News for hackers. Stuff that matters.

A comment on LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time. Parent comment

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by apetresc on Thursday May 17, 2018 @05:33PM (#17096125)
Wait, yesterday? And the fix is already deployed to production today? That's either some truly impressive engineering from a company that made a freshman-year-level security mistake, or whatever patch they put in place to fix this is just as leaky as the original bugged version and it's just a matter of time.
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by gowld on Thursday May 17, 2018 @05:41PM (#17096197)
Theory: Devops disabled the security flag on the JSON API, in order to perform integration tests, then didn't enabled it until reminded.
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by zodPod on Thursday May 17, 2018 @05:53PM (#17096324)
This for sure! My theory has also been that it's possible they literally just needed to add "if (subscriptionApproved) {" to the top. Not exactly a ton of code!
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by nneonneo on Thursday May 17, 2018 @05:46PM (#17096249)
They just killed the try page entirely. It's now a redirect to the home page. Hopefully they don’t try to bring that page back up without fixing all the bugs...
[ Parent | on HN ]