It’s possible to hack UPS tracking numbers to monitor other people’s iPad orders, consultant Stephen Foskett has discovered.
If you have a genuine iPad tracking number, you change the last two digits to get valid tracking numbers for other people’s iPad orders. I just checked, and I’m glad to see I’m not the only one with an iPad on a slow plane from China.
Here’s how the UPS tracking number breaks down, according to Foskett:
… the standard UPS format is “1ZAAAAAATTIIIIIPPC”, where AAAAAA is the account, TT is the service type, IIIII is the invoice, PP is the package, and C is the check digit. These numbers are not encrypted or at all random, and CodeProject has a complete decoding method.
To hack the tracking number, you increase the last number by one (the checksum), while decreasing the penultimate number by one (this is the last digit of the package number).
So if your package number ends in “63,” you can substitute “54,” “45,” “36,” “27,” and “18” to get valid tracking numbers for five more packages.
The hack works — I just tried it. I can now follow iPad packages going to Manchester Center, VT; Inverness, IL; Waverly, MN; Bridgewater, NJ; and Saint Louis, MO.
To make sure the packages are iPads, check the origin location (Shenzhen, CN) and weight (1.4Kgs).
Foskett suggests the hack could be exploited by analysts trying to figure out how many iPads Apple shipped this week. He thinks it could also reveal how many people are ordering two iPads, and the distribution of customers around the country.
UPS Tracking Hack Can Reveal iPad Orders and Destinations
Leander Kahney is the editor and publisher of Cult of Mac.
Leander is a longtime technology reporter and the author of six acclaimed books about Apple, including two New York Times bestsellers: Jony Ive: The Genius Behind Apple’s Greatest Products and Inside Steve’s Brain, a biography of Steve Jobs.
He’s also written a top-selling biography of Apple CEO Tim Cook and authored Cult of Mac and Cult of iPod, which both won prestigious design awards. Most recently, he was co-author of Cult of Mac, 2nd Edition.
Leander has been reporting about Apple and technology for nearly 30 years.
Before founding Cult of Mac as an independent publication, Leander was news editor at Wired.com, where he was responsible for the day-to-day running of the Wired.com website. He headed up a team of six section editors, a dozen reporters and a large pool of freelancers. Together the team produced a daily digest of stories about the impact of science and technology, and won several awards, including several Webby Awards, 2X Knight-Batten Awards for Innovation in Journalism and the 2010 MIN (Magazine Industry Newsletter) award for best blog, among others.
Before being promoted to news editor, Leander was Wired.com’s senior reporter, primarily covering Apple. During that time, Leander published a ton of scoops, including the first in-depth report about the development of the iPod. Leander attended almost every keynote speech and special product launch presented by Steve Jobs, including the historic launches of the iPhone and iPad. He also reported from almost every Macworld Expo in the late ’90s and early ‘2000s, including, sadly, the last shows in Boston, San Francisco and Tokyo. His reporting for Wired.com formed the basis of the first Cult of Mac book, and subsequently this website.
Before joining Wired, Leander was a senior reporter at the legendary MacWeek, the storied and long-running weekly that documented Apple and its community in the 1980s and ’90s.
Leander has written for Wired magazine (including the Issue 16.04 cover story about Steve Jobs’ leadership at Apple, entitled Evil/Genius), Scientific American, The Guardian, The Observer, The San Francisco Chronicle and many other publications.
Leander has a postgrad diploma in artificial intelligence from the University of Aberdeen, and a BSc (Hons) in experimental psychology from the University of Sussex.
He has a diploma in journalism from the UK’s National Council for the Training of Journalists.
Leander lives in San Francisco, California, and is married with four children. He’s an avid biker and has ridden in many long-distance bike events, including California’s legendary Death Ride.
You can find out more about Leander on LinkedIn and Facebook. You can follow him on X at @lkahney or Instagram.
