Category Archives: LocationSmart

Verizon to Stop Sharing Customer Location Data With Third Parties

Posted on by

In the wake of a scandal involving third-party companies leaking or selling precise, real-time location data on virtually all Americans who own a mobile phone, the four major wireless carriers have responded to requests from a U.S. senator for more details about how the carriers are managing access to this extremely sensitive information. While three out of four providers said they had cancelled data sharing agreements with some of the offending companies, only one — Verizon — pledged to terminate all of them and initiate a wholesale review of their location data-sharing practices. Continue reading Verizon to Stop Sharing Customer Location Data With Third Parties→

Verizon Says It Will Stop Selling US Phone Data That Ended Up in Hands of Cops

Posted on by

Verizon and other telcos have been selling phone location data to companies catering to marketers and low level law enforcement. Now, Verizon says it is cutting ties with certain firms that abused that data access. Continue reading Verizon Says It Will Stop Selling US Phone Data That Ended Up in Hands of Cops→

The Shared Security Podcast Weekly Blaze – Real-time Location Tracking, VPNFilter Router Malware, Apple’s GDPR Updates

Posted on by

This is the Shared Security Weekly Blaze for May 28, 2018 sponsored by Security Perspectives – Your Source for Tailored Security Awareness Training and Assessment Solutions, Silent Pocket and CISOBox.  This episode was hosted … Continue reading The Shared Security Podcast Weekly Blaze – Real-time Location Tracking, VPNFilter Router Malware, Apple’s GDPR Updates→

Why Is Your Location Data No Longer Private?

Posted on by

The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time location data and customer account details. In the wake of … Continue reading Why Is Your Location Data No Longer Private?→

Mobile Giants: Please Don’t Share the Where

Posted on by

Your mobile phone is giving away your approximate location all day long. This isn’t exactly a secret: It has to share this data with your mobile provider constantly to provide better call quality and to route any emergency 911 calls straight to your lo… Continue reading Mobile Giants: Please Don’t Share the Where→

LocationSmart bug allowed for leak of location data for nearly any U.S. phone

Posted on by

A company that provides other companies with cell phone location-tracking services had an API on its website that inadvertently allowed anyone to freely look up the location of almost any cell phone in the United States. The bug was in a demo that the company, LocationSmart,  posted on its website. The demo was to show people that it could approximate their phones’ locations using nearby cell towers. A report published Thursday by independent security journalist Brian Krebs shows that it would have been easy for someone to abuse the demo to secretly locate nearly any U.S. phone. LocationSmart is a location-as-a-service company that gives its customers the ability to “track assets, connect with employees and engage with customers through one secure interface,” according to its website. The demo sent a text message to a device to get permission from its owner before pinging the nearest cell phone tower in order to send […]

The post LocationSmart bug allowed for leak of location data for nearly any U.S. phone appeared first on Cyberscoop.

Continue reading LocationSmart bug allowed for leak of location data for nearly any U.S. phone→

Tracking Firm LocationSmart Leaked Location Data for Customers of All Major U.S. Mobile Carriers in Real Time Via Its Web Site

Posted on by

LocationSmart, a U.S. based company that acts as an aggregator of real-time data about the precise location of mobile phone devices, has been leaking this information to anyone via a buggy component of its Web site — without the need for any password or other form of authentication or authorization — KrebsOnSecurity has learned. The company took the vulnerable service offline early this afternoon after being contacted by KrebsOnSecurity, which verified that it could be used to reveal the location of any AT&T, Sprint, T-Mobile or Verizon phone in the United States to an accuracy of within a few hundred yards. Continue reading Tracking Firm LocationSmart Leaked Location Data for Customers of All Major U.S. Mobile Carriers in Real Time Via Its Web Site→