4 ms·

Phones send out probe requests to get a list of open wifis. If you have a static access point, with a known geo location, software can be running on that point

Phones send out probe requests to get a list of open wifis. If you have a static access point, with a known geo location, software can be running on that point to remember a mac address of the phone from a probe and store it. Thus enabling real time tracking. Im like 60% sure this is how they figured out who the Bomber was in Austin TX.

rpigab 2y ago
This is also why some Chinese apps put everything inside a single app and request every permission there is, then track you through Wifi SSIDs seen by your device.
- megous 2y ago
  Almost no mobile apps need to know the mac addresses of anything, let alone SSID/BSSID. Why would OS give this info up to some app?
  - rpigab 2y ago
    Apps that have to link hardware via Wifi sometimes do, they take complete control over wifi in order to create a wireless access point and make the device connect to it during setup. I think Nikon camera remote control does this, also Meta Horizon, with Meta Quest VR headset, IIRC. There's also Wifi ranging feature, but it shouldn't need to expose SSIDs to the app, I don't know the API, it should be limited to giving a precise location: https://www.androidheadlines.com/2024/11/android-15-wi-fi-ranging.html https://www.androidheadlines.com/2024/11/android-15-wi-fi-ra...
    - megous 2y ago
      That sounds like something that's also not that risky. Short lived, temporary access point with randomized BSSID/mac address should not be useful for long term tracking if done well.
      - rpigab 2y ago
        It is not, if the developer only does what is expected. I believe when you have to perform this, the Android authorization asked to the user is complete control over the network adapter settings.
rgovostes 2y ago
Not entirely... "Apple platforms use a randomized Media Access Control address (MAC address) when performing Wi-Fi scans when not associated with a Wi-Fi network." https://support.apple.com/guide/security/privacy-features-connecting-wireless-networks-secb9cb3140c/web https://support.apple.com/guide/security/privacy-features-co...

rpigab 2y ago

This is also why some Chinese apps put everything inside a single app and request every permission there is, then track you through Wifi SSIDs seen by your device.

megous 2y ago
Almost no mobile apps need to know the mac addresses of anything, let alone SSID/BSSID. Why would OS give this info up to some app?
- rpigab 2y ago
  Apps that have to link hardware via Wifi sometimes do, they take complete control over wifi in order to create a wireless access point and make the device connect to it during setup. I think Nikon camera remote control does this, also Meta Horizon, with Meta Quest VR headset, IIRC. There's also Wifi ranging feature, but it shouldn't need to expose SSIDs to the app, I don't know the API, it should be limited to giving a precise location: https://www.androidheadlines.com/2024/11/android-15-wi-fi-ranging.html https://www.androidheadlines.com/2024/11/android-15-wi-fi-ra...
  - megous 2y ago
    That sounds like something that's also not that risky. Short lived, temporary access point with randomized BSSID/mac address should not be useful for long term tracking if done well.
    - rpigab 2y ago
      It is not, if the developer only does what is expected. I believe when you have to perform this, the Android authorization asked to the user is complete control over the network adapter settings.

rgovostes 2y ago

Not entirely... "Apple platforms use a randomized Media Access Control address (MAC address) when performing Wi-Fi scans when not associated with a Wi-Fi network." https://support.apple.com/guide/security/privacy-features-connecting-wireless-networks-secb9cb3140c/web https://support.apple.com/guide/security/privacy-features-co...