Le Monde identifies French aircraft carrier location via sailor's public Strava fitness data
By
MrDresden
A weekday bagel. Dependable, satisfying, no fuss.
Summary
Le Monde journalists identified a French Navy officer on the aircraft carrier Charles de Gaulle through his public Strava fitness app profile, revealing the ship's real-time location in the Mediterranean. The officer's run data, logged via smartwatch, exposed the exact position of the vessel despite previous warnings about this security vulnerability. The article highlights ongoing security risks posed by fitness app data sharing among military personnel.
Key quotes
· 4 pulledArthur, a young French Navy officer whose first name has been changed, went for a run around the deck of the ship on which he serves.
To log his daily run – a little over seven kilometers in 35 minutes – he used a smartwatch. His data then appeared online.
Arthur had a profile on the Strava fitness app that anyone could view, because it was set to 'public.'
As a result, the young officer almost instantly revealed the exact location of the French aircraft carrier Charles de Gaulle
You might also wanna read
GrapheneOS patches Android VPN IP leak vulnerability that Google hasn't fixed
GrapheneOS has released an update fixing a recently disclosed Android VPN bypass vulnerability (affecting Android 16) that leaks users' real
cyberinsider.com·22d ago
Flock Safety's AI Surveillance Cameras Found Exposed to Open Internet Without Password Protection
A journalist discovered that Flock Safety left at least 60 of its AI-powered Condor PTZ surveillance cameras exposed to the open internet wi
404media.co·5mo ago
Phishing Campaign Targets Signal Users by Stealing Backup Recovery Keys
A new wave of phishing attacks is targeting Signal users by impersonating the app's support team. Hackers send messages inside Signal claimi
cybersecuritynews.com·3h ago
California Sues 23andMe Over 2023 Data Breach Affecting Nearly 7 Million Users
California Attorney General Rob Bonta has filed a lawsuit against Chrome Holding Co. (formerly 23andMe) over a 2023 data breach that exposed
oag.ca.gov·3h ago
New phishing campaign targets Signal users to steal chat backup recovery keys
Hackers are targeting Signal users in a new phishing campaign that attempts to steal their chat backups. The attackers pose as Signal's supp
techcrunch.com·4h ago
AI technology challenges NTSB's ability to keep cockpit voice recordings private
The National Transportation Safety Board (NTSB) temporarily took down its public docket system after discovering that digital images of cock
npr.org·1d ago