Over the past few years I have developed and used technologies that help recover stolen devices ranging from laptops, cell phones, iPods, flash drives and even high end digital cameras. One tool was CameraTrace which is a massive database of camera serial numbers discovered via distributed bots that scan popular photo sharing and social media websites extracting serial numbers and other data from the metadata of images. The tool has led to the recovery of several stolen cameras and is being utilized by law enforcement agencies across the country including the Homeland Security Investigations Cyber Crimes Center (HSI C3) Child Exploitation Investigations Unit who is using it along with several other sophisticated tools to help track down child pornographers and pedophiles many times before they are able to hurt a child.

1. KENWESTIN
kwestin@gmail.com
kwestin
dv8.io
PICTURE THIS
TRACKINGTHIEVES, PEDOPHILES AND MORE WITH IMAGE METADATA

2. EXIF
 Extensible Image Format

3. SMILE YOU’RE ON STOLEN LAPTOP CAMERA!

4. Source: 1000memories.com

5. Source: 1000memories.com

6. STOLEN PHONE SELFIES

7. ENHANCE!

8. Exif Data
• Exchangeable Image File Format
• Data in images, video and audio
• Cell phones embed GPS coordinates
• High end digital cameras embed
serial numbers
•Time Stamp

9. Free Tool: ExifScan.com

10. Exif = Who, Where & When

11. High School Photo Bomber

12. Oh Dear! John

13. Not So Anonymous

14. Nudes From Hacked Phone? Nope.
Blackberry Bold 9000
October, 12, 2010 at 8:02PM
300px/inch
Progressive DCT Scanning

15. EXIF EVERYWHERE!
 Flickr
 500px
 Twitpic
 Tumblr
 Blogger
 Panoromio
 Tumblr
 Picasa
 Yfrog
 Twitter

16. Experiment – Distributed Scan

17. John Heller

19. Theft List

20. Creepy
http://ilektrojohn.github.io/creepy/

21. Wedding Crasher

22. Law Enforcement Use
 Free for law enforcement
 32 agencies currently
 HSI Cyber Crimes Center (C3)
Child Exploitation Investigations Unit

24. Next Steps
 Scaling database and bots
 Converted to new site Exif.io
 Network Redux donating servers
 More complex scanning, DeepWeb, Silk Road
 API Integration with agency tools
 Integrate data from other services

25. Thank You
KenWestin
kwestin@gmail.com