Privacy Meltdown: Strava tricked into Revealing Soldiers’ Names

A Norwegian journalist demonstrated that Strava's public heatmap and Flyby feature can be abused to identify and reveal names and locations of military personnel by uploading hundreds of slightly altered GPX tracks to generate fake runs and then using Flyby to find co-located users; the experiment exposed dozens of service members and highlights risks from default privacy settings and location-based services.