Analysis of Privacy Protections in Fitness Tracking Social Networks -or- You can run, but can you hide?
summary
This study scrapes 21 million posts from a popular fitness service and finds 16.5% of users enable circular Endpoint Privacy Zones (EPZs). A geometry + consensus attack reconstructs hidden centers from remaining route fragments and GPS jitter, placing 95.1% of moderately active users at risk when they have ≥3 protected activities. Adaptations of geo‑indistinguishability, EPZ fuzzing and spatial cloaking reduce leakage; affected companies deploy variants of these countermeasures after responsible disclosure.
AI-written summary · about
chapters (7)
- 0:00Introduction to fitness apps
- 1:13Privacy risks in tracking
- 2:26Endpoint privacy zone flaws
- 5:53Proposed research methodology
- 10:47Evaluation and mitigation
- 13:11Study results and disclosure
- 16:26Q&A and closing discussion
related talks
39mA Run a Day Won't Keep the Hacker Away: Inference Attacks in Fitness Tracking Social Networks
15mA Closer Look: Evaluating Location Privacy Empirically
17mPrivacy Design Flaws
04mDeep Dive: Identity, Privacy, and Informed Consent in the...
49mWeb Side Story: A Privacy Odyssey through Tracking and Fingerprinting
01h 09mWearing your privacy on your sleeve
06mWhere You Go Matters: A Study on the Privacy Implications of Continuous Location Tracking
01h 20mLocation privacy: what problems - which solutions?