Skip to main navigation Skip to search Skip to main content

Who's watching your run? How apps are undermining security.

Press/Media

Description

A jog is meant to be the most ordinary of routines. You lace up, you run, you log it, you move on. But in March, a routine run on the deck of France's aircraft carrier Charles de Gaulle reportedly did something else: it helped reveal the ship’s position in the eastern Mediterranean when the route was uploaded to Strava. This wasn’t a "hack" in the way people usually imagine a security breach. Nobody broke into a classified network. Nobody stole a password. A consumer app did exactly what it was designed to do: record a route, timestamp it, and make it shareable. The risk emerged only when that ordinary trace was read in the right context, by someone who knew what to do with it. This is the crucial shift in how security failures happen. In the older cybersecurity story, the "attacker" breaks something: a password, a firewall, a server. In the newer one, nobody breaks anything, but modern digital life generates constant data exhaust through normal behaviour, and that exhaust becomes intelligence when it is aggregated, compared, and interpreted. One route is a curiosity. Repeated routes become a signature. Enough signatures become a map.

Period14 Apr 2026

Media contributions

1

Media contributions

  • TitleWho's watching your run? How apps are undermining security
    Degree of recognitionInternational
    Media name/outletRTE Brainstorm
    Media typeOnline Article - RTE Brainstorm
    Country/TerritoryIreland
    Date14/04/26
    DescriptionA jog is meant to be the most ordinary of routines. You lace up, you run, you log it, you move on. But in March, a routine run on the deck of France's aircraft carrier Charles de Gaulle reportedly did something else: it helped reveal the ship’s position in the eastern Mediterranean when the route was uploaded to Strava.

    This wasn’t a "hack" in the way people usually imagine a security breach. Nobody broke into a classified network. Nobody stole a password. A consumer app did exactly what it was designed to do: record a route, timestamp it, and make it shareable. The risk emerged only when that ordinary trace was read in the right context, by someone who knew what to do with it.

    This is the crucial shift in how security failures happen. In the older cybersecurity story, the "attacker" breaks something: a password, a firewall, a server. In the newer one, nobody breaks anything, but modern digital life generates constant data exhaust through normal behaviour, and that exhaust becomes intelligence when it is aggregated, compared, and interpreted. One route is a curiosity. Repeated routes become a signature. Enough signatures become a map.
    URLhttps://www.rte.ie/brainstorm/2026/0414/1566131-apps-privacy-security-location-monitoring-secrets/
    PersonsStephen Treacy