LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by txcwpalpha on Thursday May 17, 2018 @05:22PM (#17096015)

Under the ridiculously broad scope of the CFAA, that doesn't matter. The CFAA can be (and has been) twisted to prosecute people that do anything to a computer system that they do not own if the system owner could even remotely perceive said action as harmful. It's been used in the past to prosecute security researchers for accessing publicly available websites because the website owners claimed that they weren't "meant" to be public, they were only publicly accessible to make it easier for the actually "authorized" people to access them.

Even doing something like an nmap or a simple ping against a server that you're "not supposed to" could put a target on your back from an overzealous prosecutor.

See https://www.theguardian.com/technology/2014/may/29/us-cyberc...

[ Parent | on HN ]

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by chatmasta on Thursday May 17, 2018 @05:53PM (#17096327)

If we want to be really pedantic here, didn’t LocationSmart violate the CFAA? Their system queried the location of users’ devices without their consent. Does tower triangulation count as accessing the device?

[ Parent | on HN ]

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by roywiggins on Thursday May 17, 2018 @06:29PM (#17096660)

I believe the flow of info goes:

phone--carrier--LocationSmart.

The carrier determines the location of the phone because it's a cell phone. The Carrier provides the information to LocationSmart. There's no querying of the devices by LocationSmart per se.

[ Parent | on HN ]