Privacy Flaws In Chatroulette Expose Users

itwbennett writes "In a paper posted online this week, researchers from the University of Colorado at Boulder and McGill University outline three different types of attacks that could be launched against Chatroulette users. While the new research doesn't expose any gaping privacy holes, it does show how the service could be misused by determined criminals. For example, the researchers were able to use IP-mapping services to get a general idea of users' location (a public Web site, called Chatroulettemap.com already does this). Then by searching Facebook using information obtained in chats and comparing pictures, researchers were able to identify chatters. 'Even in a city as big as Chicago, you can drill down and find the person you're actually talking to,' said Richard Han, an associate professor with the University of Colorado who co-authored the paper."

No No No No No

[eldavojohn]

Privacy Flaws In Chatroulette Expose Users

Trust me, on Chatroulette it's the users that have been exposing themselves.

Won't work all the time...

[Bryansix]

For one simple reason. Facebook does not let you set your profile picture to a shot of your genitals.

This is news?

[Hoi Polloi]

So the security flaw is that by asking someone for personal information you can obtain personal information about them? This is called social engineering (or maybe just talking).

Not sure what you'd do with this anyway, go meet that masturbator you saw online?

Comment removed

[account_deleted]

Comment removed based on user account deletion

Re:This is news?

[Haffner]

In another paper posted online this week from the University of Colorado at Boulder, my hand hurts when I poke it with something sharp.

Um, OK.

[pushing-robot]

Next article: Privacy flaws In Public Streaking Expose Users

Re:No No No No No

[Anonymous Coward]

Hehe he said "drill down" hehe.

Re:Question about chatroulette

[nozzo]

Yeah I did but all he wanted to talk about was penises and overweight bald guys so I stopped it.

Re:Question about chatroulette

[Drakkenmensch]

Has anyone ever used it and engaged in an interesting conversation with a person who became a regular point of contact? Or is it all just penises and overweight bald guys?

Who says it can't be both?

researchers?

[z-j-y]

researchers in universities are seriously out of ideas of what to research

Re:No No No No No

[Anonymous Coward]

I was visiting a friend of mine in San Fran a few months ago. He got a new Apple laptop, so he was showing it to me. We tried out Chatroulette briefly, and the third session ended up being a close-up of some guy touching his penis. The first thing my friend wrote was "Jim, is that you? It's Freddy."

My friend recognized the other guy by his penis. Turns out they knew each other from a gym they both went to, where they'd seen other naked in the showers. They both thought it was a really funny coincidence to meet on Chatroulette like that.

Researchers found new feature

[iamhassi]

"... researchers were able to use IP-mapping services to get a general idea of user's location... Chatroulette is now testing a new feature called Localroulette, which connects people from specific cities with one another."

Congratulations researchers, you've discovered chatroulette's new features.

Please tell me taxpayers didn't pay for this research :( "... researchers from the University of Colorado at Boulder and McGill University ..."

DOH!

they weren't researching anything, network admin probably noticed IP logs of them spending all day on chatroulette [gizmodo.com] and they had to come up with some excuse.

*phone rings*
Person answering: Hello?
Admin: is this the research office of (BLANK)?
"Researcher": Yes it is
Admin: I'm the network admin for (insert "prestigious" university) and we've noticed someone in your office has spent the last 4 months on a website by the name of "chatroulette". Do you know anything about this?
"Researcher": Um.... what's the website?
Admin: Chatroulette
"Researcher": ..... no, no doesn't ring a bell
Admin: Well if you notice anyone please let us know. The website is known for inappropriate content (NSFW) [buzzhunt.co.uk] and we'll be monitoring the PC logins of the individuals and alert campus security once we know who is visiting the website.
"Researcher": OH Chatroulette! Oh yes I'm very familiar with that website, we're researching it
Admin: Research?
"Researcher": Yes research. We're... um, "probing" it's vulnerabilities, looking for "gaping holes" that "expose" users (chuckle)
Admin: gaping holes?
"Researcher": smiling Yes gaping holes... in security
Admin: Oh i see... well thank you for letting me know, I'll note this in the logs
"Researcher": You do that, have a good afternoon
Admin: You too

gaping privacy holes?

[ThisIsAnonymous]

gaping privacy holes

Why would that phrase ever be used when discussing Chatroulette.

Re:No No No No No

[vxice]

I'm guessing they cross reference the video of your genitals to the picture of your genitals on adultfriendfinder.com for a start on identifying person.

Re:Question about chatroulette

[dr_dank]

It's penises all the way down.

Re:Won't work all the time...

[mobby_6kl]

Maybe not, but facebook does let you search by email addresses [chatroulettefunny.com]!

Re:Yes

[wjousts]

Unfortunately, when asked, she said it's just overweight bald guys and penis'