Discovering that a Bluetooth car battery monitor is siphoning location data
652 by x1sec | 267 comments on
Hi HN, this is my efforts in reverse engineering a BLE car battery monitor where it's app has over 100,000 downloads on the Google Play store alone. It turns out it's sending GPS, cell phone tower cell IDs and Wifi beacon data to servers in Hong Kong and mainland China on a continued basis. Google and Apple app store pages say no personal data is collected or sent to 3rd parties. Hopefully readers pick up a few tips on reversing apps for their connected devices.
No comments:
Post a Comment