Over the weekend, internet users began to focus on a company called Strava that published a heat map showing its users around the world. Strava bills itself as a social networking app for athletes. The heat map showed the location of all the rides, runs, swims, and downhills that its users have taken, as collected by their smartphones and wearables.
Of course, athletes doesnt fully capture the universe of young, fit people. It suddenly occurred to, well, everyone, that another group likely to be avid users were military personnel. As you might imagine, the heat maps shows many American and foreign military personnel are using the app, illustrating the U.S. military presence in Niger. Over the past few days, people have used the heat map to spot and assess secret military bases in Syria, Yemen, and Turkey. At a basic level, its incredible to see people taking smartphone or other devices past checkpoints into places they really shouldnt be. All this is bad, but wait, its worse.
Because as bad as the publicly available heat map is, the underlying data that Strava is collecting is a security nightmare for governments around the world. The data being collected could allow anyone with access to it the ability to make a pattern of life map for individual users, some of whom may be very interesting.
It seems, for example, that there are some very avid users of this application in Taiwan.
The site in the center is supposed to be fairly secretit houses the headquarters of Taiwans missile command. Taiwan has deployed long-range cruise missiles that can strike mainland China across the Taiwan Strait and is, reportedly, developing even longer range missiles that can reach Beijing. In a war between China and Taiwan, an important priority for Beijings military will be to destroy these locations.
And so equally important for Taiwan is the ability to hide them. Taiwan took the secrecy of this place so seriously that, when it deployed cruise missiles for the first time, the military painted the heavy vehicles that launch them to look like delivery trucks. The ruse was pretty unsuccessful. The trucks looked like badly re-painted military vehicles (which they were). And the fictional company, called RED BIRD EXPRESS, wasnt registered and didnt have a website or phonewhich most real business do since they want customers to contact them. Local reporters and netizens quickly sussed out the scheme and bloggers found the vehicles parked at the headquarters for Taiwans missile command.
This was a huge embarrassment to Taiwanese officials, who admitted the whole idea was stupid and then responded by putting a roof over the parking lot where the trucks with missiles are still parked.
Taiwan did not move the base, though. And, as you can see, there are a number of avid Strava users who work there, causally jogging right by the parking lot where the missile launchers are parked.
At some level, we might say this is no big deal. After all, everyone knows there are missiles located at this site. I mean, the front gate even has a series of missiles on display. Everyone knows whats underneath the roof. The security of this site was blown a long time ago.
Now here is the problem. This is only one of several missile bases in Taiwanan important one, to be sure, but there are others, and some of those locations may still be secret. (At the Middlebury Institute of International studies at Monterey, we try to track these bases pretty closely. Were confident we know where several are located, for example, but not all of them.) But Stravas database has one more piece of information, one that is not accessible through the heat map but would be to the company, any client which might purchase the data and any hacker that might steal it. Strava knows which user made each track. Thats charming when its a celebrity uploading a run. But what about a soldier? Soldiers, remember, rotate from one assignment to the next. Which means Strava can continue to track each user as he or she rotates to the next assignment, burning one one secret missile base after another with all those calories. Yes, if our user casually jogging by Taiwanese missiles day-after-day suddenly appears deployed to a new location, well thats very interesting if you are targeting missiles for Chinas Rocket Force.
A fair amount of personal data appears to be shared willingly by users, more than enough to make me uncomfortable. A bigger concern, of course, is whether hackers might be able to breach security and get at the data marked private. If I were a Strava employee, Id be very careful about what sort of email links I clicked on.
Even if these users are careful to never make such a mistake again, continuing to use this app will allow anyone with access to the data to make good guesses about where the user lives and works, based on exercise locations. After all, don't you usually think about picking a gym thats close to home or to work? When you are done with a run, dont you want to be close to a shower? Once this user demonstrates that he or she has access to sensitive locations by literally jogging through one, then every other ride, run, swim or ski becomes useful information. One can infer the locations of bases based on where groups of interesting joggers live or where they turned off their phones. Its even nice to see when they are on vacation, skiing in the mountains, or too busy doing something else to exercise (like training.) Really, the possibilities are endless if you are clever about this sort of thing.
None of this is to blame Strava, of course. Its provides a service that lots of people obviously find useful. I myself could use to lose a few pounds. And, of course, it isnt like Taiwans efforts at secrecy were super impressive to begin with. No one is really at fault here, other than individual users who may have violated security procedures. What the heat map does illustrate, though, is that were living in a very different age than the one where we developed a lot of our ideas about deterrence and strategic stability.
The notion that missiles on trucks would be nearly impossible to track made a lot of sense back when people didnt carry around telephones with digital maps and before they wore watches that connected to the internet. Its not as simple as just asserting that secrecy is doomed, but keeping secrets is a lot more complicated than before. And that means, in a crisis, its also a lot more complicated to know whether missiles that have been hidden away might survive, or whether you need to use them before you lose them.
So think about it before you upload your run through a sensitive military site. You might well be providing an adversary with information that could be used to kill you. But go ahead and take that run. Youll want to be a good lookin corpse if at all possible.
More From this publisher : HERE ; This post was curated using : TrendingTraffic
=>
***********************************************
Originally Published Here: Fitness Tracker App Exposes Security Flaw at Taiwans Missile Command Center
************************************
=>
Sponsored by AMA News
=>
This article was searched, compiled, delivered and presented using RSS Masher & TrendingTraffic
=>>
Fitness Tracker App Exposes Security Flaw at Taiwans Missile Command Center was originally posted by Viral News Feed 14
No comments:
Post a Comment