179
How commercially-available phone location data is used by ICE (and other law enforcement agencies) (lemmy.ml)
submitted 10 months ago by to c/privacy@lemmy.ml
11 comments fedilink hide all child comments
 

screenshot of text: The material does not say how Penlink obtains the smartphone location data in the first place. But surveillance companies and data brokers broadly gather it in two different ways. The first is from small bundles of code included in ordinary apps called software development kits, or SDKs. SDK owners then pay the app developers, who might make things like weather or prayer apps, for their users’ location data. The second is through real-time bidding, or RTB. This is where companies in the online advertising industry place near instantaneous bids to get their advert in front of a certain demographic. A side effect is that companies can obtain data about peoples’ individual devices, including their GPS coordinates. Spy firms have sourced this sort of RTB information from hugely popular smartphone apps.

via this 404 media article: https://www.404media.co/inside-ices-tool-to-monitor-phones-in-entire-neighborhoods/

paywall bypass: https://web.archive.org/web/20260108141914/https://www.404media.co/inside-ices-tool-to-monitor-phones-in-entire-neighborhoods/

screenshot of text: The material shows Webloc users can search its databases of mobile phone data in various ways. Users can perform a single perimeter analysis to search a specific area for mobile phones across a certain time period. They can draw the target area with a rectangle, circle, or polygon. They then select the maximum number of results the system should display, and the maximum number of devices to return. Once a Webloc user has identified a device of interest, they can get more details about that particular phone, and, by extension, its owner, by seeing where else it has travelled both locally and across the country. Users can click a route feature which shows the path the device took. The material suggests that if users look at where the device was located at night, they might find the person’s possible home, and during the day, the person’s possible employer. The software can also do a multi-permiter analysis, which monitors multiple locations at once to see which devices have been present at two or more specific places.
you are viewing a single comment's thread
view the rest of the comments
[+] 42 points 10 months ago* (last edited 9 months ago) (4 children)
[deleted]
  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 9 points 10 months ago (1 child)

    True, but they don't even need 0days or software exploits to breach the systems. The data is harvested legally and sold to whoever wants to pay for it. Insane amounts of data about everything you do is made commercially available by phone platforms, tech companies, apps, banks, email providers, retail establishments, cell phone carriers, governments, and of course their continual data breaches.

    Anybody can target you too, it doesn't have to be espionage outfits or state sponsored threat actors. It's just for sale.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • load more comments (-1 replies)
  • [–] 4 points 10 months ago (1 child)

    Reminder that GrapheneOS.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [+] 4 points 10 months ago* (last edited 9 months ago) (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 7 points 10 months ago

    Is the baseband isolated?

    Yes, the baseband is isolated on all of the officially supported devices.

    And

    The mobile Atheros Wi-Fi driver/firmware is primarily a SoftMAC implementation with the vast majority of the complexity in the driver rather than the firmware. The fully functional driver is massive and the firmware is quite small.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (-1 replies)