Update: Two Years After Discovery Dangerous Security Hole Lingers in GPS Services

**Executive Summary:** Security researchers discovered authorization-bypass vulnerabilities in ThinkRace-backed GPS tracking services that leak device location, serial numbers, assigned phone numbers, and up to a week of location history, and that can permit remote commands (including SMS commands that could enable eavesdropping); the flaws affect hundreds of thousands to potentially millions of consumer trackers and were reported but remained largely unpatched.