How apps you use got hijacked into selling your location

Playing Candy Crush, swiping left on a dating app and checking your Yahoo inbox shouldn’t expose your location. I say shouldn’t, but those apps and thousands more were likely hijacked by data brokers who turned your personal info into cash.

Now, cybercriminals on the Dark Web have access to the location information of tens of millions of people. I’ll explain how this happened and share my secret weapon for fighting this kind of privacy invasion.

🔎 Whodunnit?

It all started with Gravy Analytics, a data broker that tracks over a billion devices worldwide. (They also own Venntel, which sells info to U.S. government agencies like the FBI and IRS.) A Russian hacker wormed into Gravy’s records, stealing 1.4 gigabytes of info.

▶️ That data includes over 30 million location points. 404 Media (paywall link) investigated the breach and found the shocking way they obtained your whereabouts.

This is clever (and super sketchy)

When you open a site or app, there’s a millisecond-long auction to decide the ads you see. The process is called real-time bidding (RTB), and it’s based on, among other things, all the data points they have about you and what you’re most likely to buy.

RTB collects enough information to make sure the right people are seeing an ad, and data brokers are in those auctions, too, with another purpose: To snag your info. The scummiest part is they don’t even need to buy any ads to do it.

The Gravy Analytics leak data shows thousands of apps gathered your location data. The working theory is they collected RTB data themselves or bought it from other data-broker companies.

Who’s on this list?

The list is long, and I’ll get to the specifics. Some apps, like Tinder, say they’ve never worked with Gravy Analytics. (I’ve heard that excuse before.) But if the info came from RTB, that’s in the advertising ecosystem, not the app’s code.

Really, that’s worse in some ways. This type of location tracking is happening through apps whether or not developers explicitly OK it. This includes:

Continue reading

6 signs your vacation rental is a scam

It’s that time of year when so many of us are planning vacations and booking a rental. Sadly, scammers are very aware of that, and they’re always changing their tricks to fool people out of their money, rentals — or worse.

Continue reading

Komando Q&A

‘How do I reset my old router?’

After I shared my router picks (and so many of you realized you have a TP-Link …), my inbox is flooded with this one: “What do I do with my old router after I upgrade?” Good question. A factory reset wipes your username, password, Wi-Fi network name or SSID, and any security settings.

Step 1: Look for a small button on the back or bottom of your router. It’s usually recessed (so you’ll need a paper clip to press it in) and may be labeled “Reset.”

Step 2: Do a 30-30-30 reset. It’s a bit of a pain but works for every router model I’ve come across. Here’s how:

  • 👉 With your router plugged in, hold down the reset button for 30 seconds.
  • While still pressing reset, unplug your router from the power source and count for another 30 seconds.
  • Finally, still holding reset, reconnect the router to the power cord and count another final 30 seconds. Done!

I did the work for you: Protecting yourself online doesn’t have to be complicated. I’ve handpicked the five best tools to safeguard your devices, data and identity.

Nosy, nosy: On your iPhone, bring up a list of all the apps with access to your contacts. Open Settings > Privacy & Security > Contacts. Tap Limited Access for any that shouldn’t get every little detail.

🖨️ Printer secret: Most printers have a “Draft mode” that uses less ink when you don’t need anything fancy. (Some call it “Economy mode” or “Fast mode.”) To try it, open a document or file, hit Print, then go to Properties or Preferences, and look for Draft mode.

Cheap gas? Yes, please: The free Upside app gives you cash back on gas, groceries and dining out. Download Upside and use promo code Kim to get an extra $0.25 back for every gallon on your first tank of gas.

Bonus keyboard shortcut: In Word, Google Docs and lots of other programs, you can add a hyperlink to your existing text. Highlight the text you want to link and hit the Windows key + K (Windows) or Cmd + K (Mac), then paste or type in the web address. Done.

Google Docs shortcut: Editing a doc? There’s an easy way to open links with no mouse required. With your cursor over the link, on Windows, hit Alt + Enter. On a Mac, it’s Option + Enter.

🔌 There are never enough airport outlets: Smart charging protects your phone’s battery over time by only topping you up to 85%. But if you’re on the go or need every bit of juice, you can turn it off. On iPhone, head to Settings > Battery > Battery Health & Charging, then turn off Optimized Battery Charging. On Android, go to Settings > Battery > Adaptive Charging, and turn off Use Adaptive Charging.

Cool, calm and collected: AI can draft a message and keep it chill, even when you’re not. It’s good for something like, “My heating hasn’t worked for two weeks. I told my landlord, but it’s still not fixed. Help me write a polite but firm note reminding them and requesting a timeline for repairs.”

🕵️ Cheater, cheater: A TikTok PI revealed a sneaky trick cheaters use, and it’s one I’ve been warning you about for a decade. In the Apple Notes app preinstalled on every iPhone, you can share a note. It’s way more hidden than talking through text. A note has been shared if there’s a little icon of a person next to it. I’m not telling you to go spy; I’m just sharing the tricks of the trade.

Stop putting it off: With Fabric, you can get term life insurance set up in a few minutes with no health exam required. You’ll be glad to check that off your to-do list.

On the cheap: Ever wonder what happens to all the surplus inventory from online retailers? Liquidation.com hawks packages and undelivered goods from Amazon, Target, Walmart and The Home Depot. You can filter by brand or retailer.

Mac hack: Low Data mode is a lifesaver if you’re stuck using a hotspot or have a slow connection. Click the Apple logo > System Settings > Wi-Fi to see the network you’re connected to. Tap on it, then choose Details and enable Low Data mode. FYI: You’ll have to do this for each network you connect to.

📵 No phone needed: Use the Snipping Tool to scan QR codes on Windows 11. Just press and hold the Windows key + Shift + S at the same time. This opens up the snipping screen. Then, click and drag your mouse over the QR code. You’ll see a link pop up that you can click. 

“Hey, Kim, what was the name of that …”: I get so many questions about our security sponsors. You need five security products. I put together a handy resource where you can find what they do, links and deals I’ve negotiated just for you.

Drowning in numbers? Your favorite AI chatbot has your back if you’re brainstorming or need to jazz up a presentation. Plug in a list of numbers or any other data and prompt, “Analyze this information. Explain any trends or insights you find.” Uploading a pic also works.

🤝 ”Can I pick your brain?” I can’t stand it when someone asks me that. A better way? “I have an idea. Can I run it by you?” After over 25 years of running a successful debt-free business, I’ve seen it all. Got a question about tech, business or life? Let me help. Just drop a note here on my site. I read every single one.

No salesperson, no long contracts: Ready to install a home security system? With SimpliSafe, it’s easy to order everything you need online and set it up yourself. (If you need help, they can do it for you.) Plus, it comes with 24/7 professional monitoring, because peace of mind shouldn’t break the bank. Hit this link for 50% off.