#DigitalSherlocks, Geolocation, and the power of Open Source
An Open Source hobbyist explains how he was able to locate an Oslo window
#DigitalSherlocks, Geolocation, and the power of Open Source
Last week on January 12th Director of the Atlantic Council’s Digital Forensic Research Lab Maks Czuperski was giving a speech on disinformation and the power of Open Source and Digital Forensic Research at the Norwegian Atlantic Committee. To highlight his point on the power of Open Source he posted a Geolocation Challenge at the start of the talk, prompting the twitterverse to identify his location with only a single photo to go on.
By the end of the talk Czuperski’s location had been identified down to the exact position of the window his picture had been taken from. Michael Henriksen was one the first to successfully geolocate the picture. Below is a piece Henriksen wrote detailing his methods, reposted with permission from his blog.
The other day while checking my Twitter feed, I came across an interesting retweet from Elliot Higgins, the founder of Bellingcat:
This looked like a fun challenge and being the Open Source and Digital Forensics geek that I am, I couldn’t let it pass. Here is how I geolocated Maks Czuperski:
First thing was of course to get a copy of the image. Right-click and Copy Image Address gave me a good 2048x1536px version where details could be picked out.
The location did not look familiar to me and there were no famous buildings in the background, readable street signs or other easy wins to quickly figure out the location. The building across the plaza did have a kind of interesting shape and colors, so the first thing I tried was to cut out a piece of the picture with part of the building clearly visible without obstructions, and upload it to Google’s reverse image search. It is quite impressive, and almost eerie, what Google can recognize in images. This time however, I had no luck. I also tried with a crop of the walkway pattern in the lower area of the picture, but no luck there either.
Next step was to zoom in on the image and comb it for any details that could give me a hint to its location. This was when I spotted the store signs in the lower right corner of the image:
An Expert store is visible in the image.
I was lucky to know that Expert is an electronics store from my time living in Denmark and, assuming that Expert only has stores in Denmark, I wondered if it could be somewhere in Copenhagen perhaps. A quick Google search led me to the company’s Wikipedia article which stated that Expert operates in several countries a part from Denmark:
- Norway
- Denmark
- Sweden
- Faroe Islands
- Åland Islands
- Finland
- Estonia
- Belgium
- Germany
- Greece
- Ireland
- France
- Austria
- Czech Republic
- Iceland
- Italy
- The Netherlands
- Portugal
- Spain
- Slovakia
- Australia/New Zealand
- Croatia
- Hungary
This made the list of potential places quite a bit bigger, but at least it was narrowed down to a handful of countries. I combed through the picture once more to find any other details I could pair with this information and pretty quickly spotted a sign for a place called “Gold Mountain” right next to the Expert shop:
I had never heard of Gold Mountain before, and it was my hope that this would be a bit more unique than Expert. I made the assumption that he was most likely in a capital city, or at least a bigger city, in one of the countries where Expert operates. My plan was now to perform a search for Gold Mountain combined with the capital city name for each country in the list:
Bingo! I was lucky that the capital for the first country in the list yielded a result that looked like the right place. The Google Streetview image to the right of the search results looked like it had the funnily shaped building in the background, and sure enough, clicking on it landed me straight on the plaza in the picture!
I pretty quickly determined the direction that the picture was taken from and tweeted at Maks Czuperski:
After a while he replied and asked me to be more precise. I tried to narrow it down further:
I managed to narrow it down to a couple of windows where the picture could have been taken from, which I think was pretty cool. It was a super fun exercise and I wish someone would arrange daily or weekly geolocation challenges like this!
If you find this sort of stuff interesting, you should definitely check out Bellingcat’s articles and guides. In case you haven’t heard of them, here’s a short description of what they are about, from their own website:
Bellingcat uses open source and social media investigation to investigate a variety of subjects, from Mexican drug lords to conflicts being fought across the world. Bellingcat brings together contributors who specialise in open source and social media investigation, and creates guides and case studies so others may learn to do the same.
As a little bonus to my investigation, I later came across the following tweet:
The picture shows Maks Czuperski doing a presentation on geolocation stuff at the Norwegian Atlantic Committee. He apparently used his geolocation challenge tweet as part of his presentation, to demonstrate how quickly someone could find him. Pretty cool!
Other contributors engaged in the search as well, with one user identifying the exact window the picture had been taken from:
You're in the office of Den norske Atlanterhavskomite Fridtjof Nansens plass 8, 0160 Oslo. pic.twitter.com/Ed1rABl37S
— Timmi Allen (@Timmi_Allen) January 12, 2017