Live data from Hacker News

Bluetooth signals can be used to identify and track smartphones

ucsdnews.ucsd.edu

21–30 of 85 posts

Re: Bluetooth signals can be used to identify and track smartphones

#21
post #8

> “As far as we know, the only thing that definitely stops Bluetooth beacons is turning off your phone,” Bhaskar said. At least for recent Apple devices, that's not true anymore (intentionally, as it is used to support "Find my iPhone" even with a dead battery or on a phone that's been switched off): https://arxiv.org/abs/2205.06114

Faraday bags

No need. There's a real off mode.

Re: Bluetooth signals can be used to identify and track smartphones

#22

This is generally old news. Philz Coffee in Palo Alto, CA and major department stores in the US have been doing this for years to track foot traffic. If you don't want to be tracked, turn off BT and Wifi and demand the protocol stds body and mfgrs support even stronger randomized hw addresses.

If you're on iPhone, you're still beaconing if you turn it off in the swipe down control center, the only way around this is to go into Settings and turn it off there.

Also of interest, your iOS BLE "Random" MAC transmits every few seconds and can take up to 48 hours to change. I wrote some software for the Pi that would allow me to enroll a phone when someone was nearby (By RSSI) and then with a directional antenna later in the day, you could confirm presence in a house / building.

You can also infer presence of anyone in a house because of this. Oh hey, 2 iPhones in the ex girlfriends apartment, Wonder what's going on in there...

Yeah creepy.

Re: Bluetooth signals can be used to identify and track smartphones

#23
post #3

Apple has added recently at least for the BTLE implementation an address randomization much like they did for wifi, details of which can be found here: https://support.apple.com/guide/security/bluetooth-security-...

Address randomization helps but it's not enough. The phone still transmits at a regular cadence so it's pretty easy to figure out which old address has changed into which new address and keep tracking the same device.

possible != "pretty easy". How do you do this with multiple devices in the same location?

Re: Bluetooth signals can be used to identify and track smartphones

#25
Do Apple security updates include firmware for the radio basebands? If a radio baseband has been compromised, how can it be restored to a known-good state, e.g. would iOS reinstallation via Apple Configurator also restore the baseband firmware?

Re: Bluetooth signals can be used to identify and track smartphones

#26
post #23

Earlier quoted context omitted.

Address randomization helps but it's not enough. The phone still transmits at a regular cadence so it's pretty easy to figure out which old address has changed into which new address and keep tracking the same device.

possible != "pretty easy". How do you do this with multiple devices in the same location?

By tracking all devices, noting when one address disappears and a new one appears, and correlating it with the perceived signal strength to reasonably guess whether this is the same device vs. a new one entering your detection radius. On top of that, there is often a fair amount of information besides the address in the contents of the advertisement packet, the set of services this device implements, battery level, manufacturer data fields, ... - much like browser fingerprinting by checking for fonts and canvas edge cases.

Maybe not easy, but also not hard. The only thing that screws you up is someone playing with the airplane mode toggle of their phone while moving within your detection radius.

Re: Bluetooth signals can be used to identify and track smartphones

#30

In another hundred years are people going to look back at this time as a barbaric age of surveillance or are they going to be even more surveilled and controlled than ever before? So far the trend is towards the latter...

Coming in 2024: Device-Free Wireless Sensing (DFWS), aka Wi-Fi 7 Sensing that can "see through" home/business walls.
Post reply on HN