Phone cases, from a Chicago Apple Store, in a photo taken in March. Photo: Jim Young/AFP via Getty Images.

A bug in a service used to track cellphones allowed anyone who signed up for a free demonstration to track any person without consent, ZDNet reports. That service, LocationSmart, is intended for marketers but was used by another firm, Securus, to provide law enforcement with a controversial phone tracking system.

Why it matters: LocationSmart can be used to track nearly all domestic cell phones in the U.S. and Canada.

The details: The bug was discovered by Robert Xiao, a Carnegie Mellon PhD. student.

  • LocationSmart offers a demonstration to track the location of a cell phone whose owner documented consent for the trial.
  • Xiao noticed that the LocationSmart API — an interface between LocationSmart computer code and a users' own computer code — did not properly check that consent was given.
  • Xiao and a Carnegie Mellon organization called CERT, which specializes in security, notified LocationSmart of the problem.

Go deeper

Updated 25 mins ago - World

At least 50 killed, 3,000 injured after massive explosion rocks Beirut

Photo: Anwar Amro/AFP via Getty Images

A major explosion has slammed central Beirut, Lebanon, damaging buildings as far as several miles away and injuring scores of people.

Driving the news: The cause of the explosion is unknown. Lebanon's health minister said in televised remarks that more than 50 people have been killed and over 3,000 injured.

1 hour ago - Podcasts

The debate over COVID-19 liability protections

Stimulus talks continue to move slowly, with Democrats and Republicans unable to agree on whether or not to include coronavirus-related liability protections for businesses, health facilities and schools.

Axios Re:Cap digs into the debate, which could reset the cost-benefit analysis for businesses thinking about reopening and employees thinking about returning.

Updated 1 hour ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 3 p.m. ET: 18,364,694 — Total deaths: 695,848 — Total recoveries — 10,965,634Map.
  2. U.S.: Total confirmed cases as of 3 p.m. ET: 4,742,277 — Total deaths: 156,133 — Total recoveries: 1,513,446 — Total tests: 57,543,852Map.
  3. States: New York City health commissioner resigns in protest of De Blasio's coronavirus response — New York ER doctor on pandemic advice: "We know what works"
  4. Public health: 59% of Americans support nationwide 2-week stay-at-home order in NPR poll Atrium Health CEO says "virtual hospital" has treated 13,000 COVID patients.
  5. Politics: Republicans push to expand small business loan program Trump tells "Axios on HBO" that pandemic is "under control," despite surges in infections.
  6. Sports: Indy 500 to be held without fansRafael Nadal opts out of U.S. Open.