Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Every Contact Leaves a Trace

Ken Westin

OSINTTrack 252 minBeginnerOpen on YouTube ↗

Where

Track 2
CactusCon 12

Duration

52 min

Traces how stolen-device recovery and photo metadata uncovered organized crime, and how the same methods threaten privacy.

Summary

Ken Westin opens with the idea that a crime almost always leaves something behind, and that modern life produces a steady stream of records, from Wi-Fi connections and carrier logs to images and breached data that no one fully controls. He describes how his work began with a USB tool that reported on the devices it ran from, which he built to help a company block data theft and then turned toward recovering stolen equipment.

The middle of the talk walks through the cases. A device agent helped recover gear for a university, a thermal camera maker and a school district, and a laptop tracker that captured webcam photos and Wi-Fi-based location led to a fencing operation and a Russian crime group. Later work covered phone tracking, where photos carried better GPS data than the carrier-style location polls, and a search engine for camera serial numbers stored in EXIF metadata, built by mining billions of photos from Flickr and other sites. Other examples included a photographer's own posts giving away his location, and a staged smart home test that showed how default Wi-Fi passwords exposed cameras.

He closes by arguing that the same techniques serve stalkers, authoritarian governments and commercial spyware vendors, so investigators need to think hard about who receives the data. He recommends reducing your own digital footprint, handing evidence to law enforcement rather than acting alone, and relying on community collaboration when an investigation stalls.

Related talks