News for hackers. Stuff that matters.
Re:Spideroak Kloak: Zero-Knowlege Social Networking by darkmighty on Friday December 11, 2015 @08:42PM (#10721389)
How are you doing fuzzy locations? You're probably not doing it this way, but note that just adding a random 4 mile radius vector to the users location in insecure (against multiple samplings), you need to quantize it to a fixed set like a 4 mile grid or something like that. I remember tinder made this mistake and you could locate users very precisely anonymously.
Re:Spideroak Kloak: Zero-Knowlege Social Networking by daviddahl on Saturday December 12, 2015 @01:45AM (#10722031)
The dataset of all towns in the world with > 1000 inhabitants is bundled into Kloak. The GPS location was originally highly accurate, but we rounded down to 2 decimal places. So if your GPS coordinates match the center of the city (rounded down), a place name can be generated. It basically will place you near the center of the closest town, again, its naively rounded to 2 decimal places. I want to go back to make this code a bit more sophisticated, with more choices for the user.
Re:Spideroak Kloak: Zero-Knowlege Social Networking by darkmighty on Saturday December 12, 2015 @04:49PM (#10724297)
Yea just rounding the coordinates is problematic at high latitudes. Curiously, the problem of finding a "nice" quantization set on the sphere is a well known mathematical problem called Spherical Coding [1]. But you don't need anything this fancy I guess, you can just round the coordinates if the latitude is less than e.g. 60 degrees , and if above you chose another pole and round the coordinates with respect to the second pole. It would probably be a good idea to add some hysteresis as suggested below too (so you're not localizable when you're at one of the edges). Then you can give it some fancy name like "Advanced location privacy protection" :)

http://mathworld.wolfram.com/SphericalCode.html

https://en.wikipedia.org/wiki/Tammes_problem

Re:Spideroak Kloak: Zero-Knowlege Social Networking by johann28 on Friday December 11, 2015 @09:17PM (#10721486)
Grids are problematic because one can observe you at the boundaries, moving from one cell to another, so there are moments when you are very accurately localizable.
Re:Spideroak Kloak: Zero-Knowlege Social Networking by darkmighty on Friday December 11, 2015 @09:31PM (#10721539)
Ah yes good point (you'd be briefly localizable to a line), you'd need to add some hysteresis and delay for dynamical targets.

So something like

shown_pos(t) = mode(quantize(pos(t-j)),...,quantize(pos(t-j-k)))

For some delay j and hysteresis k.