Connect with us

Tech-Film

GPS Tracking App Breach Allows Hacker to Monitor Cars, Kill Their Engines: Report

The Kashmir Monitor

Published

🕒

on

IST

A hacker reportedly broke into two GPS tracking apps, giving him ability to monitor the real-time location of thousands of cars across multiple countries and even turning off the engines of some while they are on the road. According to an online report, the hacker was able to track vehicles, managed by iTrack and ProTrack apps, in several countries around the world, including India, Morocco, Philippines, and South Africa. While ProTrack seems to have plugged the vulnerability, there is no word on whether iTrack has done anything to make its service secure.

According to a report in Motherboard, the hacker, who goes by name L&M, told the publication that he was able to hack into over 7,000 iTrack accounts and 20,000 ProTrack accounts. Both iTrack and ProTrack apps are used by companies around the world to monitor and manage their fleets of automobiles with GPS tracking devices. The hacker claims to have exploited a very basic vulnerability in the GPS tracking apps. The apps reportedly assign a default password “123456” to all their customers. By brute-forcing millions of usernames with the default password, L&M hacked his way into thousands of accounts that were still using the default password.

Access to these accounts provided L&M with not only the real-time location of the attached vehicles, but also the names and models of the GPS tracking devices, real names of users, phone numbers, email addresses, device IMEI numbers, and physical addresses. Not all accounts said to have included all the data. Motherboard claims to have confirmed the breach by verifying a sample of the hacked data provided by the hacker and contacting four of the impacted users.

 

While the breach of private data and real-time location of vehicles is a massive privacy and security issue for the impacted consumers, the hacker also claimed to have the ability to shut down the engines of some vehicles, making the hack a safety nightmare. Although L&M didn’t prove the ability by shutting down the engine of a vehicle, Motherboard was able to confirm the existence of the feature by the maker of one of GPS tracking devices supported by the hacked apps. Concox, a company that makes GPS tracking hardware, told the publication that the customers can turn off the engines of the vehicles remotely if the vehicles are going under 20km per hour.

The hacked GPS apps include an option called “Stop Engine” which makes use of the functionality provided the GPS hardware. The same option can also be seen in the Web version of the service by using the demo account and Gadgets 360 was able to verify the same. The option is most likely present to stop the vehicles in the case of a theft.

The iTrack app is developed by SeeWorld Technology Corp.Ltd., which is based in Guangzhou, China, whereas ProTrack has been made by Shenzhen iTrybrand Technology Co. Ltd., which is based in Shenzhen, China. Both the apps seem to share the same codebase and even the UI of their apps and Web version is very similar.

Motherboard notes that after the hacker reached out to app developers, ProTrack has contacted customers via app and email to change their password. The company is however no doing force resets at this point. The company denied the data breach to the publication.

“Our system is working very well and change password is normal way for account security like other systems, any problem?” a company representative told Motherboard.

Protrack no longer seems to be allowing the customers to keep “123456” as the password, thereby plugging the vulnerability, which we verified by signing up for a demo account. This still leaves the existing customers with default passwords vulnerable. There is no word on whether iTrack has made a similar change and the company’s demo account still accepts “123456” as the password.


The Kashmir Monitor is the fastest growing newspaper as well as digitial platform covering news from all angles.

Advertisement
Loading...
Comments

Tech-Film

Infinix S4 Smartphone With Triple Rear Cameras, X Band 3 Fitness Band Launched

The Kashmir Monitor

Published

on

Infinix S4 has now been launched in India, after the launch of the Smart 3 Plus last month. The phone sports a triple rear camera setup, a rear fingerprint sensor, and a waterdrop-style notch. The Infinix S4 key features include the MediaTek Helio P22 SoC, a 6.21-inch large display, Android 9 Pie software, a 32-megapixel selfie sensor, and a 4,000mAh battery. The company also launched the X Band 3 fitness band alongside the smartphone, and it comes with real-time heart rate monitoring and up to 20-day battery life.

Infinix S4, X Band 3 price in India

Infinix S4 is priced in India at Rs. 8,999. The phone will be available on Flipkart from May 28 at 12pm (noon) IST. It will be available in Nebula Blue, Space Grey, and Twilight Purple colour options. The X Band 3, on the other hand, is priced in India at Rs. 1,599 and will be available on Flipkart from June 4.

