[conspire] Your cellphone privacy

[Rick Moen]

Found via a comment on Schneier's blog:

https://motherboard.vice.com/en_us/article/nepxbz/i-gave-a-bounty-hunter-300-dollars-located-phone-microbilt-zumigo-tmobile

Author hired a bounty hunter to find and bring back his lost cellular
telephone using only the phone's telephone number.  It turns out, the
cellular providers, all the time, sell  real-time location data to vast
numbers of outsiders.  It's said that the street value of your running
phone's current location -- at any time -- is just a few bucks.


You've never heard about this before, right?  Doesn't that make you
also wonder what _other_ things said providers aren't saying?


Bonus link:
https://www.securityweek.com/tls-certificates-many-gov-domains-not-renewed-due-government-shutdown

  Many TLS certificates for .gov domains have not been renewed due to
  the ongoing shutdown of the United States government, making them
  insecure or inaccessible.
  [...]
  Since usdoj.gov domains are on the HTTPS Strict Transport Security
  (HSTS) preload list, web browsers such as Chrome, Safari, Firefox,
  Edge, Internet Explorer and Opera prevent users from accessing them if
  their certificate has expired.

Mah-voul-ous.