News for hackers. Stuff that matters.

hannosch

Re:Mozilla Stumbler 1.0 on Wednesday October 29, 2014 @04:57PM (#8529889)
Yep. These services only store and transmit the BSSID (which is most often the mac address of the network card).

The only place the SSID (clear text name) is used is in filtering out things on the client end. Both looking for "no SSID" / hidden networks and the _nomap suffix. The SSID is never sent to any service.

Re:Mozilla Stumbler 1.0 on Wednesday October 29, 2014 @04:54PM (#8529864)
Both the Mozilla API as well as Google have this "you need to know two" protection. At Mozilla we go a bit further and also make sure the two BSSID's you are sending aren't almost identical. That happens in a lot of modern access points who are setup with separate 2.4 and 5GHz networks or those who have a guest network.
Re:Mozilla Stumbler 1.0 on Wednesday October 29, 2014 @10:04AM (#8527176)
It won't, see code here -> https://github.com/mozilla/MozStumbler/blob/dev/android/src/...

The first check is "if we don't get a SSID, we don't collect". That's what happens with hidden networks.

Re:Mozilla Stumbler 1.0 on Wednesday October 29, 2014 @09:59AM (#8527149)
Good question, I added a ticket to get this addressed: https://github.com/mozilla/ichnaea/issues/330

I wrote about some of the topics a while back. Not all of it is up-to-date but it gives the broader context: http://blog.hannosch.eu/2013/12/mozilla-location-service-wha...

Re:Mozilla Stumbler 1.0 on Wednesday October 29, 2014 @09:47AM (#8527102)
Hanno from Mozilla here. Marvin reached out to us about a month back and we have been slow to respond. He just got an email back a week ago. So I think this is still going to happen, but no concrete timeline yet.
Yes, we are aware of this approach, thx for reminding us. It wasn't a priority so far, as we don't have anyone using the search API's just yet.
The app isn't really polished yet, so we deliberately kept it out of the play store for now. The app does have its own updater, so once you installed it, it should stay current.

Of course we are thinking about adding it to the play store, but there is no concrete timeline yet.

Thx for the feedback, I've fixed the example to have the right format and provided full URL's in the API docs.

The docs where written under the assumption of being reusable for anyone installed a ichnaea server and not just the specific instance we currently run. But that apparently isn't all too helpful right now :)