Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
vruz (vruz@mstdn.social)'s status on Monday, 13-Jan-2025 04:25:35 JST vruz

There's no such thing as cynical cyber rights activists, there's only informed people, and uninformed people.
https://www.wired.com/story/gravy-location-data-app-leak-rtb/
In conversation about 18 days ago from mstdn.social permalink
Attachments
1. Domain not in remote thumbnail source whitelist: media.wired.com
  
  Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location
  
  from Joseph Cox
  
  A hack of location data company Gravy Analytics has revealed which apps are—knowingly or not—being used to collect your information behind the scenes.
2. Popular Apps Used to Spy on Location Data Hacked files from Gravy Analytics reveal that thousands of popular apps, including Candy Crush, Tinder, and MyFitnessPal, are being exploited to collect sensitive location data through real-time bidding (RTB), often without users' or developers' knowledge. Gravy, a data broker, sources location data from the ad ecosystem, not embedded app code, enabling it to track users via ads. This data is sold to clients, including U.S. government agencies like ICE and the FBI. The leaked data includes millions of device locations tied to apps like Grindr, Subway Surfers, and religious prayer apps. Experts confirm much of the data is inferred from IP addresses, highlighting privacy risks in ad-driven platforms. Many apps deny links to Gravy, but the exploit underscores the unchecked risks of RTB systems. The FTC has previously banned similar practices, yet the scope of this leak reveals the extensive vulnerabilities in digital advertising and user privacy safeguards.
  https://media.mstdn.social/media_attachments/files/113/816/835/098/951/895/original/77ff6585586cb2a7.png

Public

Conversation

Notices

Feeds