Apple allows some iOS apps to track user locations via lists of nearby SSIDs
1–10 of 327 posts
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#2FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#3TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations.
Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda.
However, AFAIK apps need to declare the use of this API and have a good reason for it(you fill up a form explaining why you need it and Apple has to agree to grant you the privilege). So, most likely your flashlight app is not tracking you.
I'm sorry you don't like it but that's the truth, the author left out crucial details to make it juicier.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#4TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda. However, AFAIK apps need to declare the use of this API and have a go…
i wouldn't be worried about my flashlight app tracking me, i'd be worried about the large players who probably GET the use of this API, google facebook etc etc.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#5FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.
That’s not really any consolation, since (according to the article) Apple has granted that entitlement to WeChat and Alipay.
Yes, these are “super-apps” and Wi-Fi hotspot services are probably part of their offerings, but that’s just more reason this should be a user-grantable permission like “local network access”. If I don’t care for the hotspot feature, I don’t want the app to have that capability.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#6FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.
> Adding another layer to the discussion is the fact that major apps like WeChat and Alipay have already implemented this capability.
So only the big apps can spy on you? The poster is Chinese so he cares about those 2, but how about facebook and google?
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#7Docs: https://developer.apple.com/documentation/technotes/tn3111-i...
I’d guess a review would stop the smaller spam apps, but not the big players, as noted by the author and other commenters.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#8FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.
Most entitlements though trigger a privacy prompt to allow the user to disable the functionality. Without writing a test app, I don't know that this is the case with this entitlement.
I think it should ask the user's permission.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#9If you care about this, the best thing you can do to get Apple’s attention is to fill out the form at this site: https://www.apple.com/contact/feedback/ and select “product feedback.”
Doing so was instrumental to persuading Apple a few years ago to add an option “allow only once” when apps asked for permission to access the user’s current location.
Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs
#10How is it any different than an app that makes an request to their services API, thereby getting IP address which in itself can be used to get location information?
There is always a vector for abuse, and I think Apple has taken large steps to reduce that. I find this story a bit of a non-event.