News for hackers. Stuff that matters.

A comment on LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time. Parent comment

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by netsec_burn on Thursday May 17, 2018 @04:45PM (#17095545)
That was unbelievable, nice find. Hope you share a POC on Github of how trivial it was. Welcome to the future, where an unauthenticated API by a company can tell you the position of anyone.
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by privacypoller on Thursday May 17, 2018 @05:44PM (#17096227)
from https://www.locationsmart.com/platform/privacy

First Sentence: >> LocationSmart has built the most secure LBS location data exchange available today.

They go on:

>> Privacy and security are paramount in LBS services. Locking down privacy is not only core to our brand, it's also our unwavering business practice.

what a crock

[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by dsl on Thursday May 17, 2018 @05:58PM (#17096374)
> the most secure LBS location data exchange available today

To be fair, they are not wrong. I looked into getting real time cell location data a while back, and the security was basically IP whitelisting.

[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by sk5t on Thursday May 17, 2018 @06:59PM (#17096895)
The old "We take privacy and security very seriously" line.

But for some reason, access control has something to do with LocationSmart's entity body serialization format... hmm, okay then.

[ Parent | on HN ]