Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by martyb on Thursday May 21 2020, @12:30AM   Printer-friendly
from the Untappd-opportunities dept.

Beer rating app reveals homes and identities of spies and military bods, warns Bellingcat:

A beer and pub-rating app built off the back of Foursquare’s location-tracking API poses a risk to the security of military and intelligence personnel, according to legendary OSINT website Bellingcat.

Untappd 'has over eight million mostly European and North American users, and its features allow researchers to uncover sensitive information about said users at military and intelligence locations around the world,' wrote Bellingcat’s Foeke Postma in a fascinating guide to using the app for tracking down people of interest.

Bellingcat is an open-source intelligence and investigative journalism website. Its most famous contribution to the world was identifying the Russian military personnel who shot down Malaysian Airlines flight MH17, something that saw Russian hackers target it in revenge.

Untappd’s concept of operations is simple. You go to the pub and drink beer. During the beer-drinking process you take a picture of your beer with your smartphone and rate it. You can also rate the pub and leave comments. To do these things you need to register an account and provide some personal details – or log in with Facebook.

“Untappd users log hundreds, often thousands of time-stamped location data points. These locations are neatly sorted in over 900 categories, which can be as diverse and specific as 'botanic garden.' 'strip club,' 'gay bar,' 'west-Ukrainian restaurant,' and 'airport gate.' As the result of this, the app allows anyone to trace the movements of other users between sensitive locations,' wrote Bellingcat’s Postma.

“Untappd users log hundreds, often thousands of time-stamped location data points. These locations are neatly sorted in over 900 categories, which can be as diverse and specific as 'botanic garden.' 'strip club,' 'gay bar,' 'west-Ukrainian restaurant,' and 'airport gate.' As the result of this, the app allows anyone to trace the movements of other users between sensitive locations,' wrote Bellingcat’s Postma.

All you need to do to deploy Untappd as an intelligence-gathering tool is use the app through its normal user interface. With a little knowledge of how the app works plus access to online map websites that list pub, bar and restaurant details, it’s scarily simple to find people who probably shouldn’t be easily findable.

So we put it to the test

Quite successfully, at that. The linked Bellingcat guide is thorough and revealing. Not only could this be used to track military personnel, it could be similarly be used on politicians, judges, and executives. Cross-reference it with venues associated with strip clubs, "massage" parlors, and the like. Certainly nothing here that could be used by a divorce attorney, health insurance company, or investigative journalist. Those "snap" decisions could prove quite costly.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by Rosco P. Coltrane on Thursday May 21 2020, @01:32AM (6 children)

    by Rosco P. Coltrane (4757) on Thursday May 21 2020, @01:32AM (#997190)

    Clever spies probably use social media to obcure their tracks. If you want to make it difficult to track you on the internet, poisoning the well is better than saying quiet.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: -1, Flamebait) by Ethanol-fueled on Thursday May 21 2020, @01:46AM (5 children)

    by Ethanol-fueled (2792) on Thursday May 21 2020, @01:46AM (#997192) Homepage

    I once saw a dingy Jew playing Pokemon Go and collecting Pokemon on his phone inside a secure facility. 'Nuff said. Only dingy disloyal Jews would be that stupid. To this day I wonder if government authorities actually did something about that. Then there's all the stupid fuckers using Fitbits...

    • (Score: 3, Funny) by Runaway1956 on Thursday May 21 2020, @02:21AM (1 child)

      by Runaway1956 (2926) Subscriber Badge on Thursday May 21 2020, @02:21AM (#997202) Journal

      Well, I'd be interrogating the chief of security. How did all those pokemon get inside of a secure facility? The guards were sleeping when all those weird looking poke came parading in the doors?

      • (Score: 3, Touché) by hendrikboom on Thursday May 21 2020, @08:34PM

        by hendrikboom (1125) Subscriber Badge on Thursday May 21 2020, @08:34PM (#997570) Homepage Journal

        Nintendo is in charge of Pokemon security. The guards should be taking this matter up with Nintendo.

    • (Score: 0) by Anonymous Coward on Thursday May 21 2020, @06:07PM (2 children)

      by Anonymous Coward on Thursday May 21 2020, @06:07PM (#997473)

      You reported him, right? Because I'm sure you remember from your training to report observed security violations.

      • (Score: 1) by Ethanol-fueled on Thursday May 21 2020, @10:49PM (1 child)

        by Ethanol-fueled (2792) on Thursday May 21 2020, @10:49PM (#997628) Homepage

        Reporting Jews in secure facilities subjects you to Jewish Bolshevism, including being placed on janitor duty and being rubber-stamped "crazy" by a Bolshevik shrink. Ask Edward Snowden and pretty much every national intelligence whistleblower if you don't believe me. He might have been reckless but there was no point in reporting him, as Israel has a direct tap into NSA data they can funnel right to China. What can one do in reporting an enemy spy in an industry run by enemy spies?

        • (Score: 0) by Anonymous Coward on Friday May 22 2020, @12:39AM

          by Anonymous Coward on Friday May 22 2020, @12:39AM (#997667)

          Nothing Ethanol says is in any way related to truth. None of this ever happened, the job, the security violation, his "firing": all just the lunatic fantasies of an alcoholic anti-semite.