Example of poor security implementation across several social networks.

1. Misty
Stalking Unlimited Version 2

2. Overview
• Purpose of this exercise
• Application to exploit
– Flaws in location searching when dealing with
security and anonymity
• Recording clues and pressing farther
• Complete knowledge base of target
• Conclusion

3. Application to Exploit

4. Application to Exploit

5. Google also guilty…

12. Facebook profile?

13. Google search!

14. Link #1
linkedin.com Personal Page

15. Link #2
Pinterest.com Personal Page

16. Link #3
Her friend’s myspace.com account
Female – Age 34

17. Link 4
Personal myspace.com account
mmarlett78

18. Favorite Music Type

19. A maiden name search

20. Misty Marlett was born in 1978. Misty currently lives
in Killeen, Texas. Before that, she lived in Killeen, TX
from 2009 to 2010. Before that, she lived in Lone
Star, TX from 2001 to 2008.

21. A brief list of facts collected
• Year of birth
• Full name and maiden name
• Current job and position
• College attended
• Degree attained
• Favorite music type
• Myspace account name
• A list of probable friends
• Several bits of personality
• Approximation of current residence
• List of past residences and time frames
• When and where physical activity is done

22. Conclusion
• The more info you put out, the more accessible it is.
• Security is not the main concern in many applications
or databases today
• Extremely sensitive information can be retrieved by
doing very light “detective” work
• Never assume that anything in secure
• Information not directly disclosed can still be found