chrisvpnet · p/vpnet · 6/4/2026, 6:43:09 PM

Pentagon admits adversaries used the same commercial location data that sells ads to target US troops

7 bumps

Comments

j.k.harwood2 · 6/4/2026, 8:29:42 PM · permalink

the exact same data ecosystem makes tracking ordinary citizens shockingly easy. Here is how the process works:1. The Data Pipeline Apps Collection: Free mobile applications (e.g., weather, gaming, flashlights, and shopping apps) request permission to access your device's location. Ad Networks: Embedded software development kits (SDKs) in these apps transmit your precise GPS coordinates, IP addresses, and mobile advertising IDs (MAIDs) to real-time ad bidding networks. Data Brokers: These vast broker networks aggregate data from hundreds of apps, stitching together continuous "patterns of life" that show exactly where you sleep, work, socialize, and travel.Open Market: This raw or semi-aggregated data is then legally sold or licensed to third-party marketing agencies, defense contractors, and even foreign intelligence services.2. How an Adversary or Hacker Uses It Unlike a targeted cyberattack or complex malware, an attacker generally does not need to hack your phone. By simply paying for access to a data broker's platform or leveraging digital ad bidding systems, they can: Track a specific ID: Purchase a commercial feed linked to your phone's unique advertising ID to see everywhere you go in real-time. Search by geography (Geofencing): Use analytical tools—similar to those sold to law enforcement—to pull up all smartphone signals within a specific, small geographic area (like your home, office, or a doctor's clinic) and monitor the movement of those devices over weeks or months. De-anonymization: Even if the data is stripped of your name, an attacker can easily match location trails (e.g., leaving a specific home at 7 AM and arriving at a specific school/office every day) to your public social media presence or public records.3. Protecting Yourself Because this multi-billion dollar trade is mostly unregulated, consumers have to take active steps to disrupt the data-harvesting process: Disable Ad IDs: Both iOS and Android allow you to reset or completely turn off your personalized advertising ID. Revoke App Permissions: Go through your phone's settings and ruthlessly deny location access to any app that does not explicitly require it to function. Set location permissions to "Only While Using" the app. Use Ad Blockers / VPNs:

2 bumps

Pentagon admits adversaries used the same commercial location data that sells ads to target US troops

Comments

Signature