TLDR InfoSec · STRATEGIES & TACTICS

EVERYONE KNOWS YOUR LOCATION, PART 2: TRY IT YOURSELF AND SHARE THE RESULTS

timsh.org9 min read

Summary from the TLDR InfoSec newsletter

This post discusses a method for analyzing mobile app data sharing and provides a Python notebook and guide to enable anyone to monitor and investigate how apps share location and other personal data. The author has created visualization tools showing how adtech companies like Unity dominate mobile game traffic, with hundreds of data requests happening within seconds of opening an app. The guide walks readers through setting up mitmproxy to intercept mobile traffic, recording app sessions, and analyzing the captured data to discover what personal information is being shared with third parties.