8 ms·
FindMy Flipper – AirTag and SmartTag Emulator
- xnzakg 2y agoSadly this requires a "donor" tag to impersonate (which then can't be used for as long as you want this to work), or using OpenHaystack which requires using a Mac in order to get the data.
- stavros 2y agoIt doesn't, I use it without an AirTag on my Linux machine. It works fine.
- Nereuxofficial 2y agoHow do i use it without an Airtag? At the step number 9 the setup asks me to enter an Apple ID, which i do not have. Is there a way to track it on Android or Linux without an Apple ID?
- stavros 2y agoYou don't need a Mac to create an Apple ID, no? You just create one on the site. To be fair, I created mine years ago.
- fossiliferous 2y agoI've tried to create an Apple ID recently on a non-Apple platform and it was a huge PITA. Tried using different browsers on Windows and Linux, tried Apple Music on Android , tried iCloud on Windows - nothing. Basically I was able to pass email and phone number verification, but then "Continue" button on the "Apple ID & Privacy " page doesn't work and you can't get around it. No error or description whatsoever, just internal server error in the browser's console. Turns out it's a known problem and the same button works perfectly fine when pressing it on an Apple device. I haven't tried it in a macOS VM though, but presumably Apple flags such accounts anyway. Related thread: https://www.reddit.com/r/applehelp/comments/17zawel/continue_button_not_working_on_apple_id_privacy https://www.reddit.com/r/applehelp/comments/17zawel/continue...
- stavros 2y agoYeah, Apple is crap that way. Whenever I log in from my Linux desktop, they "lock" my account and I have to go through a long process where I verify my email, phone, password, and they send me an SMS code. If you want, I can create an account for you on my Mac, email me (email in profile).
- mintplant 2y agoHow? The README [0] states that a Mac is required. Do you mean that you use the Find My network to keep track of your Linux machine's location (as described in [1]), but not to locate devices (which requires either macOS or a proxy server running on macOS)? [0] https://github.com/seemoo-lab/openhaystack?tab=readme-ov-file https://github.com/seemoo-lab/openhaystack?tab=readme-ov-fil... [1] https://github.com/seemoo-lab/openhaystack/tree/main/Firmware/Linux_HCI https://github.com/seemoo-lab/openhaystack/tree/main/Firmwar...
- stavros 2y agoI use this and it's great. Consumes basically no power, too. I'd like it if it could talk to Google's "Find device" network, but it's already working really well with Apple's network.
- panki27 2y agoWhat Android app do I need to use this? Preferably one that does not require Google Services?
- dncornholio 2y agoNone. All you need is a computer with Python, git and Docker
- Etheryte 2y agoThis project is for Flipper Zero, not a phone.
- panki27 2y agoI understand that I need a Flipper, and I have one. But what Android app can actually "find" it? I don't have an iPhone or Samsung device.
- compsciphd 2y agoThis concept would possible be used to get around the stalking features that Apple et al has implemented. Ex: Get N donor tags. Have it cycle through the N tags every 24/N hours. Therefore, to apple (/ device tracking), the "stalkee" is never being followed by a single tag for an extended period of time.
- diggan 2y ago> Ex: Get N donor tags. Have it cycle through the N tags every 24/N hours. Therefore, to apple (/ device tracking), the "stalkee" is never being followed by a single tag for an extended period of time. If you have to cycle the tags constantly, couldn't you just physically follow the person and spend less effort/money at that point? Or get a GPS tag that doesn't use the AirTag "network" at all, no cycling needed.
- winkelmann 2y agoYou wouldn't actually physically cycle/replace the tag. As you can see in the README, you can clone real tags, which could be advertised by the device in intervals.
