Samsung, AccuWeather Exploit Expose Your GeoLocation
Two lines of code. That’s all it takes for an app to get your exact location if you’ve got an Android-powered smartphone by Samsung.
If your Samsung phone is running AccuWeather (or has run it, even once) any app that a user installs has access to their precise location. Since the AccuWeather functionality is a system app, it’s automatically granted access to the user’s GPS settings. Another app can then poll the user’s location — without the user granting any permissions to the app.
According to the XDA article, short of pulling your battery out, there are only two ways you avoid giving away your location to any app that wants to know where you are:
1. Under the AccuWeather settings, you can set your location manually (the developer recommends some remote village in China)
2. The second option is to root your phone, and remove the AccuWeather widget completely.
Neither option is ideal.
Hopefully Samsung and/or AccuWeather will recognize the problem and will issue a patch quickly.