|
|
|
|
|
by chatmasta
617 days ago
|
|
What sort of “mobile tracking info” do you have in mind, and where could you obtain this information for an individual? Maybe (maybe!) you can get their physical location with the right access to certain ISP datasets, but the website info? Is that something that is available for sale on an individual basis? The article states that the trader obtained his information by hacking into poorly secured corporate email accounts and configuring auto-forwarding rules to send himself copies of incoming emails. Specifically, he triggered password reset flows with “security questions” and data mined open sources for metadata like family names which helped him guess the answers to the security questions. So overall, it wasn’t a very sophisticated hack, and certainly seems more straight forward than “getting the mobile tracking info of M&A bankers.” |
|
The data is likely collected from ad and analytics SDKs in various unrelated apps, so you just need the lawyer to be using one of these apps.
Journalists have demonstrated that the data is good enough to identify and track e.g. intelligence service employees.