How the hell does googling "weather" from firefox give my local weather when I'm behind vpn?!?
-
-
Replying to @RichFelker
Did you allow Google to access your location via the browser?
1 reply 0 retweets 0 likes -
Replying to @jdub
AFAIK I have browser location access fully off. But even if not, how would browser know location? No gps or anything.
1 reply 0 retweets 0 likes -
Replying to @RichFelker
Nearby mapped WiFi access points, IP address from previous non-VPN connections, etc.
1 reply 0 retweets 0 likes -
Replying to @jdub
But these are things the client would have to conspire to actively send. It's Linux Firefox with location-sending not enabled.
1 reply 0 retweets 1 like -
Replying to @RichFelker @jdub
Confirmed that it happens even with wget from the router.
1 reply 0 retweets 0 likes -
Replying to @RichFelker @jdub
Only plausible explanation I see: Google learned/stored geo info for the ip address from a NAT'd device behind it with GPS (e.g. Maps)
1 reply 0 retweets 0 likes -
Replying to @RichFelker @jdub
This seems like it would be exploitable to get Google to give you a third party's location by NAT'ing them behind IP you control.
1 reply 0 retweets 0 likes
And such an attack would not require MITM'ing crypto at all; rather you're just tricking Google into handing over the info.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.