News for hackers. Stuff that matters.
Re:US cell carriers are selling access to real-time phone lo... by wpietri on Wednesday May 16, 2018 @10:11AM (#17082496)
For those who want to try out LocationSmart, you can use it here: https://www.locationsmart.com/try/

They were about two blocks off, and located me by cell tower. Apparently they don't have (or at least don't admit to having) A-GPS level data for me.

Re:US cell carriers are selling access to real-time phone lo... by ballenf on Wednesday May 16, 2018 @12:14PM (#17083553)
Tested and same result.

I have a strong suspicion that it intentionally places you some distance from where it knows you actually are. Unless there is some underlying reason why it would never be 100% accurate -- I've seen dozens of people post their results and every time it's 1-300 meters off.

And it's not just "no one tests while under the cell tower" because the location it gave me was 150 meters in the opposite direction of the cell tower that I can see out my window. And the location it gave was smack in the middle of a neighborhood I know well and know to be free of cell towers. Or I'm just paranoid.

Re:US cell carriers are selling access to real-time phone lo... by mastofaces on Wednesday May 16, 2018 @12:44PM (#17083888)
I just used the internet site it said up to 14 miles off in accuracy on the results page. It was actually 4 miles off with my wifi off and GPS off and ZLAT off. I'm also pretty sure the location it picked is very close to an existing cell tower.
Re:US cell carriers are selling access to real-time phone lo... by forapurpose on Wednesday May 16, 2018 @02:58PM (#17085369)
What is ZLAT?
Re:US cell carriers are selling access to real-time phone lo... by SahAssar on Wednesday May 16, 2018 @06:22PM (#17086959)
I'm guessing s/he meant IZat: https://www.qualcomm.com/products/izat
Re:US cell carriers are selling access to real-time phone lo... by Distribution on Thursday May 17, 2018 @01:41PM (#17093519)
Did you have WiFi on? Several companies have basically mapped (wardriving) nearly every wifi spot in the US and have correlated that with GPS. The vast majority of these wifi spots never, or rarely, move. By using several known wifi locations and their given latency, you can accurately predict location without cellular or GPS, like, down to the tens of meters.
Re:US cell carriers are selling access to real-time phone lo... by dmichulke on Wednesday May 16, 2018 @10:26AM (#17082639)
I'm somewhat weary. This might be the final missing piece to connect your mobile phone number to your mobile browser user agent, or even worse, your desktop browser agent.
Re:US cell carriers are selling access to real-time phone lo... by lotsofpulp on Wednesday May 16, 2018 @10:53AM (#17082859)
If the mobile carriers are selling your real time location data, I don't think there is much stopping them from also selling your browser user agents.
Re:US cell carriers are selling access to real-time phone lo... by tome on Wednesday May 16, 2018 @11:02AM (#17082944)
I believe that dmichulke means that when the phone number is linked to the user agent it's much more dangerous than when they are sold without that connection being known.
Re:US cell carriers are selling access to real-time phone lo... by tome on Wednesday May 16, 2018 @10:32AM (#17082690)
*wary
Re:US cell carriers are selling access to real-time phone lo... by RobotCaleb on Wednesday May 16, 2018 @10:48AM (#17082818)
Or leery
Re:US cell carriers are selling access to real-time phone lo... by tome on Wednesday May 16, 2018 @10:51AM (#17082842)
Interesting. I wonder if the mistaken use of "weary" comes from a combination of "wary" and "leery"! I always assumed it was because "wear" is pronounced the same as the first syllable of "wary". Unfortunately "weary" is already a word and "I'm wary of X" has a different meaning from "I'm weary of X", but similar enough that a lot of confusion could result.
Re:US cell carriers are selling access to real-time phone lo... by sjs7007 on Wednesday May 16, 2018 @09:37PM (#17087996)
Just tried it and was pretty accurate for me as well. How is it even legal for our cell phone providers to sell this data...?
Re:US cell carriers are selling access to real-time phone lo... by kalleboo on Thursday May 17, 2018 @12:23AM (#17088704)
You agreed to it when you signed the terms of service
Re:US cell carriers are selling access to real-time phone lo... by PeterisP on Thursday May 17, 2018 @03:26AM (#17089461)
Laws can and should override terms of service. The question of why it's legal isn't about contracts, but about basic privacy rights enforced (or not) by the legal system.
Re:US cell carriers are selling access to real-time phone lo... by kevcampb on Wednesday May 16, 2018 @10:57AM (#17082900)
Can you post the SMS opt-in message you received? Curious as to whether this is exploitable as well
Re:US cell carriers are selling access to real-time phone lo... by johnpowell on Wednesday May 16, 2018 @11:49AM (#17083346)
LocationSmart: Reply YES or YES LS to confirm consent for cloud location & messaging demo. Reply HELP for help, Reply STOP to cancel. Msg&Data Rates may apply.

That is what I was sent.

Re:US cell carriers are selling access to real-time phone lo... by kevcampb on Wednesday May 16, 2018 @11:00AM (#17082934)
I'm betting the opt-in is something along these lines

"FirstName LastName wants to obtain your location..."

Also betting that you can put 160 characters into those fields, so effectively a blank SMS is received

Betting further still that you can just spoof the SMS reply

Re:US cell carriers are selling access to real-time phone lo... by bgw on Wednesday May 16, 2018 @09:49PM (#17088059)
mine was 4.5 miles off