News for hackers. Stuff that matters.

A comment on Show HN: BeaconDB – An Alternative to Mozilla Location Services. Parent comment

Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by fc_on_hn on Sunday July 07, 2024 @05:48AM (#40896360)
> If my neighbour scans my WiFi network and uploads it to BeaconDB I didn’t exactly opt-in, did I?

To clarify: all phones doing geolocation are already uploading your AP macaddr to remote location services, but BeaconDB will *not* publish this information in cleartext.

Any data dump will contain only non-reversible cryptographically hashed data or aggregated data.

[ Parent | on HN ]
Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by kevincox on Sunday July 07, 2024 @06:12AM (#40896433)
A MAC address is only 48 bits and some of the bits are restricted. It is well within the range of brute force to reverse all of the hashes.
[ Parent | on HN ]
Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by joelkoen on Sunday July 07, 2024 @06:16AM (#40896455)
You can truncate the hash to cause collisions, meaning that one MAC address does not map to one location. This requires the client to be aware of multiple physically nearby MACs in order to get a location, as it then needs to estimate which "possible" locations are most likely.

This is a really interesting problem, and I've loved thinking about it recently. If you're keen on it too I'm happy to discuss further, feel free to reach out.

[ Parent | on HN ]
Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by userbinator on Sunday July 07, 2024 @06:18AM (#40896463)
To put that into perspective, 48 bits is 256T, which is roughly the number of bits in a 32TB hard drive.
[ Parent | on HN ]
Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by account42 on Monday July 08, 2024 @08:55AM (#40905006)
> and some of the bits are restricted
[ Parent | on HN ]
Re:Show HN: BeaconDB – An Alternative to Mozilla Location Se... by landdownsundar on Sunday July 07, 2024 @06:38AM (#40896557)
Absolutely right, great point. That's why I only use Windows addresses now. Can't break those with brute force!
[ Parent | on HN ]