 

Infinix S4 specifications

As for specifications, the dual-SIM Infinix S4 runs on Android Pie-based XOS 5.0. The phone features a 6.21-inch HD+ (720×1520 pixels) display with 19.5:9 aspect ratio, and 2.5D curved glass display protection. The phone is powered by the 2GHz MediaTek Helio P22 octa-core processor with 3GB RAM. Internal storage is at 32GB with the option to expand further using a dedicated microSD card (up to 256GB).

The triple rear camera setup at the back houses – a primary 13-megapixel snapper with f/1.8 aperture, another 8-megapixel 120 degrees ultra-wide camera with f/2.2 aperture, and a last 2-megapixel camera as well. The rear setup is accompanied by a Quad-LED flash. Up front, the Infinix S4 will have a 32-megapixel selfie camera with f/2.0 aperture and screen flash. Features include auto scene detection across eight modes including portrait, text, night, backlight HDR, blue sky, sports and others.

The phone packs a 4,000mAh battery, the dimensions measure at 156x75x7.9mm, and it weighs 155 grams. Connectivity options include Bluetooth v5, Micro-USB port, Wi-Fi 802.11 a/b/g/n, 3.5mm audio jack, and more. The phone supports Face Unlock and a rear fingerprint sensor as well. Sensors on board include a G-sensor, proximity sensor, light sensor, and compass.

Continue Reading

Tech-Film

Google Glass Enterprise Edition 2 Announced With Improved Camera and More

The Kashmir Monitor

Published

on

Google is bringing the second edition of its eye-wearable device — Google Glass Enterprise Edition 2, with improved camera, USB Type-C port and safety frames.

Google Glass is a small, lightweight wearable computer with a transparent display that brings information into your line of sight.

“Glass Enterprise Edition 2 helps businesses further improve the efficiency of their employees,” Jay Kothari, Project Lead, Glass at Google, wrote in a blog post on Monday.

 

To enable significant power-saving, support for computer vision and advanced Machine Learning (ML) capabilities, the Glass Enterprise Edition 2 is built on the Qualcomm Snapdragon XR1 platform that comes with a multi-core CPU.

The company says, Glass Enterprise Edition 2 is easier to develop for and deploy. In order to support scaled deployments, Google has also added support for Android Enterprise Mobile Device Management to the wearable.

The price of the second edition of Google Glass remain undisclosed as of now.

“Enterprise businesses interested in using Glass Enterprise Edition 2 can contact our sales team or our network of Glass Enterprise solution partners starting today.

We’re excited to see how our partners and customers will continue to use Glass to shape the future of work,” Kothari added.

In August 2017, Streye, a “Glass for Work” partner started selling the eye-wearable device Google Glass Enterprise Edition starting from $1,829 (roughly Rs. 1.3 lakhs).

Google sells the eye-wearable device with “Glass for Work” partners which are authorised to develop and deliver enterprise solutions for Glass customers.

The device has been known to be helping scientists study brain disease, during emergency and teach Morse code in four hours.

The first Google Glass was introduced with much fanfare in 2014. At $1,500, it promised a new, bold era for information.

People, however, realised the device was not yet ready to be part of their lives. There were safety and health concerns. The built-in camera raised privacy and piracy issues too.

Continue Reading

Tech-Film

Juhi Chawla supports her kids dreams

The Kashmir Monitor

Published

on

Actress Juhi Chawla says her son Arjun is good at mimicking accents and that he is hilarious, so sometimes she feels that he can probably try his hand at acting.

Juhi is currently living out of a suitcase, swinging between Mumbai, Kolkata and the UK where her teenaged children are put up in a boarding school.

In times when star kids have a ready launch-pad for their Bollywood career to take off, Juhi has shared about her children’s interests.

 

“My small monkey Arjun has clearly told us, ‘Mom don’t even think about it’. With Jahnavi, I’m not so sure. Arjun is quite funny and good with mimicking accents. He’s actually hilarious, so I feel sometimes that he could maybe try,” Juhi said in a statement.

“Jahnavi is an avid reader. If there is anything she likes in this world, and if you ask her what she wants as a gift, it will be a book. She said she wanted to be a writer.

“Then she went through a phase where she said ‘Okay I want to be a model’. Tomorrow she might say ‘I want to be an actress’. Then she might say she wants to drop all this and do sports. I don’t know, but I have learnt one thing that you have to let your children do what they want,” she added.

Continue Reading