Apple Fields Data Requests for 10,000 Users Accounts

Since December, U.S. law enforcement agencies have made between 4,000 and 5,000 requests for customer data from Apple on as many 10,000 user accounts, the company said in a statement released last night. Apple said in the wake of allegations that it participates in feeding the U.S. government...

Weathernews Touch for Android stores location information in the system log file

Overview Weathernews Touch for Android contains a vulnerability that stores location information in the system log file. Weathernews Touch provided by Weathernews Inc. is a weather forecast application. Weathernews Touch for Android contains a vulnerability that stores location information in the...

CVE-2012-6337

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

CVE-2012-6336

The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

CVE-2012-6334

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

Design/Logic Flaw

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

Design/Logic Flaw

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

Design/Logic Flaw

The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

CVE-2012-6335

The CVE-2012-6335 entry concerns AVG AntiVirus for Android: the Anti-theft service can be manipulated by a physically proximate attacker to supply arbitrary location data via a simple GPS location spoofer, potentially affecting app behavior. Impact described as location data spoofing with evidenc...

CVE-2012-6334

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

PT-2012-6270

Name of the Vulnerable Software and Affected Versions Samsung Galaxy devices affected versions not specified Description The issue concerns the Track My Mobile feature in the SamsungDive subsystem for Android, which displays the activation of remote tracking. This could potentially allow physical...

PT-2012-6268

Name of the Vulnerable Software and Affected Versions AVG AntiVirus for Android affected versions not specified Description The issue concerns the Anti-theft service in AVG AntiVirus for Android, which can be exploited by physically proximate attackers to provide arbitrary location data. This can...

PT-2012-6269

Name of the Vulnerable Software and Affected Versions Lookout affected versions not specified Description The issue concerns the Missing Device feature in Lookout, which can be exploited by physically proximate attackers to provide arbitrary location data. This can be achieved using a commonly...

CVE-2012-6337: Exposure of Sensitive Information to an Unauthorized Actor

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

CVE-2012-6336: Undefined Security Weakness

The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

CVE-2012-6335: Undefined Security Weakness

The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

Senator Seeks More Info On DOJ Location Tracking Practices

Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...

Loophole in iOS Allows Developers Access to Users' Photos

A recently discovered hole in Apple’s iOS allows third-party developers access to users’ iPhone, iPad or iPod Touch photos by exploiting the device’s location data, according to a report from the New York Times’ Nick Bilton on the Bits blog yesterday. The loophole lies in the way that application...

Finding Location Data In Google Maps SSL Sessions

In the last couple of years, Google and some other Web giants have moved to make many of their services accessible over SSL, and in many cases, made HTTPS connections the default. That’s designed to make eavesdropping on those connections more difficult, but as researchers have shown, it certainl...

Blowback: Microsoft, OnStar Pump the Brakes on Location Tracking

Redmond, Washington software giant, Microsoft, and Detroit based GM subsidiary, OnStar backtracked on policies widely seen as egregious privacy violations following lawsuits and public outcry. Here’s the news: Windows Phone Update Requires User Consent For Tracking Microsoft released their “Mango...