We introduce the area of remote physical device fingerprinting, or fingerprinting a physical device [...] remotely, and without the fingerprinted device’s known cooperation. We accomplish this goal by exploiting small, microscopic deviations in device hardware: clock skews. [...] Our techniques report consistent measurements when the measurer is thousands of miles, multiple hops, and tens of milliseconds away from the fingerprinted device, and when the fingerprinted device is connected to the Internet from different locations and via different access technologies. Further, one can apply our passive and semi-passive techniques when the fingerprinted device is behind a NAT or firewall, and also when the device’s system time is maintained via NTP or SNTP. One can use our techniques to obtain information about whether two devices on the Internet, possibly shifted in time or IP addresses, are actually the same physical device.
Et évidemment les TCP timestamps sont activées par défaut sur Ubuntu. Je suis sûr qu'en cherchant un peu on va trouver qu'au moins un des chercheurs qui a sorti ce papier est sud africain.
pertinent adj. Approprié : qui se rapporte exactement à ce dont il est question.
[^] # Re: Interêt ?
Posté par Krunch (courriel, site web personnel) . En réponse au journal Ubunteros, Comptez vous !. Évalué à 5.
We introduce the area of remote physical device fingerprinting, or fingerprinting a physical device [...] remotely, and without the fingerprinted device’s known cooperation. We accomplish this goal by exploiting small, microscopic deviations in device hardware: clock skews. [...] Our techniques report consistent measurements when the measurer is thousands of miles, multiple hops, and tens of milliseconds away from the fingerprinted device, and when the fingerprinted device is connected to the Internet from different locations and via different access technologies. Further, one can apply our passive and semi-passive techniques when the fingerprinted device is behind a NAT or firewall, and also when the device’s system time is maintained via NTP or SNTP. One can use our techniques to obtain information about whether two devices on the Internet, possibly shifted in time or IP addresses, are actually the same physical device.
Et évidemment les TCP timestamps sont activées par défaut sur Ubuntu. Je suis sûr qu'en cherchant un peu on va trouver qu'au moins un des chercheurs qui a sorti ce papier est sud africain.
pertinent adj. Approprié : qui se rapporte exactement à ce dont il est question.