Google maps Navigation is a mobile or android application developed by Google for the Android and iOS operating systems that was later embedded into the Google Maps mobile app. The app purpose an Internet connection to a GPS navigation system to give turn-by-turn voice instructions on how to arrive on the way.
A Security researcher team got a penetrability in Google’s products like Waze, a GPS navigation software, because its allow track and identify users by their location, which makes it easy for hackers to hack.
Gasper discovered bug bounty of $1,337 in January 2020 and reported by his blog post. According to Gasper Founded on a reward size I think they consider it as a ‘potential’ misuse without any active harm done.
Security research team member Waze is applied by drivers in whole world for real time data collection and found traffic, accidents, and blocked roads by simply keeping the app open. Users should have an operational data connection to use the work. Actually app was designed for private cars, So it is not supported to public transportation such as bicycles or trucks.
Gasper’s investigation iinto Waze began when he found that he could visit Waze from any web browser at live map and decided to check how driver symbol are implemented. He detected that Waze API can give data on a position by sending the location’s coordinates. In addition, it also direct coordinates of other drivers who are nearby.
Gasper’s Surprised When he saw that the user's identification number were not changing over time, he decided to track a driver, after some time he saw the same driver on difference place with same road, Then he continued research for more.
He told hackers can choose multiple locations with high traffic and sporadically call API and change the user that confirmed the existence of an obstacle. A lot of use legitimate names as user names, an hacker can make a dictionary of user names and their IDs.
If You are looking Custom Software Development Company Than it’s right page you can visit I-Softzone and Check Each and Everything and Also take a demo.
No comments:
Post a Comment