Live data from Hacker News

An update on AirTag and unwanted tracking

apple.com

181–190 of 508 posts

Re: An update on AirTag and unwanted tracking

#181
Might be useful: https://github.com/seemoo-lab/AirGuarg, a third-party Android app, can force an AirTag to make a sound even if Apple hasn't determined that tag has been following you (the BLE characteristic is unauthenticated: https://github.com/seemoo-lab/AirGuard/blob/main/app/src/mai...)

HN discussion: AirGuard: Protect yourself from being tracked by AirTags and Find My accessories (298 points, 150 comments) https://news.ycombinator.com/item?id=28577951

Re: An update on AirTag and unwanted tracking

#183

These feel like welcome changes. Don't think it addresses all the past concerns.

Mostly all seem ok. The only one that makes me a little sad is the precision finding tool will make it easier for thieves to spot tags on bikes.

Yeah, but the original purpose was for keeping track of your own stuff, not as a deterrent for theft.

For your bike, I would recommend something from here: https://www.cyclingweekly.com/group-tests/find-your-stolen-b...

Re: An update on AirTag and unwanted tracking

#184
post #181

Might be useful: https://github.com/seemoo-lab/AirGuarg , a third-party Android app, can force an AirTag to make a sound even if Apple hasn't determined that tag has been following you (the BLE characteristic is unauthenticated: https://github.com/seemoo-lab/AirGuard/blob/main/app/src/mai... ) HN discussion: AirGuard: Protect yourself from being tracked by AirTags and Find My accessories (298 points, 150 comments) ht…

This works assuming the speaker hasn't been compromised by a would-be stalker.

Re: An update on AirTag and unwanted tracking

#185

Android users are still vulnerable, and these announcements do nothing to reduce that. All a stalker needs to do, is remove the speaker. To detect a rogue AirTag, an Android owner needs to: 1) know AirTags exist (many obviously don't) 2) go out of their way to install Apple's Android AirTag scanner app (only 100k-500k worldwide have done so according to Google Play stats) 3) manually open the scanner app and scan, si…

For me, 95% of the functionality of Airtags would still be there if it only worked with your own apple devices. I have found airtags for finding things when I lose my keys/wallet around the house. I do leave them at a restaurant tying it to my iPhone would still show the last place I had it.

Re: An update on AirTag and unwanted tracking

#186

Android users are still vulnerable, and these announcements do nothing to reduce that. All a stalker needs to do, is remove the speaker. To detect a rogue AirTag, an Android owner needs to: 1) know AirTags exist (many obviously don't) 2) go out of their way to install Apple's Android AirTag scanner app (only 100k-500k worldwide have done so according to Google Play stats) 3) manually open the scanner app and scan, si…

Trackers have been around for years . Tile came out in 2014, and Samsung has their own Galaxy tracker line for a while now. Neither have anti-stalking features of any kind to this day. If one was stuck on your car, you wouldn't get an alert or any info on who placed it there, be you an iPhone user or an Android user. And before that, there were GPS trackers which have bigger batteries and were more accurate (if a bit…

The barrier of entrance has not only been lowered on the cost side but also on the opportunity side. If people already own AirTags and know how to use them for legitimate purposes they just have to hide them somewhere to track somebody opposed to deciding to get a proper GPS tracker „just to find out where X is going to“.

Re: An update on AirTag and unwanted tracking

#187
post #175

Earlier quoted context omitted.

>>and significantly increases the average person's risk of stalking. I mean, increase from 0.00001% to 0.0001% is still significant and yet I still wouldn't worry about it in the slightest.

You personally may not have to worry about it, but a handful of well publicized cases of misuse (say someone getting stalked/murdered) will probably be a bigger monetary hit to Apple than their profit from this entire line.

Then that is Apple's concern, in the meantime I'll enjoy using their product for legitimate purposes.

Re: An update on AirTag and unwanted tracking

#188
post #92

"It’s why the Find My network is built with privacy in mind, uses end-to-end encryption..." "Apple can provide the paired account details in response to a subpoena or valid request from law enforcement" Hmm

probably the same loophole as the "end-to-end encryption" in iMessage. it's end-to-end, but the client is their close-source proprietary software, so if they need access to the data they can just remotely access the client software that you've authenticated and access whatever they need to.

That’s not the iMessage loophole. The loophole is when you have iClouds backup enabled. They have access to it. Disable the backup, you disable the loophole.

Re: An update on AirTag and unwanted tracking

#189
post #181

Might be useful: https://github.com/seemoo-lab/AirGuarg , a third-party Android app, can force an AirTag to make a sound even if Apple hasn't determined that tag has been following you (the BLE characteristic is unauthenticated: https://github.com/seemoo-lab/AirGuard/blob/main/app/src/mai... ) HN discussion: AirGuard: Protect yourself from being tracked by AirTags and Find My accessories (298 points, 150 comments) ht…

This works assuming the speaker hasn't been compromised by a would-be stalker.

Yep. But there is also potential for civil disobedience / mischief there.

Re: An update on AirTag and unwanted tracking

#190

Earlier quoted context omitted.

To what extent is any hardware manufacturer responsible for malicious usage of their product in your opinion? Surely you don't believe that all bases can be covered no matter how simple the product prior to launch. I credit Apple for making a best effort at launch and continuing security and support for much longer than the industry standard in their products. But realistically there is no way to launch something fla…

I think that a key issue in this case isn't just that Apple made a device that could be used for tracking - after all, you could engineer or buy a different tracking device from a number of vendors - but that its feasibility was massively increased due to a unique Apple asset - its network of iDevices. That is, Apple released a product that was uniquely good at tracking people due to an Apple-specific asset . Slightl…

Makes me wonder how much liability the owner or participants in the network used for tracking carry if bad things are facilitated by the network.
Post reply on HN