Simon Gantenbein 📯Tracking von DHL Packeten weniger anonym als notwendig, da gabs nen Vortrag am #Winterkongress von Florian Bausch & Dennis Kniel. Nun haben sie auch noch UPS gecybert, doch denen ists egal: https://insinuator.net/2024/04/breaking-ups-parcel-tracking/
Hier noch der Link zum Vortrag:
https://media.ccc.de/v/dgwk2024-56194-ich-wei-was-du-letzten-so
Breaking UPS Parcel Tracking
Today, we describe our findings at United Parcel Service of America, Inc. (UPS), another German parcel market player, and the corresponding vulnerabilities' disclosure process. Findings Only a valid tracking number is needed to get the personal information of a parcel's receiver, including the sender's location, the recipient's name, and the recipient's location (city and country). It wa ...