The Kromtech Security Center recently found roughly 540,000 records belonging to SVR Tracking, a company that specializes in “vehicle recovery,” in a publicly accessible online Amazon S3 bucket, Gizmodo reports. The records contained information including email addresses and passwords, as well as some license plate and vehicle identification numbers. The SVR passwords were stored using a cryptographic hash function, SHA-1, though one that’s 20 years old and with known weaknesses. The company tracks vehicle location by providing continuous tracking every two minutes while the car is moving and every four hours when the car is stopped, and it is possible to see the entire path of the vehicle for 120 days.
Full Story
Comments
If you want to comment on this post, you need to login.