Welcome!

News Feed Item

Hold That Yak: NYU Researchers Discover Clues For Identifying Yik Yak Users On College Campuses

BROOKLYN, N.Y., Oct. 19, 2016 /PRNewswire-USNewswire/ -- Experiments by researchers at the NYU Tandon School of Engineering and NYU Shanghai have successfully cracked the veil of anonymity in Yik Yak, an ostensibly anonymous social media application.

NYU Tandon School of Engineering Logo (PRNewsFoto/NYU Tandon School of Engineering)

Yik Yak thrives on anonymity. Whether it's praise for a local restaurant or, in a darker use of the application, a complaint or bullying comment about teachers or peers, Yik Yak users trust that their words are untraceable. Even Yik Yak's new policy requiring user pseudonyms preserves anonymity.

Yik Yak is particularly popular on college campuses and has drawn criticism as a tool for harassment. The app has been downloaded more than a million times on Android mobile devices alone.

Keith Ross, the Leonard J. Shustek Distinguished Professor of Computer Science at NYU Tandon and Dean of Engineering and Computer Science at NYU Shanghai, will present the paper, You Can Yak but You Can't Hide: Localizing Anonymous Social Network Users, at the ACM (Association for Computing Machinery) Internet Measurements Conference in Santa Monica, California, this November.

Ross, his students, and colleagues from East China Normal University tested Yik Yak's susceptibility to localization attacks, reasoning that if it is possible to locate the geographical origin of a comment, or "yak," as it is commonly known, it may be possible to identify the person who posted it.

Experiments showed that yaks can, in fact, be localized through a fairly simple machine learning algorithm that an undergraduate computer science student could program and run in a matter of hours.

Ross and his collaborators localized yaks to within 300 feet and in one experiment identified the college dormitories from which yaks originated with 100 percent accuracy. 

"The integrity of user anonymity is central to Yik Yak and similar anonymous social media apps, and this research shows that it's possible for a third party to compromise it," Ross said. "At this stage, we can narrow down a location to a building, which when combined with other side information could potentially de-anonymize the author of any given yak."

Ross and his team, which includes East China Normal University Professor Haifeng Qian and doctoral student Minhui Xue, and NYU Shanghai undergraduates Cameron Ballard, Kelvin Liu, Carson Nemelka, and Yanqiu Wu, conducted their experiments from Shanghai. They deployed Yik Yak on two U.S. college campuses using a common technique to trick the GPS in a smartphone into believing it was on those campuses. This was important because a yak appears only on smartphones in the vicinity of where the yak is sent.

The researchers designed an automated system to "place" themselves (through GPS coordinates) at many different locations in and around the campuses and record which yaks were available at each location. The system then used machine learning to process the recorded data to predict where each of the yaks was posted.

Ross explained that college students often post disparaging yaks about professors or fellow students. "It wouldn't be difficult for a professor to figure out the dorm from which a derogatory yak was posted, then couple this information with student housing information to de-anonymize the yak, and that's concerning," he said. 

The researchers note that their experiments used the same public information collected by other users of Yik Yak, and that they attempted to analyze only the location of messages generated by members of the research team. No outside participants were involved.

Ross and his colleague informed Yik Yak about the potential for localization attacks and recommended several potential privacy enhancements. Among them is improving localization authentication for users, which would make it easier to identify and block users employing forged GPS coordinates. Another strategy would be for Yik Yak to always display the exact same set of messages no matter where the app is being used on a campus.

About the NYU Tandon School of Engineering
The NYU Tandon School of Engineering dates to 1854, when the New York University School of Civil Engineering and Architecture as well as the Brooklyn Collegiate and Polytechnic Institute (widely known as Brooklyn Poly) were founded. Their successor institutions merged in January 2014 to create a comprehensive school of education and research in engineering and applied sciences, rooted in a tradition of invention, and entrepreneurship and dedicated to furthering technology in service to society. In addition to its main location in Brooklyn, NYU Tandon collaborates with other schools within the country's largest private research university and is closely connected to engineering programs in NYU Abu Dhabi and NYU Shanghai. It operates business incubators in downtown Manhattan and Brooklyn and an award-winning online graduate program. For more information, visit http://engineering.nyu.edu.

facebook.com/nyutandon 
@nyupoly

Logo - http://photos.prnewswire.com/prnh/20151013/276541LOGO

 

To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/hold-that-yak-nyu-researchers-discover-clues-for-identifying-yik-yak-users-on-college-campuses-300347109.html

