this post was submitted on 14 Jan 2025
216 points (100.0% liked)

Cybersecurity

5985 readers
172 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
top 15 comments
sorted by: hot top controversial new old
[–] [email protected] 57 points 6 days ago (1 children)

emphasis mine, de-clickbaited

Insurance company Allstate and its subsidiary Arity unlawfully collected, used, and sold data about the location and movement of Texans’ cell phones through secretly embedded software in mobile apps, according to Texas Attorney General Ken Paxton.

[–] [email protected] 6 points 5 days ago

Lol. They were trying their damndest to get me and my family to install that. I'm like... there's a bit of a conflict of interest there. I can see some value in having location data of your family, who's driving too fast, if someone's in an accident. I will absolutely not be sharing that data with the company that earns money for its shareholders by outperforming the statistical likelihood of paying me money, by finding every way possible to not pay me money.

[–] [email protected] 21 points 6 days ago (1 children)

As opposed to say Apple, Microsoft or Google?

[–] Zulu 13 points 6 days ago (1 children)

That probably IS the "secret" software. Lol Plug a phone into your car? Insurance company gets the info one way or another.

[–] [email protected] 8 points 6 days ago

Might even be as "sophisticated" as a Facebook advertisement..

[–] Anticorp 15 points 6 days ago (1 children)

Cool. Punish them with jail time. No? No consequences you say? Okay then, I guess.

[–] jaybone 5 points 5 days ago

Shocked. I am shocked.

Someone needs to SLAM them.

[–] WHARRGARBL 9 points 6 days ago

Not refuting this standard practice of collecting and selling data, including location, but this “article” is from a security software marketing blog.

Also, fuckin Ken Paxton sues EVERYONE.

[–] [email protected] 5 points 6 days ago* (last edited 6 days ago) (1 children)

I like the name and shame, maybe someday a company will care about the shame. But really, calling a phone app "secret software" is a lot stranger than an app sending info back to base.

[–] dohpaz42 8 points 6 days ago (1 children)

It’s my understanding that the “secret software” is not the app itself, but code embedded into the app, that track your location and send it back to Arity. And it’s not one particular app, but many apps that were paid to add the code.

[–] [email protected] 6 points 6 days ago (2 children)

Well yeah. The apps main advetised purpose isn't going to be "we track you and sell the data". Every giant corporations app has tracking software embedded in it.

[–] Benjaben 4 points 6 days ago* (last edited 6 days ago) (1 children)

We shouldn't just roll over and take it though. I can't tell if you're saying "we should know better, of course they're all doing this shit" - which I agree with - or closer to "it's their app(s), they can do what they want, and we shouldn't expect them to be transparent", which I very much disagree with.

[–] [email protected] 3 points 5 days ago

Im definitely in the first camp.

[–] dohpaz42 3 points 6 days ago (1 children)

I’m going to go out on a limb and say you’re not understanding: it’s not only the insurance company’s app doing the tracking; it’s potentially any app that asks for location data.

Sometimes apps ask permission to use your location data and you find yourself wondering, why does this app need to know where my phone is?

This is one possible reason.

Whenever you are asked to share your location data with an app and there’s no clear reason why you might need to, deny the app that permission.

I’ll concede that maybe it’s me that is not understanding. 😊

[–] [email protected] 2 points 6 days ago

Yes, that's why it's not "secret software". They all do it.