News for hackers. Stuff that matters.
Re:Want a killer product? Become more opinionated by cma on Friday June 04, 2021 @10:03AM (#27393696)
So both are opt out. Which one is worse?
Re:Want a killer product? Become more opinionated by pdpi on Friday June 04, 2021 @10:24AM (#27393918)
The one that lets my neighbour look up kiddy porn over my connection.
Re:Want a killer product? Become more opinionated by jon-wood on Friday June 04, 2021 @05:12PM (#27399132)
I get the anger about Sidewalk, but this is absolutely not a thing you can do with it.

Sidewalk isn’t a wifi network that people can just connect to, it’s a LoRa radio. A low bandwidth, long range protocol. Devices connecting need to be pre-registered with Amazon, and can only communicate via an endpoint in AWS.

Even if someone somehow created a device for arbitrary web browsing via Sidewall, and put up with the incredibly slow connection speed, combined with strict limits on how much bandwidth can be consumed, all they get is a VPN immediately traceable to their AWS account.

Re:Want a killer product? Become more opinionated by jiofih on Friday June 04, 2021 @10:06AM (#27393725)
Amazon. Apple’s system doesn’t use much of your bandwidth or have anyone else’s data going through your device (it’s completely anonymous).
Re:Want a killer product? Become more opinionated by pranau on Friday June 04, 2021 @10:21AM (#27393877)
Can you please explain how Apple’s Find My is anonymous while Sidewalk is not? As far as I understand, Find My collects device location information through other iPhones and then upload them to Apple’s cloud where it can be viewed by you. Apple states that this is done in a privacy preserving way by using rotating identifiers. In the case of Amazon, they state that all the device information being relayed through your device is encrypted and capped at 80kbps.

I am not sure I understand why one is a concern while the other isn’t.

Re:Want a killer product? Become more opinionated by jiofih on Friday June 04, 2021 @10:34AM (#27394012)
Sidewalk is carrying all kinds of data from other users. You have absolutely no idea what. It’s a loosely defined system that Amazon controls remotely at their will. The encryption stops you from snooping like any other TLS traffic, but Amazon itself is the receiver on the other end. And it piggybacks on your own internet connection - 80Kbps is a huge amount of data.

Find My identifiers have a single purpose, are useless to anything but the owners device, cannot be used by Apple for tracking, ads or whatever, and id be surprised if the entire payload after a day out is > 8KB total. These look completely different to me.

Re:Want a killer product? Become more opinionated by smoldesu on Friday June 04, 2021 @11:39AM (#27394709)
> You have absolutely no idea what. It’s a loosely defined system that Amazon controls remotely at their will.

s/Amazon/Apple and you've got yourself the Airtag protocol. Obviously Airtags use less bandwidth, but both are proprietary and about equally as evil in my eyes.

Re:Want a killer product? Become more opinionated by wyager on Friday June 04, 2021 @11:41AM (#27394739)
We know exactly what goes in an airtag message. It’s very limited. https://positive.security/blog/send-my
Re:Want a killer product? Become more opinionated by smoldesu on Friday June 04, 2021 @01:28PM (#27396199)
The article you just linked is about an exploit that allows you to propagate arbitrary data through the Airtag network, which is the exact opposite of knowing what goes into an Airtag message.
Re:Want a killer product? Become more opinionated by wyager on Friday June 04, 2021 @01:32PM (#27396256)
Actually read the article. It’s so bandwidth-limited as to be useless
Re:Want a killer product? Become more opinionated by jiofih on Saturday June 05, 2021 @03:38PM (#27407920)
You are entitled to your feelings of course, but the design of the two systems could not be more different.
Re:Want a killer product? Become more opinionated by cma on Saturday June 05, 2021 @02:09AM (#27402643)
So the ethical distinction is just data amount? Both send anonymous data, if you just mean encrypted.
Re:Want a killer product? Become more opinionated by rodiger on Friday June 04, 2021 @10:23AM (#27393905)
afaik it is a relay system so it does have other's data possibly going through. That being said the information being passed is less comprehensive.