4 ms·

I'm fairly sure the article is wrong. For example, someone found strings in Google's implementation that mentioned AWDL: https://social.treehouse.systems/@nico

by tech234a 11mo ago

I'm fairly sure the article is wrong. For example, someone found strings in Google's implementation that mentioned AWDL: https://social.treehouse.systems/@nicolas17/115584732339035177 https://social.treehouse.systems/@nicolas17/1155847323390351... Also people have mentioned having success Airdropping to macOS devices, which are not listed as being supported on the Wi-Fi Aware page.

Aloisius 11mo ago
Yeah, people have confirmed it works with iOS 15, so it seems more likely that Google implemented AWDL.
est 11mo ago
> macOS devices, which are not listed as being supported on the Wi-Fi Aware page. Not listed, but shipped with some Wifi Aware library /System/Library/PrivateFrameworks/DeviceToDeviceManager.framework/Plugins/WiFiAwareD2DPlugin.bundle
- varenc 10mo ago
  Just `tcpdump -i awdl0` while Airdrop-ing to a Mac to observe it's still using AWDL. (unless the interface named awdl0 is actually using WiFi Aware...) Another fun thing to do: `ping6 ff02::1%awdl0`. Pings all nearby Apple devices with AWDL active. Including things like your neighbor's phone that's not even on your local network. (but addresses rotate I believe so can't track persistently)
  - darkwater 10mo ago
    > (but addresses rotate I believe so can't track persistently) But maybe you can infer presence tracking the response time? Could be exploited anyway, no?
    - varenc 10mo ago
      yes! I've had the same thought. If you have only one neighbor in range, seems like you could definitely infer their presence and approximate range based on latency. Phones don't keep AWDL active all the time, but every time you swipe control center it perks up I think. Could also detect when someone is hosting a party or something.
varenc 10mo ago
In 2020 Google's Project Zero found a zero-click remote RCE in Apple's AWDL implementation. So at least some folks at Google are fully equipped to build a reverse engineered implementation. Discussion on that awhile back: https://news.ycombinator.com/item?id=25270184 https://news.ycombinator.com/item?id=25270184
fulafel 10mo ago
Both can still be true. The interop may be motivated by the EU regulator's intention so and to stave off further regulation.

Aloisius 11mo ago

Yeah, people have confirmed it works with iOS 15, so it seems more likely that Google implemented AWDL.

est 11mo ago

> macOS devices, which are not listed as being supported on the Wi-Fi Aware page. Not listed, but shipped with some Wifi Aware library /System/Library/PrivateFrameworks/DeviceToDeviceManager.framework/Plugins/WiFiAwareD2DPlugin.bundle

varenc 10mo ago
Just `tcpdump -i awdl0` while Airdrop-ing to a Mac to observe it's still using AWDL. (unless the interface named awdl0 is actually using WiFi Aware...) Another fun thing to do: `ping6 ff02::1%awdl0`. Pings all nearby Apple devices with AWDL active. Including things like your neighbor's phone that's not even on your local network. (but addresses rotate I believe so can't track persistently)
- darkwater 10mo ago
  > (but addresses rotate I believe so can't track persistently) But maybe you can infer presence tracking the response time? Could be exploited anyway, no?
  - varenc 10mo ago
    yes! I've had the same thought. If you have only one neighbor in range, seems like you could definitely infer their presence and approximate range based on latency. Phones don't keep AWDL active all the time, but every time you swipe control center it perks up I think. Could also detect when someone is hosting a party or something.

varenc 10mo ago

In 2020 Google's Project Zero found a zero-click remote RCE in Apple's AWDL implementation. So at least some folks at Google are fully equipped to build a reverse engineered implementation. Discussion on that awhile back: https://news.ycombinator.com/item?id=25270184 https://news.ycombinator.com/item?id=25270184

fulafel 10mo ago

Both can still be true. The interop may be motivated by the EU regulator's intention so and to stave off further regulation.