Computer and Internet Protocol Address Verifier
Die EFF veröffentlicht Dokumente über das FBI Tool “Computer and Internet Protocol Address Verifier” (CIPAV).
CIPAV collects the following information:
IP Address, Media Access Control (MAC) address, “Browser environment variables”, Open communication ports, List of the programs running, Operating system type / version and serial number, Browser type and version, Language encoding, The URL that the target computer was previously connected to, Registered computer name, Registered company name, Currently logged in user name, Other information that would assist with “identifying computer users, computer software installed, [and] computer hardware installed”
Bei Wired liest man:
In the Josh Glazebrook case, the FBI sent its program specifically to Glazebrook’s then-anonymous MySpace profile, Timberlinebombinfo.(…) Since there’s no evidence the CIPAV was crafted specifically to target MySpace, my money is on a browser or plug-in hole, activated through the web-based stored messaging system, which allows one MySpace user to send a message to another’s inbox. The message can include HTML and embedded image tags.