Jennifer Valentino-DeVries writing for the New York Times: Service Meant to Monitor Inmates’ Calls Could Track You, Too. Further commentarty coming from Ars Technica and Boingboing.
The short version is this: your cell phone company gives another company the ability to see, in real time, where your cell phone is at any time. And, just in case you missed it, this has been done without your express consent.
Krebs on Security has a longer piece that really breaks this down, I recommend you check it out.
Personally, I’d like to see legislation from Congress that would clearly outline that the Third Amendment and the Fourth Amendment apply and government and private enterprises cannot seek out this information without due process. As a quick reminder, the 4th is protection against unreasonable search and seizure. The 3rd is about quartering soldiers in your home peace time. I argue that the 3rd is about harboring agents of the government without your consent. A piece of software the reports on your activities to the government (or a corporation) is an agent of that body.
And, a different attack vector on your cellphone, particularly if you live in the greater DC area:
Those dirtboxes might have been put in place by law enforcement or spy agencies, maybe USA, maybe not.