The 2018 Pwnie Nominee For Lamest Vendor Response

ThinkRace / Trackmageddon

Credit: Vangelis Stykas and Michael Gruhn

Six million devices whose location tracking data was accessible via ThinkRace’s web portal software were exposed and continue to be exposed. A number of companies have this oftware deployed and they aren’t applying patches. What’s worse is taht Thinkrace had known about these bvulnerabilities since 2016. Oh, you haven’t heard about it? Maybe it’s because the authors declined to do a full court press-tour.