Slashdot Mirror
US Telcos Are Selling Access To Their Customers' Location Data, and That Data Reaches Bounty Hunters and Others Not Authorized To Possess It (vice.com)
T-Mobile, Sprint, and AT&T are selling access to their customers' location data, and that data is ending up in the hands of bounty hunters and others not authorized to possess it, letting them track most phones in the country, an investigation by news outlet Motherboard has found. From the report: Nervously, I gave a bounty hunter a phone number. He had offered to geolocate a phone for me, using a shady, overlooked service intended not for the cops, but for private individuals and businesses. Armed with just the number and a few hundred dollars, he said he could find the current location of most phones in the United States. The bounty hunter sent the number to his own contact, who would track the phone. The contact responded with a screenshot of Google Maps, containing a blue circle indicating the phone's current location, approximate to a few hundred metres. [...] The bounty hunter did this all without deploying a hacking tool or having any previous knowledge of the phone's whereabouts. Instead, the tracking tool relies on real-time location data sold to bounty hunters that ultimately originated from the telcos themselves, including T-Mobile, AT&T, and Sprint, a Motherboard investigation has found. These surveillance capabilities are sometimes sold through word-of-mouth networks.
[...] Motherboard's investigation shows just how exposed mobile networks and the data they generate are, leaving them open to surveillance by ordinary citizens, stalkers, and criminals, and comes as media and policy makers are paying more attention than ever to how location and other sensitive data is collected and sold. The investigation also shows that a wide variety of companies can access cell phone location data, and that the information trickles down from cell phone providers to a wide array of smaller players, who don't necessarily have the correct safeguards in place to protect that data. "Blade Runner, the iconic sci-fi movie, is set in 2019. And here we are: there's an unregulated black market where bounty-hunters can buy information about where we are, in real time, over time, and come after us. You don't need to be a replicant to be scared of the consequences," Thomas Rid, professor of strategic studies at Johns Hopkins University, told Motherboard.
Ron Wyden, a senator from Oregon, said in a statement, "This is a nightmare for national security and the personal safety of anyone with a phone."
[...] Motherboard's investigation shows just how exposed mobile networks and the data they generate are, leaving them open to surveillance by ordinary citizens, stalkers, and criminals, and comes as media and policy makers are paying more attention than ever to how location and other sensitive data is collected and sold. The investigation also shows that a wide variety of companies can access cell phone location data, and that the information trickles down from cell phone providers to a wide array of smaller players, who don't necessarily have the correct safeguards in place to protect that data. "Blade Runner, the iconic sci-fi movie, is set in 2019. And here we are: there's an unregulated black market where bounty-hunters can buy information about where we are, in real time, over time, and come after us. You don't need to be a replicant to be scared of the consequences," Thomas Rid, professor of strategic studies at Johns Hopkins University, told Motherboard.
Ron Wyden, a senator from Oregon, said in a statement, "This is a nightmare for national security and the personal safety of anyone with a phone."
Aldous Huxley, George Orwell and even Ray Bradbury predicted the world that we are steaming in to. Even Max Headroom is to some extent surpassed.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
It's part of the TOS you sign with your carrier.
If a couple of criminals get burned by their phones' location, I'm not going to cry any rivers.
As long as you can find out in which mobile network that phone is registered, you can take a SIM from the same provider, pop-it into a mobile modem, enable basic network tracing and call that number. As soon as the called number begins to ring, you'll get a packet back from the network listing among other stuff the CELLID where that phone is registered.
And there are a bunch of websites where you can plug a CELLID which will show that "hunder meter circle" where that cell's antenna has coverage.
1% APY, No fees, Online Bank https://captl1.co/2uIErYq Don't let your $$$ sit in a no-interest acct.
Having worked for one of these Telco's (admitedly before LTE) I can tell you how it's likely done.
Your cell phone must register with a tower, so the "contact" inside the wireless telco looks up the customer's phone number directly in the switching system so that they leave no fingerprints in the CRM system. So the HLR will say where the mobile device is presently located by the tower's id number, and then you cross reference that with the actual geographic location of the tower.
