Live data from Hacker News

Some Android apps are using ultrasonic beacons to track users

bleepingcomputer.com

31–40 of 93 posts

Re: Some Android apps are using ultrasonic beacons to track users

#32

> The only good news found in this research was that after searching TV streams from seven different countries, researchers failed to discover any ultrasonic beacons Would that even work? I'm pretty sure modern digital TV audio compression totally removes sound that is vaguely close to 'ultrasound'. I guess maybe smart TV apps could add the signal though, but why would they when they already know what you are watchin…

Sky in the UK have trialed ultrasonic beacons in adverts, so it is definitely possible

Re: Some Android apps are using ultrasonic beacons to track users

#33
post #24
post #18

Earlier quoted context omitted.

That model is backwards. If there is one thing iOS got right, it's the permission prompt. Nobody reads those lists and it's hard to know what the intent is without context in the app. Having the app ask on first use makes much more sense. It's much less likely to get away with this. Even better, you can still use the app if you say no. It will just get dummy values back.

I think Android 7 does now ask on first use rather than at time of installation.

1. build you app targeting earlier versions 2. No dialogs in any android version

Re: Some Android apps are using ultrasonic beacons to track users

#34
post #15

Is there a physical way to deactivate the microphone (on my tablet, I never use it)?

The top answer to this question[1] has a few suggestions. The dummy plug idea is interesting, although it doesn't actually physically disable the microphone.

[1]https://security.stackexchange.com/questions/47345/surveilla...

Re: Some Android apps are using ultrasonic beacons to track users

#35

> The only good news found in this research was that after searching TV streams from seven different countries, researchers failed to discover any ultrasonic beacons Would that even work? I'm pretty sure modern digital TV audio compression totally removes sound that is vaguely close to 'ultrasound'. I guess maybe smart TV apps could add the signal though, but why would they when they already know what you are watchin…

They'd do it to connect profiles between the TV (which knows what you're watching) and any mobile devices within ultrasound reach (i.e. line of sight) of the TV. Do this a few times and it quickly becomes clear which phone is usually within range of the TV, and with that the profiles can be merged, giving a broader view of the user behind these devices.

The solution is simple: don't get a 'smart' television. Better still is to forego on television altogether but if you insist on having canned 'entertainment' (panem et circensis) beamed into your domicile make sure to use as dumb a device as possible. Any smarts you require can be added separately, the thing does have external inputs after all. As an added benefit you won't be stuck with a 'smart' TV running yesteryears OS on under-powered hardware while the display and sound system are still good for many years.

Re: Some Android apps are using ultrasonic beacons to track users

#37
post #22
post #18

Earlier quoted context omitted.

That model is backwards. If there is one thing iOS got right, it's the permission prompt. Nobody reads those lists and it's hard to know what the intent is without context in the app. Having the app ask on first use makes much more sense. It's much less likely to get away with this. Even better, you can still use the app if you say no. It will just get dummy values back.

On the flip side, this means you have already installed and committed to having this app on your phone. Lots of people might just press "accept" at that point out of being lazy, instead of uninstalling it and going back to the app store to look for an alternative. If you ask me, both should be in place. When I install an app a list of permissions (and a short text next to each from the developer explaining why they n…

Asking for mic permission with no apparent reason is scary, many people will not allow it. Also you can easily change it from the settings.

Apps on Apple App Store can't stop functioning just because of a permission is not given. If the app can't perform it's function without a specific permission the developer needs to explain it to the users and ask them to go into the settings and lift the ban.

So if an app that does not have a really good reason for asking for the mic, the use can just deny that permission and continue using the app.

No need for fishing in the sewage until you find the gold among the sh*t and it's my main reason to use IOS over Android(Though I hear its getting better).

Re: Some Android apps are using ultrasonic beacons to track users

#39
My first instinct is that the signal probably doesn't need to be ultrasound. In the same way that my phone will sometimes hear my car radio and falsely hear, "hello Google", I bet the beacon can just be planted on top of the signal and match filtered to a decent SNR. Similar to image steganography, it doesn't need to be perceptible to the listener. Compression issues would exist, but at least they wouldn't be fighting against the transmission hardware.

Re: Some Android apps are using ultrasonic beacons to track users

#40
062115 - How to Manage Android App Permissions to Protect Your Privacy http://thehackernews.com/2015/06/android-permission-manager....

beacon-blocking Chrome extension and sample Android (research prototype) patch: http://ubeacsec.org/#Downloads

Silverdog Chrome Extension http://www.thewindowsclub.com/silverdog-chrome-extension-mit...

Disable Beacon monitoring on a condition in Application http://stackoverflow.com/questions/34486930/disable-beacon-m...

050217 - https://www.wired.com/2017/05/hundreds-apps-can-listen-beaco...

110316 - https://www.wired.com/2016/11/block-ultrasonic-signals-didnt...

Beacon: Phone Tracker https://www.aptoide.com/app/com.fibercode.beacon/beacon-phon...

Post reply on HN