Re:Emulating AirTags to upload arbitrary data via Apple's Fi...
by whoknowswhat11 on Wednesday May 12, 2021 @10:54AM
(#27131056)
Um - I think you are totally missing the point - Apple is doing probably the only fully encrypted system - vs tile and friends where everything lives in a database. This is not compromising billions of iOS devices, which frankly remain FAR FAR more secure than 80% of the competitor handsets which in many cases seem to ship with backdoor built in by their mfgs.
[ Parent
| on HN ]
Re:Emulating AirTags to upload arbitrary data via Apple's Fi...
by refulgentis on Wednesday May 12, 2021 @12:05PM
(#27131886)
Hmm, lots to unpack there, I'll stay focused on my iPhone,...I'm not so sure...the lead article on HN yesterday showed you can track people unrelated to tag's routes, live. https://www.intego.com/mac-security-blog/i-mailed-an-airtag-...
I've gathered there's a beep if this is going on for 3 days, but...still not comfy with this. And this isn't a particularly fringe opinion, plenty of comments on the article wondering how to opt out:
Re:Emulating AirTags to upload arbitrary data via Apple's Fi...
by bngybmgrglflps on Wednesday May 12, 2021 @08:12PM
(#27136802)
"Beep as anti-stalking measure" is somewhere between marketing spin and gaslighting. A lost AirTag chirps to serve its primary function of being recovered.
The timer is 3 days[1], which observers (Forbes, WaPo) agree is surprisingly unreasonable for this use case. We can infer it was never a serious design consideration.
On Android, decent Bluetooth is a gamble, but scanning will theoretically find one[2].
[1] https://daringfireball.net/linked/2021/04/20/moren-fine-prin... [2] https://lifehacker.com/try-using-a-bluetooth-scanner-app-to-...