How You Can Buy AT&T, T-Mobile, and Sprint Real-Time Location Data on the Black Market

Presented at DEF CON 27 (2019), Aug. 10, 2019, noon (45 minutes).

Major US telecommunications companies AT&T, T-Mobile, and Sprint have been quietly selling access to their customers' real-time location data, including cell tower information as well as highly precise GPS data. Through a complex network of dodgy data aggregators and middlemen companies, this data access eventually trickled down to a slew of different industries, used car salesman, landlords, and hundreds of bounty hunters, likely without your knowledge or informed consent. In this talk, based on leaked documents, sources, and first hand experience, Joseph will explain how this data industry works, the players involved, and also how the data access is available on the black market, where it can be used in any way an attacker fancies: Joseph paid a source $300 to successfully locate a phone in New York.

Presenters:

• Joseph Cox - Senior Staff Writer, Motherboard
  Joseph is an investigative reporter for Motherboard, the science and technology section of VICE. He covers cybersecurity, the digital underground, and social media platforms. Twitter: @josephfcox

Links:

• https://defcon.org/html/defcon-27/dc-27-speakers.html#Cox
• https://infocon.org/cons/DEF CON/DEF CON 27/DEF CON 27 video and slides/DEF CON 27 - Joseph Cox - How You Can Buy ATandT T-Mobile and Sprint Real-Time Location Data on the Black Market.mp4
• https://infocon.org/cons/DEF CON/DEF CON 27/DEF CON 27 video and slides/DEF CON 27 - Joseph Cox - How You Can Buy ATandT T-Mobile and Sprint Real-Time Location Data on the Black Market.srt (subtitles)
• https://www.youtube.com/watch?v=3e6n7jDDmj0

Similar Presentations:

• Black Hat USA 2011 / The Law of Mobile Privacy and Security
• Diana Initiative 2020 Virtual / Products People Trust: Privacy, Consent, & Security
• May Contain Hackers (MCH2022) / Ethics does not belong on the wall! Ethical framework for the use of location data