News for hackers. Stuff that matters.

A comment on LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time. Parent comment

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by nneonneo on Thursday May 17, 2018 @07:53PM (#17097329)
The first request is to "requesttype=statusreq.json", returning a JSON object, and the second to "requesttype=locreq" returning XML. On a whim I decided to try and get JSON location data out (I like JSON better anyway), and found that the two formats did not exhibit identical behaviour. On exploring that further, I found the consent bypass bug.
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by ironjunkie on Thursday May 17, 2018 @09:16PM (#17097856)
I'm impressed by the amount of good guesses you had to get there. Good job!
[ Parent | on HN ]