LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by nneonneo on Thursday May 17, 2018 @06:04PM (#17096438)

I definitely do not assume that I'm the first to find this, only the first to actually get it taken down. Worse, as the try site's been up since at least Jan 2017, that's nearly 18 months of exposure.

We won't know what the real exposure level was unless someone asks LocationSmart very persuasively.

[ Parent | on HN ]

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by bigiain on Thursday May 17, 2018 @09:17PM (#17097861)

Anybody know a EU citizen in the US who'd be prepared to request how often their data's been accessed using the GDPR regs?

[ Parent | on HN ]

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by chatmasta on Thursday May 17, 2018 @06:08PM (#17096475)

I highly doubt they even know.

[ Parent | on HN ]

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by nneonneo on Thursday May 17, 2018 @06:37PM (#17096722)

Ideally, they have access logs (for the web API, their backend location requests, or both) that could be used to detect patterns of misuse. Unfortunately, since their API is exclusively POST, the web server access logs will be less useful, but they could be used to detect e.g. direct API queries that skip the consent request.

[ Parent | on HN ]