Not-quite-triangulation using the who’s near me feature in location-aware web apps

This report demonstrates a proof-of-concept privacy vulnerability in mobile "people nearby" applications: by manipulating the reported GPS accuracy and shifting virtual coordinates while observing whether a target appears in proximity lists, an attacker can iteratively home in on a user’s true location. The author outlines the method, shows maps and request logs from an assessment, and achieved a final location error of approximately 230 meters.