Young also said the attack can be done completely remotely as long as the attacker can get the victim to open a malicious link while connected to the same network as the device. In many cases, IP geolocation offers only a general idea of where the IP address may be based geographically. Craig Young, the researcher who discovered the flaw, says that "Although Google's app, which uses this functionality, implies that you must be logged into a Google account linked with the target device, there is, in fact, no authentication mechanism built into the protocol level".
Mr Young found he could access router location data stored on a Home or Chromecast gadget via a computer connected to the same network. When exploited, that weakness can reveal your specific location accurate to within a few feet by Google's geolocation lookup services.
While attackers can more easily obtain location data through less complicated means such as your IP address, that information is not very precise.
"I've been consistently getting locations within about 10 meters of the device", Young told independent security blogger Brian Krebs, who got an exclusive first look at Young's findings.
Google is working on to release a patch for a bug that reveals user's location.
Young created a video of the exploit in action, which has been successful in three environments and gleaned a precise street address on each occasion. When the researcher initially filed a bug report to Google describing the issue, the company dismissed the report, closing it with the message "Won't Fix [Intended Behavior]".
Why it matters: Practical applications stemming from the bug could include the possibility for more effective extortion or blackmail campaigns and highly targeted ads (for example, an advertiser could determine if a user is at work or home and serve different ads accordingly). "Threats to release compromising photos or expose some secret to friends and family could use this to lend credibility to the warnings and increase their odds of success". But when Krebs contacted Google about the location leak, the company reversed its decision to announce a software update would ship in mid-July 2018 to fix it. Of course Google knows where I am if I have a Chromecast or a Google Home device!
This allows the company to give you your location on its maps service, for instance, even when you are using a device with no Global Positioning System function, such as an old laptop.
The attack can be done remotely as long as the victim is connected to the same network as the device. "Although this does not by default prevent attacks from the IoT devices to the main network, it is likely that most naïve attacks would fail to even recognize that there is another network to attack". This method still needs just one internet connection - the routers keep the devices apart.
M'Baye Niang's strike secured victory on the hour, after a 37th-minute own goal handed Senegal the half-time lead. Poland and Senegal reasonably expect to advance out of Group H, making this first game monumentally important.
Tech giant Google is said to be working on its next wave of flagship smartphones Google Pixel 3 and Google Pixel 3 XL . Google Pixel 2 XL for Rs 9,999 - what's the catch? But the latest leak hints that this expectation may not be met.
Even Sanju Samson was dropped from India A's squad for the England A tour and was replaced by Ishan Kishan in the touring squad. Since a year ago , BCCI has made it mandatory for all the players to pass the test to get a place in the Indian team.
Amazon already sells a version of Alexa for workplaces, and has struck deals to place Alexa in cars and refrigerators. The Wynn Resorts chain in Las Vegas installed the Amazon Echo in around 5,000 hotel suites in 2016.
CCTV footage of the incident shows more than 10 people riding an escalator at a popular Chinese tourist spot in Huayin City. Emergency services rushed to the scene and a rescue operation was put into place to recover those buried under the debris.
What exactly those steps are won't become clear until June 25, so watch that page on that date to find out what you need to do. Now, AMD is firing back at Intel's celebratory release with a giveaway of its own, but with an interesting twist.
Draft Day trades to watch out for
If LeBron leaves this summer and then Leonard leaves next summer, the Cavs will nearly surely be one of the league's worst teams. So, if a deal for Walker or another player in the works for the No. 8 pick, we probably won't hear about it until draft night.
Gunshot victim covered with sheet starts breathing again
Sinai Hospital by his girlfriend and is in stable condition, police said. "Paramedics put down that information", Santiago said. He said paramedics thought the teenager was dead, and covered him with a sheet before moving on to another shooting victim.
Fewer American Adults Are Smoking Than Ever Before
But just how safe are these trendy e-cigs? Fewer U.S. adults are smoking cigarettes, according to new government data . It was common almost everywhere - in office buildings, restaurants, airplanes and even hospitals.
Captain Kane gives England 2-1 win over Tunisia
Harry Kane sent England fans into a frenzy with his 91st-minute victor in England's World Cup opener against Tunisia . It couldn't start any better for an England player to get any press off his back by scoring a goal in the 11 minute.
England post new ODI record total
England , already 2-0 up in the series, smashed 79 runs off the first 10 overs as both openers cruised to individual fifties. Alex Hales made 147 off 92 balls and Jonny Bairstow 139 off 92.
Child scales 'un-climbable' pool ladder in video
Pools can be unsafe for young children and these parents want to spread the word about how you can never be too careful. The ladder was locked, covering the steps, but Cody was able to grab onto the slits in the door and pull himself up.
Greece, Macedonia Sign Historic Deal To End Name Dispute
Across the border, Zaev has also met with opposition, with President Gjorge Ivanov saying he will not sign off on the agreement. VMRO-DPMNE leader Hristijan Mickoski urged Dimitrov to resign due to the "capitulation, which you think is a victory".
Stocks open sharply lower on trade tiff
US stock markets are opening sharply lower Tuesday as tensions over trade between the USA and China seem closer to a boil. The S&P index recorded two new 52-week highs and three new lows, while the Nasdaq recorded 28 new highs and 22 new lows.