That's how it's done, and customers, pre-smartphones who have had their devices lost or stolen have routinely called in to ask where their device is and at best, the rep can say it's somewhere near X (where the HLR says it was last seen) often by using a tool designed to check if the phone is roaming. If the phone is roaming on another carrier's tower, then the carrier will actually have more information available since the roaming database on the phone will only try to connect to certain towers it's been authorized to. So if your phone is in Dallas, which has a lot of cell sites, its much easier to figure out where someone is because one tower might only serve an area of 300ft, where as a tower out in Anchorage, might literately serve half the city, so the precision is much lower.
The on-device A-GPS is more accurate because it can use multiple cell sites and actual GPS line-of-sight to determine where it is. But this information isn't typically relayed back to the cell carrier unless the carrier provides A-GPS service in the first place. LPP (LTE Positioning Protocol) is some fancy level of A-GPS that utilizes multiple sources. If the carrier has A-GPS, then yes, the carrier knows within 100ft of where the phone is.
The question is how much data does the carrier actually need though? If you turn A-GPS off, which you typically can't do without turning all location services off entirely, then you're stuck.
If you turn location services off, you can still be found as long as the phone is powered on since it's still registered in the HLR. Just it can only be narrowed down to the last tower seen for the most part.
Can we get someone who did pass "writing headlines and summaries 101" please?
Hey tony, we gotta get in on dis...thinks of the people we might finds that owes ya money.
Warning to telecoms: if you don't like being regulated, don't invent reasons to get regulated.
Get together and come up with a mutual industry agreement on when and how to share customer data in a way that's not confusing or misleading to customers. Sign the agreement and hold each other accountable. The alternative is that the gov't will do such for you after you play fast and loose for short-term profits and bungle it one day.
Table-ized A.I.
The person who wrote the article.
http://progressquest.com/spoltog.php?name=Son+Of+Son+Of+DarkRookie
I have no objections to the telcos making it easier for bounty hunters to track down fugitive criminals. The faster those get caught, the better off the rest of society is. The fact that there are no controls in place to keep this data from getting in the hands of stalkers, burglars, jealous spouses, and nosy neighbors is the far bigger concern.
Burglars might like to know who is traveling and on the other side of the country.
Or people doing corporate espionage might like to poke around in the target's home computer and have time to clean up their traces.
People with outstanding warrants know that the police can track them, so they use throwaway phones, so that the cops don't know their number.
I don't see how bounty hunters would get to know that number unless they criminals are so stupid to call acquaintances with it.
Then they deserve it.
It's simple, if you don't want to get found, don't use a phone.
More and more, I keep it in airplane mode.
No transmissions, though I assume the phone is still listening.
For that, I need to get the Faraday cage bag or cell case.
Or if your name might sort-of kind-of look somewhat similar in some way to a deadbeat, you may have collection agencies digging into your background.
Can't you protect yourself from this by never giving out your direct number? Just give people a number from a service like Google Voice that allows you to forward calls to your real number.
Ron Wyden, a senator from Oregon, said in a statement, "This is a nightmare for national security and the personal safety of anyone with a phone."
So let's hurry up and do nothing about it!
If nothing else, this article shows how easy it is to manipulate people's views.
Had this article been about how anyone, such as a connected stalker, could for a few hundred dollars, track your location through your phone, there would have been almost universal outrage in the comments.
But because it is framed in terms of bounty hunters catching bad guys, there are an awful lot of comments in support of this capability. Even if it is illegal and can be used by anyone with the dollars to buy the services.
Does not give hope for the future.
Check your premises.
Politicians are bent
FBI are bent
Police are bent
CIA are bent
NSA are bent
Health insurance companies are bent
Doctors are bent
Bounty hunters are bent
We are all bent!
If you don't like this, just exploit this hole to kidnap the children of enough politicians. They'll pass a law forbidding this type of business within a matter of hours.