Live data from Hacker News

IPhones and 3G iPads log your location in an unencrypted file on the device

radar.oreilly.com

91–100 of 196 posts

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#91
post #80
post #65

Earlier quoted context omitted.

For comparisons to be useful, you don't have to take everything literally. As far as the question of consent is concerned, the comparison is apt.

But why make the comparison if not to inflame? That's the point, isn't it? Comparing data collection to sex in the context of consent—as if the concept of consent applies in the same way, which is on its face a bold assertion—isn't about a logical argument, it's about trying to win a war over people's sentiments. And I think the sentiment that's being fought for here is irresponsible and simplistic.

I found the comparison was very apropos to the context and useful. Call me simplistic, but I'm glad it was cast and totally not inflamed (save for my original inflammation towards Apple).

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#92

For those with jailbroken iPhones and SSH, the data can be accessed or copied directly. The information is stored in this file: /private/var/root/Library/Caches/locationd/consolidated.db The file can be viewed with any ol' SQLite browser, and the location information is stored in the "CellLocation" table. After using an iPhone 4 since release day, I have ~1400 entries.

To make it work with Pete Warden's app, add this block to the bottom of loadLocationDb, before the displayErrorAndQuit:

    if (!loadWorked) {
        loadWorked = [self tryToLoadLocationDB: @"/path/to/your/consolidated.db" forDevice: @"iPhone"];
    }

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#93

I'll be checking in here for technical questions. The github direct link is http://petewarden.github.com/iPhoneTracker/

If this is only tracking cell towers as has been reported in a few places, why are there so many more dots than cell towers? Actually the FAQ says it is using triangulation, how accurate is that supposed to be?

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#95
From what I understand, at least with google, this data (the data sent anonymously) is used amoung other things, for the maps traffic feature. If a fair number of phones are traveling below the speed limit on a road, it can be assumed that the traffic is bad on that road. Not sure if the apple data is used for that, or if they get the traffic data from google, but it is one legitimate use.

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#96
post #63

I didn't know this was news. I and other security researchers & law enforcement have known about it for a while. I assisted in one court case where the data was used as evidence. I suspect the slick-looking iPhoneTracker app finally made it interesting to the media. Edit: There was a similar deal on iOS 3 but it seemed more like a bug, not a feature. Data would be purged at some unpredictable interval. I can't recall…

In deed nothing new. About a year ago a man discovered that his wife's iPhone was sending about 75 Mb of data to Apple via wifi in early morning : https://discussions.apple.com/thread/2450738?threadID=245073... It turned out it was dumps of GPS data and other stuffs. Apple acknowledged that to the House of Representatives. They're gathering data about their customers, including GPS : [PDF] http://markey.house.gov/doc…

"and the customer uses an application requiring location-based infomiation"

Curious. It certainly seems to be logging way more than just when the location services icon is showing.

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#97

I'll be checking in here for technical questions. The github direct link is http://petewarden.github.com/iPhoneTracker/

Thanks for the app -- quite eye-opening. The data looks good, except there is a bunch of data in Minnesota. I've never been to Minnesota! Any ideas? http://imgur.com/ORgYu EDIT: Data appears around the time I flew from NJ to Seattle -- perhaps my phone was on in-flight and connecting to MN cell towers? Seems unlikely, though, given the # of points.

Also unlikely because if your phone had not been in the "off position" then your plane would have undoubtedly crashed.

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#98
post #88

BTW all cellular devices are recorded as they move through tower locations while they are on and police don't feel they need a warrant for such data, so your location is pretty much available without that file.

Way to miss the point.

Earlier, entities recording: cell company. Earlier, entities with access: police, cell company

Now, entities recording: cell company, Apple Now, entities with access: police, cell company, anybody who temporarily gains access to my phone, anybody who temporarily gains access to my iTunes computer

See, how the "attack surface" is dramatically bigger now?

Re: IPhones and 3G iPads log your location in an unencrypted file on the device

#99
post #50

Earlier quoted context omitted.

Can you please put it somewhere on the Internet. I'd love to look at it. Thank you in advance.

You're welcome: http://bbb.poseur.com/post/4777454362/the-last-year-or-so-of...

I think he asked for the full database dump, not a meaningless country-level zoomed screenshot. But I give you props for revealing even this much; I would have certainly not done so.
Post reply on HN