- Joined
- Jun 13, 2020
- Messages
- 7,905
- Reaction score
- 942
- Points
- 212
- Awards
- 2
The problem allows you to track the movement of nearby drivers in real time and identify them.
Security researcher Peter Gasper of DevOps has discovered a vulnerability in Google's popular navigation app Waze. The problem allows you to accurately track the movement of nearby drivers in real time and identify them.
Waze uses crowdsourced information to alert drivers to obstacles that might prevent them from easily commuting to work, such as traffic congestion, construction work, accidents, and more, and then suggests alternative and faster routes to avoid those obstacles. The app also displays the location of other drivers in the immediate vicinity by GPS.
Gasper found that Waze not only sends the user the coordinates of other nearby drivers, but also does not change the identification numbers associated with other users' icons over time. By creating a code editor and developing an extension for Chromium to collect JSON responses from an API, the expert was able to visualize the movement of users between city districts and even cities themselves.
More details: https://www.securitylab.ru/news/513238.php The
specialist reported his discovery to Google in December last year, and the company fixed the problem.
Security researcher Peter Gasper of DevOps has discovered a vulnerability in Google's popular navigation app Waze. The problem allows you to accurately track the movement of nearby drivers in real time and identify them.
Waze uses crowdsourced information to alert drivers to obstacles that might prevent them from easily commuting to work, such as traffic congestion, construction work, accidents, and more, and then suggests alternative and faster routes to avoid those obstacles. The app also displays the location of other drivers in the immediate vicinity by GPS.
Gasper found that Waze not only sends the user the coordinates of other nearby drivers, but also does not change the identification numbers associated with other users' icons over time. By creating a code editor and developing an extension for Chromium to collect JSON responses from an API, the expert was able to visualize the movement of users between city districts and even cities themselves.
More details: https://www.securitylab.ru/news/513238.php The
specialist reported his discovery to Google in December last year, and the company fixed the problem.