It has been discovered that a popular location tracking application has been exposing the data of millions of its users. The application in question is iSharing, which allows users to send locations to close friends and family.
According to Techradar, it was security researcher Eric Daigle who discovered the flaw. Through this error, Daigle was able to obtain the exact coordinates of each user, even if they were not actively sharing their location.
If that wasn’t enough, Daigle discovered that he could not only find out the location of users, but also their personal data. This included profile pictures, names, phone numbers and even email addresses of the accounts. The researcher has published the findings on his personal blog, where he breaks them down in quite a detailed way.
Diagle discovered the flaw in iSharing while conducting research on security in location tracking applications. In this case, he found that iSharing’s servers did not properly control who could access location data, leaving a dangerous “open door” to private information.
In the face of the magnitude of the error, iSharing co-founder Yongjae Chuh has come out to express his “gratitude” to Daigle for discovering such a security hole. Shortly after, the developers implemented an update to fix the flaw.
