Today, we describe our findings at United Parcel Service of America, Inc. (UPS), another German parcel market player, and the corresponding vulnerabilities' disclosure process. Findings Only a valid tracking number is needed to get the personal information of a parcel's receiver, including the sender's location, the recipient's name, and the recipient's location (city and country). It wa ...
