Hacker News new | ask | show | jobs
by chatmasta 617 days ago
What sort of “mobile tracking info” do you have in mind, and where could you obtain this information for an individual? Maybe (maybe!) you can get their physical location with the right access to certain ISP datasets, but the website info? Is that something that is available for sale on an individual basis?

The article states that the trader obtained his information by hacking into poorly secured corporate email accounts and configuring auto-forwarding rules to send himself copies of incoming emails. Specifically, he triggered password reset flows with “security questions” and data mined open sources for metadata like family names which helped him guess the answers to the security questions. So overall, it wasn’t a very sophisticated hack, and certainly seems more straight forward than “getting the mobile tracking info of M&A bankers.”

2 comments

In the US, there are commercial companies selling this data. Probably not associated with a name, but you could buy the data (I think they sell the whole dataset for a relatively affordable price), figure out who is a M&A lawyer by checking which IDs show up at their headquarters + some other relevant location, then track them from there going forward.

The data is likely collected from ad and analytics SDKs in various unrelated apps, so you just need the lawyer to be using one of these apps.

Journalists have demonstrated that the data is good enough to identify and track e.g. intelligence service employees.

Maybe "ad targeting info" is more accurate

https://www.wired.com/story/how-pentagon-learned-targeted-ad...