News for hackers. Stuff that matters.
Re:Apple and Google deliver support for unwanted tracking al... by winterdeaf on Monday May 13, 2024 @07:44PM (#40349911)
This is such a charade. Making "invisible" airtags is trivial [1], and I wouldn't be surprised if such airtags are being manufactured en-masse.

We allowed the creation of a global tracking network under the false pretense of privacy. The entire Find My security model falls apart when considering "malicious" tags, and Apple knew about this from the start.

[1]: https://github.com/Guinn-Partners/esp32-airtag

Re:Apple and Google deliver support for unwanted tracking al... by foota on Tuesday May 14, 2024 @01:07AM (#40351796)
In that case, couldn't someone just make a tracker tag using GPS and a mobile connection?
Re:Apple and Google deliver support for unwanted tracking al... by emayljames on Tuesday May 14, 2024 @05:03AM (#40353078)
these devices are way more insidious though, a gps/mobile tracker would have more limitations due to it being less able to be hidden and less mobile.
Re:Apple and Google deliver support for unwanted tracking al... by wepple on Tuesday May 14, 2024 @08:21AM (#40354403)
GPS+mobile tracker:

- 4x the cost plus ongoing fees

- 2x larger

- can’t buy it at any big box store

- relies on a third party who can also see what you’re tracking

- battery limited to weeks, not years

Accessibility and features make these way more compelling

Re:Apple and Google deliver support for unwanted tracking al... by PaulStatezny on Thursday May 16, 2024 @09:20AM (#40378079)
Have you heard the term "defense in depth"?

In the security world, it seems accepted that no security effort is a silver bullet that's 100% impossible to get around.

Rather, it seems best practice to compose many layers of security efforts, which all work to raise the level of effort an attacker is required to exploit people.

So I think it's unfair to say this is a charade.