Hacker News Reader

Comment by ucaetano | Hacker News Reader

> LocationSmart’s home page features the corporate logos of all four the major wireless providers, as well as companies like Google, Neustar, ThreatMetrix, and U.S. Cellular.

Funny how they removed the corporate logos they had on their website from yesterday to today:

Yesterday: http://web.archive.org/web/20180516060611/https://www.locati...

Today: https://www.locationsmart.com/

View on HN

All the images still exist on their website:

https://www.locationsmart.com/cms/resources/

Look for 't-mobile' or 'verizon'

Oh wow, I can't believe they left all their CMS resources on open listing...that's quite a find. Their website reports that the "trylocationsmart500x250-w500h250.png" file, which is a screenshot of an older version of the vulnerable website, was uploaded 2016-09-14 22:20. This means that the vulnerable site was probably available since at least September 2016.

It seems less and less likely that this firm has ever hired any knowledgeable security person...

I think this image symbolizes their approach to security very well: https://www.locationsmart.com/cms/resources/privacysecurity....

Just put a lock on top, even if it's not actually securing anything.

well they're definitely getting a comprehensive, free-of-charge penetration test now

Yesterday and today look identical to me?

nah look at the white banner under the header graphic.

> Yesterday and today look identical to me?

Yesterday's had the carrier logos prominently displayed. Today's has not carrier logos that I can see.

Reply on news.ycombinator.com