Ethical Boundaries of Independent Security Research in the Consumer Pet Tracking Ecosystem

Pet GPS trackers collect far more data about their owners than most people realize – from daily routines to home addresses. In this post, Gerhard Hechenberger and Bernhard Gründling of the SEC Consult Vulnerability Lab assess the hardware and software security of four popular GPS trackers available on the European market, analyze the physical and software attack surfaces, and present a methodology for conducting this kind of research ethically. No exploitable vulnerabilities were found during the given time of this research project, but the complexity of the devices and the privacy implications of constant location tracking deserve closer attention, especially with the EU Cyber Resilience Act on the horizon.

Read the full post here