Security Vulnerabilities Found in Popular Location-Tracking App
A recent discovery by a security researcher has highlighted concerning vulnerabilities in a widely used phone-tracking app. Eric Daigle, a student at the University of British Columbia, uncovered flaws in the iSharing app that allowed access to users’ precise location and personal information.
The bugs in the app’s system made it possible for anyone using the app to obtain another user’s coordinates, even without active sharing of location data. This exposed sensitive information such as names, profile photos, email addresses, and phone numbers of users.
Concerns regarding location-tracking apps, including those used for malicious purposes, have been raised due to previous security mishaps that risk exposing users’ exact locations. Daigle demonstrated the vulnerabilities by pinpointing a reporter’s location within seconds using the iSharing app.
After notifying iSharing about the issues, Daigle received no response, prompting him to seek assistance from TechCrunch. The app makers were able to rectify the bugs following the reporter’s involvement, expressing gratitude to Daigle for bringing the issue to their attention.
iSharing attributed the vulnerability to a feature called groups, which allows users to share locations with others. The company assured users that steps would be taken to enhance security measures and protect user data moving forward.
Daigle, who detailed his findings on his blog, plans to continue research in the realm of stalkerware and location-tracking apps. The swift response to addressing the security flaws in the iSharing app underscores the importance of proactive measures in safeguarding user information.
