4 ms·

> I’ll be pretty shocked if I’m “spied on” with this style of device. Why? There's plenty of devices in the wild constantly looking for wifi connection attempt

> I’ll be pretty shocked if I’m “spied on” with this style of device. Why? There's plenty of devices in the wild constantly looking for wifi connection attempts, BLE Scans. Even cellular provider track locations in real-time by logging what cell towers you're using and associated signal strength. Just search for a place in google maps, and note the "Popular Times". How do you think they got that data :D

whoisburbansky 5y ago
The protocol they use explicitly protects against this attack vector.
- whoisburbansky 5y ago
  Details of the rotating key used so that persistent tracking based off of the BLE beacon isn’t possible: https://www.wired.com/story/apple-find-my-cryptography-bluetooth/ https://www.wired.com/story/apple-find-my-cryptography-bluet...
DrBenCarson 5y ago
Um they get that data from being a monopoly and knowing when most people are looking up directions to or information about a location. Sure, they might do some other stuff to expand the data but there's much more relevant data right in their first-party domain.
- seoulmetro 5y ago
  No, they definitely read your location on your phone and "place you there". It has nothing to do with active actions made by yourself. The same way traffic readings are done, not by cars, but by people in cars with phones.
- tharkun__ 5y ago
  Apart from what my sibling already said, think about it. How would searching for a restaurant correlate with "popular times"? Not much really. Would be all over the place. I search for the restaurant 3 days in advance at 10 in the morning but I'll be there Saturday night at 8, just like many other people. And at 10 in the morning the restaurant was still closed.
heydabop 5y ago
> Even cellular provider track locations in real-time by logging what cell towers you're using and associated signal strength. They also sell that data, and until about 3 years ago, anyone could access it FOR FREE! :D https://krebsonsecurity.com/2018/05/tracking-firm-locationsmart-leaked-location-data-for-customers-of-all-major-u-s-mobile-carriers-in-real-time-via-its-web-site/ https://krebsonsecurity.com/2018/05/tracking-firm-locationsm...

whoisburbansky 5y ago

The protocol they use explicitly protects against this attack vector.

whoisburbansky 5y ago
Details of the rotating key used so that persistent tracking based off of the BLE beacon isn’t possible: https://www.wired.com/story/apple-find-my-cryptography-bluetooth/ https://www.wired.com/story/apple-find-my-cryptography-bluet...

DrBenCarson 5y ago

Um they get that data from being a monopoly and knowing when most people are looking up directions to or information about a location. Sure, they might do some other stuff to expand the data but there's much more relevant data right in their first-party domain.

seoulmetro 5y ago
No, they definitely read your location on your phone and "place you there". It has nothing to do with active actions made by yourself. The same way traffic readings are done, not by cars, but by people in cars with phones.
tharkun__ 5y ago
Apart from what my sibling already said, think about it. How would searching for a restaurant correlate with "popular times"? Not much really. Would be all over the place. I search for the restaurant 3 days in advance at 10 in the morning but I'll be there Saturday night at 8, just like many other people. And at 10 in the morning the restaurant was still closed.

heydabop 5y ago

> Even cellular provider track locations in real-time by logging what cell towers you're using and associated signal strength. They also sell that data, and until about 3 years ago, anyone could access it FOR FREE! :D https://krebsonsecurity.com/2018/05/tracking-firm-locationsmart-leaked-location-data-for-customers-of-all-major-u-s-mobile-carriers-in-real-time-via-its-web-site/ https://krebsonsecurity.com/2018/05/tracking-firm-locationsm...