SOURCE NYU Tandon School of Engineering

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
SYS-CON Events announced today that Interoute has been named “Bronze Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Interoute is the owner operator of Europe's largest network and a global cloud services platform, which encompasses over 70,000 km of lit fiber, 15 data centers, 17 virtual data centers and 33 colocation centers, with connections to 195 additional partner data centers. Our full-service Unifie...
Cloud promises the agility required by today’s digital businesses. As organizations adopt cloud based infrastructures and services, their IT resources become increasingly dynamic and hybrid in nature. Managing these require modern IT operations and tools. In his session at 20th Cloud Expo, Raj Sundaram, Senior Principal Product Manager at CA Technologies, will discuss how to modernize your IT operations in order to proactively manage your hybrid cloud and IT environments. He will be sharing bes...
SYS-CON Events announced today that Ocean9will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Ocean9 provides cloud services for Backup, Disaster Recovery (DRaaS) and instant Innovation, and redefines enterprise infrastructure with its cloud native subscription offerings for mission critical SAP workloads.
SYS-CON Events announced today that Systena America will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Systena Group has been in business for various software development and verification in Japan, US, ASEAN, and China by utilizing the knowledge we gained from all types of device development for various industries including smartphones (Android/iOS), wireless communication, security technology and IoT serv...
Internet of @ThingsExpo, taking place October 31 - November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with the 21st International Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. @ThingsExpo Silicon Valley Call for Papers is now open.
SYS-CON Events announced today that Twistlock, the leading provider of cloud container security solutions, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Twistlock is the industry's first enterprise security suite for container security. Twistlock's technology addresses risks on the host and within the application of the container, enabling enterprises to consistently enforce security policies, monitor...
This talk centers around how to automate best practices in a multi-/hybrid-cloud world based on our work with customers like GE, Discovery Communications and Fannie Mae. Today’s enterprises are reaping the benefits of cloud computing, but also discovering many risks and challenges. In the age of DevOps and the decentralization of IT, it’s easy to over-provision resources, forget that instances are running, or unintentionally expose vulnerabilities.
Five years ago development was seen as a dead-end career, now it’s anything but – with an explosion in mobile and IoT initiatives increasing the demand for skilled engineers. But apart from having a ready supply of great coders, what constitutes true ‘DevOps Royalty’? It’ll be the ability to craft resilient architectures, supportability, security everywhere across the software lifecycle. In his keynote at @DevOpsSummit at 20th Cloud Expo, Jeffrey Scheaffer, GM and SVP, Continuous Delivery Busine...
While some vendors scramble to create and sell you a fancy solution for monitoring your spanking new Amazon Lambdas, hear how you can do it on the cheap using just built-in Java APIs yourself. By exploiting a little-known fact that Lambdas aren’t exactly single threaded, you can effectively identify hot spots in your serverless code. In his session at 20th Cloud Expo, David Martin, Principal Product Owner at CA Technologies, will give a live demonstration and code walkthrough, showing how to ov...
SYS-CON Events announced today that Enzu will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Enzu’s mission is to be the leading provider of enterprise cloud solutions worldwide. Enzu enables online businesses to use its IT infrastructure to their competitive ad...
Everywhere we turn in our industry we can find strong opinions about the direction, type and nature of cloud’s impact on computing and business. Another word that is used in every context in our industry is “hybrid.” In his session at 20th Cloud Expo, Alvaro Gonzalez, Director of Technical, Partner and Field Marketing at Peak 10, will use a combination of a few conceptual props and some research recently commissioned by Peak 10 to offer a real-world consideration of how the various categories of...
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm. In his Day 3 Keynote at 20th Cloud Expo, Chris Brown, a Solutions Marketing Manager at Nutanix, will explore t...
SYS-CON Events announced today that SoftLayer, an IBM Company, has been named “Gold Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. SoftLayer, an IBM Company, provides cloud infrastructure as a service from a growing number of data centers and network points of presence around the world. SoftLayer’s customers range from Web startups to global enterprises.
SYS-CON Events announced today that CollabNet, a global leader in enterprise software development, release automation and DevOps solutions, will be a Bronze Sponsor of SYS-CON's 20th International Cloud Expo®, taking place from June 6-8, 2017, at the Javits Center in New York City, NY. CollabNet offers a broad range of solutions with the mission of helping modern organizations deliver quality software at speed. The company’s latest innovation, the DevOps Lifecycle Manager (DLM), supports Value S...
SYS-CON Events announced today that Peak 10, Inc., a national IT infrastructure and cloud services provider, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Peak 10 provides reliable, tailored data center and network services, cloud and managed services. Its solutions are designed to scale and adapt to customers’ changing business needs, enabling them to lower costs, improve performance and focus intern...