Remember the line, "Data is the new Currency", it looks like your location data is part of it - T-Mobile, Sprint, and AT&T are selling access to their customers’ location data, and that data is ending up in the hands of bounty hunters and others not authorized to possess it, letting them track most phones in the country.

T-Mobile shares location data with an aggregator called Zumigo, which shares information with Microbilt. Microbilt shared that data with a customer using its mobile phone tracking product. The bounty hunter then shared this information with a bail industry source, who shared it with Motherboard.

Motherboard’s investigation shows just how exposed mobile networks and the data they generate are, leaving them open to surveillance by ordinary citizens, stalkers, and criminals

https://motherboard.vice.com/en_us/article/nepxbz/i-gave-a-bounty-hunter-300-dollars-located-phone-microbilt-zumigo-tmobile

Surveillance by observing web cookies.

We all know that by collecting bits and pieces from the net we can build a profile now, that is take to the next level as web cookies provide much more details.

According to the Doc:- 

Our work starts with two insights. 

1. The presence of third-party cookies on most web pages, albeit pseudonymous, can tie together all or most of a user’s web traffic without having to rely on IP addresses
2.  Although most popular web pages now deploy HTTPS for authentication, many web pages reveal an already logged-in user’s identity in plain text

You can download the PDF from the link below:-

http://randomwalker.info/publications/cookie-surveillance.pdf

RSA and NSA relationship - Deeper than what we thought?

RSA was wishing this problem would disappear but, it only got worse.

According to the article:- 

Security industry pioneer RSA adopted not just one but two encryption tools developed by the U.S. National Security Agency.

Group of professors from Johns Hopkins, the University of Wisconsin, the University of Illinois and elsewhere now say they have discovered that a second NSA tool exacerbated the RSA software's vulnerability

The professors found that the tool, known as the "Extended Random" extension for secure websites, could help crack a version of RSA's Dual Elliptic Curve software tens of thousands of times faster, according to an advance copy of their research shared with Reuters.

RSA, now owned by EMC Corp, did not dispute the research when contacted by Reuters for comment. The company said it had not intentionally weakened security on any product 

"If using Dual Elliptic Curve is like playing with matches, then adding Extended Random is like dousing yourself with gasoline," Green said.

The academic researchers said it took about an hour to crack a free version of BSafe for Java using about $40,000 worth of computer equipment. It would have been 65,000 times faster in versions using Extended Random, dropping the time needed to seconds, according to Stephen Checkoway of Johns Hopkins.

The link below has more information:-

http://www.reuters.com/article/2014/03/31/us-usa-security-nsa-rsa-idUSBREA2U0TY20140331

NSA Fires back - They ( Google, Microsoft and others )knew the government was collecting their user data

I guess this story is not going to end and the claims and denials will continue with carefully worded statements

According to the article:- 

" Data collection under PRISM, he said, was a "compulsory legal process, that any recipient company would receive."

"If you have to go back to court every time you look at the information in your custody, you can imagine that would be quite burdensome," testified Brad Wiegmann, deputy assistant attorney general. 

Google CEO Larry Page echoed those statements, and added, "[W]e had never heard of the broad type of order that Verizon received -- an order that appears to have required them to hand over millions of users' call records."

The links below has more information:

http://news.cnet.com/8301-13578_3-57620600-38/nsa-top-lawyer-says-tech-giants-knew-about-data-collection