[LINK] PI discovers flaw in Google phone tracking system

[Stilgherrian]

On 05/02/2009, at 10:43 PM, Roger Clarke wrote:
> 2.  That risk is compounded by the power of self-reporting of  
> location.

Except that Google Latitude is not the first software to enable the  
reporting of a phone's GPS data to the Internet. Far from it.

Indeed, only last night I used InstaMapper.com to put my current  
location on a map. http://stilgherrian.com/location/ The application  
download and configuration took less than 10 mins from a standing  
start. I could do it again in under 5. That gave me the live tracking  
within InstaMapper's website. Adding the static map to the website  
tool another few minutes.

I imagine this sort of thing has been available in easier-to-install  
versions from the shops that supply the private investigator industry  
for some time. And I'll be their versions are simple to install so  
they run automatically at hpon boot-up and don't have a visible  
interface.

As I say, no NEW risk. Just an existing risk with Google's brand on  
the front.


> If you don't see that as an additional security or privacy risk, I
> for one wouldn't be hiring your services in that area!

I wouldn't hire me either. I'm too flaky. ;)


> Not up to your usual quality of stir, Stil  (:-)}

Possibly. It's late.

Stil


-- 
Stilgherrian http://stilgherrian.com/
Internet, IT and Media Consulting, Sydney, Australia
mobile +61 407 623 600
fax +61 2 9516 5630
Twitter: stilgherrian
Skype: stilgherrian
ABN 25 231 641 421