Samsung, AccuWeather Exploit Expose Your GeoLocation


Two lines of code. That’s all it takes for an app to get your exact location if you’ve got an Android-powered smartphone by Samsung.

If your Samsung phone is running AccuWeather (or has run it, even once) any app that a user installs has access to their precise location. Since the AccuWeather functionality is a system app, it’s automatically granted access to the user’s GPS settings. Another app can then poll the user’s location — without the user granting any permissions to the app.

According to the XDA article, short of pulling your battery out, there are only two ways you avoid giving away your location to any app that wants to know where you are:

1. Under the AccuWeather settings, you can set your location manually (the developer recommends some remote village in China)

2. The second option is to root your phone, and remove the AccuWeather widget completely.

Neither option is ideal.

Hopefully Samsung and/or AccuWeather will recognize the problem and will issue a patch quickly.

Source: XDA

Share This Post
What's your reaction?
Love It
Like It
Want It
Had It
Hated It
About The Author
Joe Levi
Joe graduated from Weber State University with two degrees in Information Systems and Technologies. He has carried mobile devices with him for more than a decade, including Apple's Newton, Microsoft's Handheld and Palm Sized PCs, and is Pocketnow's "Android Guy". By day you'll find Joe coding web pages, tweaking for SEO, and leveraging social media to spread the word. By night you'll probably find him writing technology and "prepping" articles, as well as shooting video. Read more about Joe Levi here.