4 ms·
the problem is an api that returns someone’s pii without authenticating they are allowed to see it. a uuid on its own is not a problem. but if you can take one
by foolfoolz 5y ago
the problem is an api that returns someone’s pii without authenticating they are allowed to see it.
a uuid on its own is not a problem. but if you can take one and establish a link pii then the uuid becomes a pii risk.
- x0x0 5y agoThe far bigger problem is the airtag itself, which spews unpermissioned tracking data without any consent required.
- theshrike79 5y agoThere is consent. If you don't want the "spewed tracking data", you can disable the Find My Network completely.
- x0x0 5y agoApple has made no attempt at getting consent from whomever the airtag is on. Maybe if you have an iphone it could alert you.