IPvSeeYou - Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation

Explore a Black Hat conference talk that delves into "IPvSeeYou," a novel data fusion attack against residential home routers running IPv6 for precise street-level geolocation. Learn about the development of this technique, which surpasses traditional IP geolocation methods by providing highly accurate location data. Discover how the researchers exploit leaked identifiers in IPv6 to geolocate millions of home routers worldwide. Examine the technical aspects of the attack, including IPv6 deployment, MAC addresses, and privacy extensions. Understand the ethical considerations, data sources, and methodology used in the research. Compare IPvSeeYou's performance against existing geolocation services and witness a live demonstration of the tool. Gain insights into the implications for location privacy and the steps taken for responsible disclosure. This 39-minute presentation by Erik Rye and Rob Beverly offers a comprehensive look at the potential vulnerabilities in IPv6 implementation and their impact on user privacy.

Introduction
Home Routers
IPvSeeYou Overview
Our Contributions
IPv6 Deployment
The IPv6 Peripheral
MAC Addresses
Advantages and Disadvantages
Privacy Extensions
Impact Overview
Ethical Considerations
corpus of ipv6 addresses
data sources
combining data sources
mental model
complicating factors
naive matching
ground truth
offset
end result
Limitations
Results
Location Privacy Concerns
Validation Results
IPvSeeYou vs MaxMine
IPvSeeYou Demonstration
IPvSeeYou Tool
Demonstration
Responsible Disclosure
Conclusion
Volunteers