News for hackers. Stuff that matters.
Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @08:06AM (#32723345)
Can somebody explain how the stalking actually works? As I understand, the wireless technology is short-range? How does the stalker know where the tag is if they're not next to it?
Re:How the Apple AirTag became a stalker’s gift by weberer on Monday September 05, 2022 @09:21AM (#32723990)
You know how in modern iPhones they don't let you disable bluetooth from the pull-down menu anymore? Instead it just says "disconnecting devices until tomorrow". That's because Apple really doesn't want you to ever turn bluetooth off. And that is because all iPhones are part of their location botnet. So if you ever pass by someone else's airtag, your phone will send a message to Apple that it has seen that airtag at your current coordinates.
Re:How the Apple AirTag became a stalker’s gift by lapcat on Monday September 05, 2022 @09:25AM (#32724024)
Also, Apple re-enables Bluetooth on OS updates even if you disable it in Settings, and Apple says this functions as intended. https://lapcatsoftware.com/articles/bluetooth.html
Re:How the Apple AirTag became a stalker’s gift by yreg on Monday September 05, 2022 @10:26AM (#32724667)
As a user I absolutely prefer a quickly accessible "turn off bluetooth until X" button to a "turn off bluetooth forever" button. Same with the WiFi.
Re:How the Apple AirTag became a stalker’s gift by weberer on Monday September 05, 2022 @10:33AM (#32724743)
But the current bluetooth and wi-fi buttons don't turn them off at all. They just disconnect your devices while still broadcasting. They're still using power, updating airtag locations, and serving as a beacon that physical retailers use to identify you and track how you move through the store.
Re:How the Apple AirTag became a stalker’s gift by watwut on Monday September 05, 2022 @10:53AM (#32724975)
As a user I absolutely prefer freaking "turn off" button for both wifi and bluetooth.
Re:How the Apple AirTag became a stalker’s gift by izacus on Monday September 05, 2022 @08:14AM (#32723410)
iPhones (and by that I mean any iPhone, not just the owners) pick up the signal from the tag and send its location to cloud.

So basically iPhones are now pretty much the biggest surveillance network in the world, constantly reporting on location of tags (and other iPhones) to Apple servers.

Re:How the Apple AirTag became a stalker’s gift by ec109685 on Monday September 05, 2022 @10:25AM (#32724648)
Apple’s servers can’t see where the tag is. The location data is encrypted so only the owner of the tag can read it on their phone.
Re:How the Apple AirTag became a stalker’s gift by rsync on Monday September 05, 2022 @02:30PM (#32727556)
What were they called in deepness in the sky ?

The localizers ?

Re:How the Apple AirTag became a stalker’s gift by TMWNN on Monday September 05, 2022 @09:49PM (#32731710)
Yes.

For others' benefit, Vernor Vinge's A Deepness in the Sky depicts a human interstellar civilization thousands of years in the future, in which superluminal travel is impossible (for the humans), so travelers use hibernation to pass the decades while their ships travel between star systems. Merchants often revisit systems after a century or two, so see great changes in each visit.

The merchants repeatedly find that once smart dust (tiny swarms of nanomachines) are developed, governments inevitably use them for ubiquitous surveillance, which inevitably causes societal collapse. <https://blog.regehr.org/archives/255>

Re:How the Apple AirTag became a stalker’s gift by detaro on Monday September 05, 2022 @08:08AM (#32723368)
They don't need to be next to it, any iPhone nearby the tag will report on it. https://en.wikipedia.org/wiki/AirTag
Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @08:11AM (#32723382)
And the iPhone will share that information globally without asking for permission? I can see how that is a privacy concern.
Re:How the Apple AirTag became a stalker’s gift by pb7 on Monday September 05, 2022 @08:23AM (#32723472)
It's opt in.
Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @08:28AM (#32723519)
So, enough iPhone users opt in to surveillance to make this a globally useful method for stalking? Wow.
Re:How the Apple AirTag became a stalker’s gift by ShamelessC on Monday September 05, 2022 @08:58AM (#32723797)
That is an incredibly bad faith interpretation of what’s going on. I don’t have to cite statistics to know that users aren’t “opting in to surveillance” - that’s the clickbait version lacking any nuance. In reality, Apple has built up enough trust and good will with their customers that they not only gladly enable a feature that makes it possible to retrieve lost or stolen items, but they even pay for these aforementioned AirTags.

Whether or not that’s wise is another matter, but come on - don’t blame the victim.

Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @09:04AM (#32723858)
Sorry for coming across as using bad faith. It's just that I didn't understand the overall model. And the article didn't explain it.

Also, I wouldn't blame the victim. I'd rather blame Apple for making their users opt in.

Re:How the Apple AirTag became a stalker’s gift by pb7 on Monday September 05, 2022 @10:24AM (#32724633)
As opposed to what? Opt out?
Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @10:28AM (#32724686)
As opposed to not linking "find my phone" to "find AirTags".
Re:How the Apple AirTag became a stalker’s gift by tzs on Monday September 05, 2022 @11:06AM (#32725144)
They are separate. Under the "Find My iPhone" setting there are separate toggles for "Find My iPhone" and "Find My network".

If you enable "Find My iPhone" but do not enabled "Find My network" you can only find your phone when it is online.

Enabling "Find My network" to make your phone participate in the "Find My" network lets you potentially find your phone when it is not online.

Same with "Find My iPad".

Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @11:32AM (#32725403)
Sorry for getting the terminology wrong. I don't use iPhones.

I meant coupling the "Find My network" feature for iPhones and AirTags.

Re:How the Apple AirTag became a stalker’s gift by tzs on Monday September 05, 2022 @12:57PM (#32726450)
It's not really coupled. It's more of a quid pro quo relationship.