- compsciphd 2y agoright, I'm actually wondering if one could build an esp32 device that did this itself (i.e. without the need of a flipper zero). Basically something in a similar form factor of an actual air tag. the anti-stalking features make airtags less useful for anti-theft (or theft discovery), as any aware thief can just disable the tag due to the anti-stalking feature (apple does note that its not designed for anti-theft purposes). But if one can defeat the anti-stalking feature, it makes it much more practical for this. Personally, I wish Apple allowed one to permanently put their air-tag into law enforcement mode, which would prevent you personally from tracking it (and remove it from stalking alerts), but would provide legally recognized law enforcement the ability to request the tracking record (i.e. same process that they might use for requesting cell phone location data).
- nunobrito 2y agoStill using flipper a few times per week. Looking forward to the next edition with Wi-Fi and other frequencies.
- phasE89 2y agoWhat do you use it for?
- nunobrito 2y agoThe IR blaster is the most common usage. After that, some games are good. Pass hours playing scorched earth while travelling. Also give it for my kids to play instead of letting use the phone and browse random stuff on youtube.
- copperx 2y agoI'm glad you've found an use for it. Its most common use is a paperweight at home.
- theshrike79 2y agoDunno about the current prices, but it was a REALLY expensive paperweight for a long time. People paid hundreds of dollars for one.
- sulandor 2y agonah - a "good" paperweight can easily rival the cost of a car
- reaperducer 2y agoI see you've been shopping with my wife.
- dogecoinbase 2y ago
- ks2048 2y agoThe README.md could use a link to know what this is talking about: https://flipperzero.one/ https://flipperzero.one/
- xyst 2y agovery interesting project, but one of the downstream dependencies used here is insecure by default: https://github.com/biemster/FindMy/blob/113ebf4017729b92a381624c1932065588c3ebde/pypush_gsa_icloud.py#L27 https://github.com/biemster/FindMy/blob/113ebf4017729b92a381... Seems to be auth lib for iCloud. Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. As with anything in the centralized world, I wouldn’t use this on an account with a high number of services/digital assets tied to it. I wouldn’t be surprised if Apple bans accounts that use this. Wouldn’t be difficult to find out either given the unique “adsid” code that is required to login.
- deleted 2y ago[deleted]
- ForOldHack 2y agoThe auth lib for iCloud is inherently insecure, for you, and obviously not for Apple, Inc. I would fork this project into two separate products, which is abhorrent to do, but it must be done. I would never consciously integrate a library from a third party. I am in the middle of scanning every single release of 'VenToy' into virus scanners, awaiting for the moment when an NZ-type vulnerability proves true. Its not that Apples payment stream depends on this, its their subscription model. Beware of offering a feature free that Apple thinks is interesting, they will lock you out, and start charging people for it. Doubly beware of p*ssing off geeks, the will go to bed on Friday, in an angry state, and fervently work all weekend both to black box your product, but to trivialize the implementation of it. Now those are the really scary people.
- mschuster91 2y ago> Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. Hold short, so you don't need an iOS device technically to onboard AirTags, any Apple device is sufficient? Why in the name of everything that is holy does Apple not support this officially, just to push sales for iOS devices or what? (Angry rant of someone who bought an extra used iPhone despite owning like 5k in Apple desktop/mobile gear, just to be able to onboard some AirTags)
- anonymousiam 2y agoHas anybody tried this to see how the "Find My" app reacts to seeing the "same" tag in more than one location?
- denysvitali 2y agoApple servers don't know anything about the location, so it's up to the implementation (in this case, the FindMy app) to average the location
- KTibow 2y agoAm I missing something or would it just use the most recent one?
- theginger 2y agoYeah but what happened when one is many miles away and both are checking in, so most recent location is flip flopping.
- deleted 2y ago[deleted]
- jamesy0ung 2y agoIt would be nice if this can be ported to a low cost BLE device such as the ESP32-C3. Using a flipper as an airtag is a bit expensive.
- solarkraft 2y agoThere are a few projects for this. Check this out: https://github.com/seemoo-lab/openhaystack/tree/main/Firmware/ESP32 https://github.com/seemoo-lab/openhaystack/tree/main/Firmwar...
- deleted 2y ago[deleted]