08 Feb Researchers Extract User Location Data from Strava
Researchers from mobile security firm Wandera recently said that they were able to triangulate a Strava app user’s location even if it has been set to private.
Strava’s “privacy zone” feature allows users to mask their fitness activities from other users on the service. However, the researchers were able to establish in their tests that a user’s privacy zone can be triangulated using only the start and endpoints of a user’s activity. Since the privacy zone is of equal size in each activity, it is possible to determine the user’s route by increasing the radius of each activity end marker until 3 or more begin to intersect.
In its defense, Strava said that it is still rolling out more privacy options in the coming weeks.
Source: ZDNet