There are two separate "find lost things" systems.

1. There is a system for finding online things. This is available on devices that have internet connections, and can only be used to find the device when it is online. The device uses its internet connection to report to a central server, which can then tell the owner where to find the device.

2. There is a system for finding things that aren't online. Devices that do not have an internet connection can use this system to let nearby devices know they are there. If those nearby devices have an internet connection, they can relay that sighting along with their location to a central server, which can then tell the owner where to find the missing devices. The relay to the server is protected by some clever public key cryptography so that the server doesn't find out whose device spotted the missing device or where it was.

An iPhone is capable of using both of those systems. There's a toggle for each of them in the settings.

If you want to be able to find your missing iPhone when it is offline you need to use the second system. If you only need to find it when it has an internet connection, you just need to use the first system.

It seems pretty fair. If you want to use other people's phones to find yours when it is offline, you have to let them use your phone to find their offline devices.

Re:How the Apple AirTag became a stalker’s gift by ShamelessC on Monday September 05, 2022 @09:08AM (#32723892)
Fair enough! Thanks for clarifying.
Re:How the Apple AirTag became a stalker’s gift by ipaddr on Monday September 05, 2022 @09:50AM (#32724277)
The apple user is the enabler not the victim. Without that person this could never happen.
Re:How the Apple AirTag became a stalker’s gift by mccorrinall on Monday September 05, 2022 @08:51AM (#32723724)
Enough users opt in to help other people find their forgotten keys :)
Re:How the Apple AirTag became a stalker’s gift by voakbasda on Monday September 05, 2022 @10:10AM (#32724481)
There is no opting out of your own iDevices from reporting others’ trackers, right? I do not want to disable Bluetooth on my iPhone in order to opt out of participating a global panopticon.
Re:How the Apple AirTag became a stalker’s gift by pb7 on Monday September 05, 2022 @10:23AM (#32724624)
You can opt out, but then you do not get to use others' iPhones to find your AirTags. If you want to benefit from the network, you have to contribute, but you don't have to participate at all.
Re:How the Apple AirTag became a stalker’s gift by xeromal on Monday September 05, 2022 @10:16AM (#32724562)
You have some answers but what makes it extremely juicy is that if effectively is the same as a tracker when the person who stalks you knows you have an iphone.

If they throw it under your car for instance, your phone will always show where your driving and you most likely will never hear any chirps coming from it.

Re:How the Apple AirTag became a stalker’s gift by yreg on Monday September 05, 2022 @10:24AM (#32724631)
Except you will soon get an alert that an unknown AirTag is following you.[0]

Even if you don't have an iPhone, as soon as someone who does have one steps into your car and you drive them somewhere, they will get the alert and you will find out.

[0] - https://media.npr.org/assets/img/2022/02/16/airtag-found-mov...

Re:How the Apple AirTag became a stalker’s gift by sigwinch28 on Monday September 05, 2022 @08:11AM (#32723384)
The AirTags form part of Apple's "Find My" network.

https://en.wikipedia.org/wiki/Find_My

tl;dr Apple devices broadcast IDs and then other Apple devices phone home with those IDs and GPS locations so the owners can find their lost devices even if they don't have internet connectivity.

Re:How the Apple AirTag became a stalker’s gift by mojuba on Monday September 05, 2022 @08:21AM (#32723455)
Does that mean all Apple devices phone home about everything found nearby all the time?
Re:How the Apple AirTag became a stalker’s gift by foxtrottbravo on Monday September 05, 2022 @08:50AM (#32723718)
If the user opted in to use the Find-My network, yes.

Most of users want a way to find / lock / remotely wipe their 1000$ phone in case it gets lost or stolen.

Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @09:01AM (#32723827)
Ah, so Apple is linking the feature of finding _my_ phone with reporting on lots of others? That explains why people turn it on, but I find that creepy.
Re:How the Apple AirTag became a stalker’s gift by garblegarble on Monday September 05, 2022 @09:28AM (#32724065)
The technology is also built so that the location is encrypted for the device owner - so Apple doesn't have a database of the location of every Apple Find My enabled device in the world, which for me makes it not creepy - my devices can find my devices.

It's really useful for locating lost headphones, laptops, etc. -- whether stolen, left on public transport/taxi, or left at a friend's house.

Edit: link to Apple's description of how Find My works: https://support.apple.com/en-gb/guide/security/sec6cbc80fd0/...

Re:How the Apple AirTag became a stalker’s gift by MForster on Monday September 05, 2022 @09:37AM (#32724157)
Thanks for pointing out the encryption. That changes things a bit, IMHO.

Would have been nice if the article explained a bit what is actually happening. The wikipedia article doesn't mention it either...

Re:How the Apple AirTag became a stalker’s gift by garblegarble on Monday September 05, 2022 @10:06AM (#32724438)
I've edited my comment to add a link to Apple's description of the service's approach: https://support.apple.com/en-gb/guide/security/sec6cbc80fd0/...
Re:How the Apple AirTag became a stalker’s gift by ipaddr on Monday September 05, 2022 @09:53AM (#32724301)
So when another phone tells apple the id and location apple doesn't have a list of ids and locations?
Re:How the Apple AirTag became a stalker’s gift by garblegarble on Monday September 05, 2022 @10:05AM (#32724419)
>apple doesn't have a list of ids and locations?

That's right - you can read more at [1]

1: https://support.apple.com/en-gb/guide/security/sec6cbc80fd0/...

Re:How the Apple AirTag became a stalker’s gift by Xx25 on Monday September 05, 2022 @10:25AM (#32724652)
Is there any independent analysis of this end to end encryption of location data, that confirms that Apple can not really access the location even if they want to?