Garmin MapShare: Insecure Link Design and User Data Privacy (Part 2)
Password-protected MapShares had unauthenticated API endpoints allowing location requests and inReach messaging — plus guessable identifiers exposing public maps.
Read the articlePosts tagged
#privacy
2posts
Garmin inReach Security: Insecure Link Design and User Data Privacy (Part I)
A privacy issue in Garmin inReach allowed enumeration of map URLs due to short, guessable identifiers — exposing messages, locations, and contact details.
Read the article