, including the streets, with location-based services. This may include mobile phones as well as http://www.aliyun.com/zixun/aggregation/9600.html "> Laptops. The problem is that Microsoft has not secured the database.

According to a report from CNET's Declan McCullagh, Microsoft collects data on Windows 7 phones that are connected to Wi-Fi and records them in a database as cars go around looking for hotspots, but anyone can access the database because they are not protecting the database. CNET got a very detailed, unambiguous address to return to the database at different MAC addresses.

It works like this: As an access point, the iphone and Android devices automatically change their Wi-Fi MAC address. The Android device chooses a MAC address that starts with 02:1a.

Google's database does not include 02:1A:11:F2:12:FF's MAC address, but Microsoft has a database and reports it is located in Washington, D.C., at the Montenegrin embassy in New Hampshire State Avenue.

That's bad. If Microsoft has already recorded your network's MAC address (including your location), anyone with the MAC address can run it through Microsoft's database, potentially finding where you live. This is very bad. In addition, Microsoft has not indicated whether they have collected data on devices connected to the network. If they record your laptop or your phone's MAC address, anyone with that information can find your location through a Microsoft Map. This is really bad.

On this issue, CNET also got a formal statement from the programming director of Microsoft Windows Phone Engineering, Reid Kuhn:

"In order to provide location services, Microsoft collects the publicly transmitted cell phone tower ID and the MAC address of the Wi-Fi access via user's equipment and managed manipulation." If a user chooses a smartphone or mobile device as a Wi-Fi access, their MAC address may also be part of our service. However, since mobile devices usually move from one place to another, they have little effect on providing location. Once we decide that a device is not fixed in one position, we will remove it from our dynamic MAC address list. ”

The disturbing point is that there seems to be no choice for anyone who doesn't want their MAC address to be included. If you're worried about whether your information is stored in this database, you can enter the MAC address of your device found on the website developed by Stanford researcher Elie Bursztein (if you don't know your MAC address, CNET suggests using this site). Since you cannot delete your message, you may be able to scold Microsoft.

Original link: 17849.html "> Lei Feng Net"

(Responsible editor: admin)