But that law was solely about CSLI (cell-site location information) from carriers; nothing was mentioned regarding purchasing commercial data. Courts haven't addressed this path because the data is "commercially available," and users technically consented via app ToS. The shift isn't about technology getting better; it's about finding the path of least legal resistance. Why deal with warrant paperwork when you can swipe a credit card?

2/2
#privacy #surveillance #databrokers #infosec #osint

Been getting asked quite a bit why we're seeing fewer IMEI-based tracking methods, such as stingrays and tower dumps, compared to before, and why there are so many new companies entering this market with arguably less direct answers.

TL;DR:
Law enforcement has shifted to Advertiser ID tracking because it's asynchronous, and doesn't require warrants.

Stingrays and geofence warrants require being at a location to identify targets and establish probable cause on a large set of individuals. Warrants for major gatherings are not easy to obtain. Advertiser IDs allow you to buy someone's entire location history going back months or years from data brokers; there is no probable cause and no judge involved. This is because the data being purchased was not gathered for law enforcement but was considered a business good or OSINT. Carpenter v. US (2018) made warrants mandatory for pulling tower data from carriers.

1/2
#privacy #surveillance #infosec #databrokers #osint

But that law was solely about CSLI (cell-site location information) from carriers; nothing was mentioned regarding purchasing commercial data. Courts haven't addressed this path because the data is "commercially available," and users technically consented via app ToS. The shift isn't about technology getting better; it's about finding the path of least legal resistance. Why deal with warrant paperwork when you can swipe a credit card?

2/2
#privacy #surveillance #databrokers #infosec #osint

Been getting asked quite a bit why we're seeing fewer IMEI-based tracking methods, such as stingrays and tower dumps, compared to before, and why there are so many new companies entering this market with arguably less direct answers.

TL;DR:
Law enforcement has shifted to Advertiser ID tracking because it's asynchronous, and doesn't require warrants.

Stingrays and geofence warrants require being at a location to identify targets and establish probable cause on a large set of individuals. Warrants for major gatherings are not easy to obtain. Advertiser IDs allow you to buy someone's entire location history going back months or years from data brokers; there is no probable cause and no judge involved. This is because the data being purchased was not gathered for law enforcement but was considered a business good or OSINT. Carpenter v. US (2018) made warrants mandatory for pulling tower data from carriers.

1/2
#privacy #surveillance #infosec #databrokers #osint

The nation’s strictest #privacy #law just took effect, to #databrokers’ chagrin
Californians can now submit demands requiring 500 brokers to delete their data.
According to the #California Privacy Protection Agency, more than 500 companies actively scour all sorts of sources for scraps of information about individuals, then package and store it to sell to marketers, private investigators, and others.
https://arstechnica.com/tech-policy/2026/01/data-broker-hoarding-is-rampant-new-law-lets-consumers-fight-back/

The nation’s strictest #privacy #law just took effect, to #databrokers’ chagrin
Californians can now submit demands requiring 500 brokers to delete their data.
According to the #California Privacy Protection Agency, more than 500 companies actively scour all sorts of sources for scraps of information about individuals, then package and store it to sell to marketers, private investigators, and others.
https://arstechnica.com/tech-policy/2026/01/data-broker-hoarding-is-rampant-new-law-lets-consumers-fight-back/

The Big Ass Data Broker Opt-Out List

Yaelwrites has been maintaining BADBOOL since 2017. It is a up-to-date list of all known databrokers that hoard your data and how to opt out from it.

https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List?tab=readme-ov-file

#tech #technology #data #privacy #security #databrokers

The Big Ass Data Broker Opt-Out List

Yaelwrites has been maintaining BADBOOL since 2017. It is a up-to-date list of all known databrokers that hoard your data and how to opt out from it.

https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List?tab=readme-ov-file

#tech #technology #data #privacy #security #databrokers