https://insinuator.net/tags/ups/ Recent content in UPS on Insinuator.net - Bold Statements Hugo en-us Wed, 10 Apr 2024 00:00:00 +0000 https://insinuator.net/2024/04/breaking-ups-parcel-tracking/ Wed, 10 Apr 2024 00:00:00 +0000 https://insinuator.net/2024/04/breaking-ups-parcel-tracking/ <p>Today, we describe our findings at United Parcel Service of America, Inc. (UPS), another German parcel market player, and the corresponding vulnerabilities’ disclosure process.</p> <h1 id="findings">Findings</h1> <p>Only a valid tracking number is needed to get the personal information of a parcel’s receiver, including the sender’s location, the recipient’s name, and the recipient’s location (city and country). It was possible to enumerate numerous tracking numbers during testing by iterating from known ones. Since the last digit of a tracking number is a checksum, it can be calculated. Also, certain businesses have a predefined prefix in their tracking numbers. This schema allows the enumeration of every parcel sent from a particular business.</p>