How Bungie identified a mass sender of fake DMCA notices

Re:How Bungie identified a mass sender of fake DMCA notices by woojoo666 on Friday June 24, 2022 @08:20PM (#31871170)

I guess part of my hope was that big tech didn't think timing analysis was worth the effort. But it's rather scary if they are truly scaling up their timing analysis efforts. Now, if you care about privacy, it's not enough to just use a VPN or stay logged out or use anonymous accounts. You have to worry about _when_ you open every webpage. Be wary of immediately opening links that your friend sends you, or sharing webpages that you had just opened to your friends. And that's not even factoring in fingerprinting attacks

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by walrus01 on Friday June 24, 2022 @08:21PM (#31871182)

the average residential DHCP-pool-assigned customer on a cablemodem, dsl, gpon line or something doesn't change IP addresses that much, and very often the dhcpd will renew the router/modem's WAN port lease with the same address for months at a time. even if it's not an actual static IP.

this alone can be used to correlate a huge number of things since very often you have one household with a whole assortment of people and tablets, phones, laptops, xboxes, playstations, smart speakers etc all behind one IP address and NAT.

just having an entity like google know that your ip address is coming from a /24 in a /19 sized IP block that's known to be a comcast dhcp pool in a particular city/metro area is a huge amount of info.

other things happen as well. you have other people in your household who installed the facebook app on their phone and left geolocation/GPS permissions set to on? now your IP address has been correlated with a very specific latitude/longitude and the usage patterns of your (spouse, roommate, child, etc) who is using that app.

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by woojoo666 on Friday June 24, 2022 @08:29PM (#31871232)

I'm well aware of the issues with IP (I mentioned that I use a VPN), and the general public is becoming more wary too, as can be seen with the rise of VPN usage. Which is why timing analysis is so scary, it bypasses most countermeasures

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by jcims on Friday June 24, 2022 @08:49PM (#31871372)

This sounds more like a forensic analysis than an operational capability.

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by woojoo666 on Friday June 24, 2022 @09:34PM (#31871638)

Well it means that Google logs and preserves all that data for at least a few months. Who knows what they do with it

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by ta988 on Friday June 24, 2022 @11:01PM (#31872121)

Store it because nobody knows what to do with it?

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by woojoo666 on Friday June 24, 2022 @11:57PM (#31872459)

That's the optimistic case I guess. But I've already given an example where I suspect Google used timing analysis to figure out a youtube video that I watched (over VPN and using a FOSS youtube client). I think it's plausible that Google is already using timing analysis to track users

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by iamacyborg on Saturday June 25, 2022 @02:56AM (#31873169)

That would explicitly not be in line with the GDPR. Specifically, it would break 5.1(b) - purpose limitation.

> collected for specified, explicit and legitimate purposes

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by scrollaway on Saturday June 25, 2022 @03:06AM (#31873210)

Data about logged in sessions is generally stored for security purposes.

If a malicious person had access to your account you want to know for how long they had that access for example.

[ Parent | on HN ]

Re:How Bungie identified a mass sender of fake DMCA notices by iamacyborg on Saturday June 25, 2022 @03:27AM (#31873297)

Sure, that seems like it’d be a legitimate purpose, my comment was more a response to this.

> Store it because nobody knows what to do with it?

[ Parent | on HN ]