tl;dr 🔗

I'm summarizing the 13 security issues I've presented on the blog over the last three months.

Crime types 🔗

In the table below I've tried to show how different types of criminals can directly use the information from the different cases. Of course, combining sources would make you even more vulnerable, so I'll get more into that further down in this post.

Jealous partner 🔗

With jealous partner I'm considering persons who have some kind of abusive power and control or jealousy. They could make use of usage data like the time the partner entered the door at the gym or what he or she bought at the store at what time.

Stalker 🔗

A stalker is a person with unwanted or obsessive attention towards another person. Using information leaks a stalker would be able to get more personal information (i.e. address, phone number, e-mail address) about the victim. And getting something like the victim's IP address would open for attacks on computer equipment which again can lead to more leaks of personal data (think your mobile phone with all your images, your e-mail, etc.).

Kidnapper 🔗

Kidnappers would be able to use location data and other usage information to understand patterns and when it's a fitting time to commit the crime.

White-collar crimi​nal 🔗

In while-collar crime I include identity theft and other types of finacially motivated crimes. Useful information could be Social Security Numbers (SSN), names, addresses, phone numbers, etc.

Political hacker 🔗

With political hacker I mean individuals or groups that have some kind of political motivation to get access to data about politicians. A list of people's names and IP addresses would be great news for trying to break into a politician's computer network.

Foreign intelligence 🔗

I suppose some foreign intelligence organizations wouldn't mind getting an up to date high quality list of names, Social Security Numbers and addresses for most of the grown population in a nation. And for more targeted operations full names and IP addresses sure helps.

Information leaks 🔗

More often than not the security issues I have found have included some sort of personal information leak. In the table below I'm summarizing the severity and the leaks.

Data leaked 🔗

A lot of different personal data has been leaked. And looking at the cases you'll see that you can use data from one source to look up data in another.

Enum​eration vulvner​ability 🔗

The checkmark for enum​eration vulvner​ability indicates if it was possible to access all the data systematically or not. Only a few of them needed knowledge like a bank account number or e-mail address, so this is bad news for you as an end user.

Privacy threat 🔗

While not all cases are directly applicable for criminals, almost every single one of them poses a threat to your privacy. This threat goes from you not surfing anonymously on the Internet to your home network being vulnerable for further attacks to your kids being tracked to your online shopping being exposed etc.

Combining sources 🔗

While the vulnerabilities alone are bad, combining them may make them more severe. So which of the 13 could have been used together?

In the table below I've marked the the cases in which there are some overlapping data that will make it possible to get retrieve more data or increase the attack surface.

Conclusion 🔗

I wanted to write this post to try to make it clear on why you should care about these issues. When I can find all this data with very little time and effort then this sure must be the tip of a very small iceberg in an ocean with a lot of very big icebergs.