This Week in Data #2019-1
Welcome to the first post in my weekly series of blog posts. We will be going through trending and relevant articles, tools, and tips around the topics of data science, digital privacy, security, and other tech topics. Here is an overview:
- Facebook's hidden image tracking
- Comprehensive Network penetration course for beginners (free)
- How to get started in Cyber Threat Intelligence
- "How Couples Meet"
- Link Analysis on Amazon, YouTube and Reddit
- Hate crime caught by auto-connected WiFi settings
Article: Facebook hiding tracking data in images
It goes without saying that Facebook has been in the news for its share of privacy and tracking related concerns. The following is very interesting but should not come as a surprise to anyone that has been paying attention. Facebook has been inserting "IPTC special instructions" which serve to enrich the metadata in an image. These codes can be used to track the spread of images both within and outside of the Facebook site and application. From an analytics point of view, I can see this being useful to analytics managers that look at the spread of images used in ads. From an information warfare point of view, this can be used to determine the origin of images used in disinformation campaigns on Facebook, Whatsapp, and Instagram. This is not the only thing Facebook does with images, it also classifies photos on both Instagram and the main Facebook site.
#facebook is embedding tracking data inside photos you download.
— Edin Jusupovic (@oasace) July 11, 2019
I noticed a structural abnormality when looking at a hex dump of an image file from an unknown origin only to discover it contained what I now understand is an IPTC special instruction. Shocking level of tracking.. pic.twitter.com/WC1u7Zh5gN
Facebook adds tracking data. Here's a bin comparison of the image I downloaded from facebook on the left and the source image on the right. Facebook stepped on the image compression but they sure did populate the exif data tag. I saw that FB has been doing this for years. pic.twitter.com/EzIBMLRhFJ
— DJ 🐲 (๑˃̵ᴗ˂̵)و 🃏 🎹🎛 (@dj_ir0ngruve) July 14, 2019
Facebook just broke, and revealed that is is scanning my photos using AI of some sort to ID what is in the pics. None of my images render and it now shows how they classify them! pic.twitter.com/6BMF9gtINW
— KF (@d0tslash) July 3, 2019
Tutorial: Beginner Network Penetration Testing course (free)
@thecybermentor on Twitter created a great free network penetration course on Youtube and Github. Anyone looking to break into this side of security should consider going through the course. The reviews and comments so far are stellar.
Happy to announce my Beginner Network Penetration Testing course video. You can find the full 15-hour video at https://t.co/xdXMSRLy1E
— The Cyber Mentor (@thecybermentor) July 12, 2019
You can find the GitHub repo with lesson plans/homework at: https://t.co/66X6ohFff3
Note: This is the Zero to Hero content minus AMA material
Tutorial: Getting started in Cyber Threat Intelligence (CTI)
Katie Nickels posted a pretty comprehensive guide for starting off in CTI. Her firm MITRE is one of the leaders in this field.
Today in my latest post, I share my top 10 recommendations for free resources to check out if you're getting started in #threatintel. I mixed it up with well-known classics as well as some lesser-known and newer sources - it was tough to choose just a few! https://t.co/weX4j9ry9k
— Katie Nickels (@likethecoins) July 11, 2019
Paper: How Couples Meet
Even though the internet has its share of negativity, at least it's helping people meet and find love. Read the Stanford study below to learn more.
"How Couples Meet"
— John Robb (@johnrobb) July 12, 2019
We are being rewired at a very, very deep level.
Stanford Study: https://t.co/fxrYgyFeST pic.twitter.com/x8tWuBnESt
Link: https://web.stanford.edu/~mrosenfe/Rosenfeld_et_al_Disintermediating_Friends.pdf
Tool: Link Analysis with Yasiv.com
Thanks to a tweet by @WebBreacher I was able to explore a really cool link analysis / data science tool built by @anvaka at Amazon. It allows you to search any product on Amazon.com and show you related products. For YouTube it will show you videos related to each other. Reddit search I couldn't get to work yet. The YouTube search feature is very useful to look at reccomendations when you search controversial topics. This is the 'YouTube Rabbithole' that a lot have written about, and Youtube has since changed their reccomendation engine to reccomend less relevant videos. Note: for the Amazon search you may have to refresh the page and solve a captcha for each new query. For the YouTube search you can still find controversial videos by searching terms that are used widely in the right-wing but not covered in media. I've attached an example below.
The https://t.co/dPhyCK6R9X Amazon (above), reddit, and YouTube visualizations are REALLY fun to play with!#osint #cyber #datascience #visualization #linkanalysis pic.twitter.com/p9ZtFxbeH4
— Micah (@WebBreacher) July 3, 2019


Article: Hate crime caught by auto-connected WiFi settings
A group of teens were caught vadalizing their school with hate symbols. They thought they were sneaky but their devices gave them away. Many people forget that WiFi can be used to track devices and people throughout enterprises and stores. The same can be done with bluetooth, the New York Times have a good article on this.
These white teens wore masks so they wouldn't get caught committing a hate crime.
— Jessica Contrera (@mjcontrera) July 9, 2019
Little did they know: When they snuck on campus to paint swastikas and slurs, their phones auto-connected to the school’s WiFi. Under their individual usernames.https://t.co/Vs9uwXyrzW pic.twitter.com/WM6cU1b29Y
Link: https://www.nytimes.com/interactive/2019/06/14/opinion/bluetooth-wireless-tracking-privacy.html