Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FindMy Flipper – AirTag and SmartTag Emulator

github.com

Post reply on HN
Print view View original

21–30 of 69 posts

Re: FindMy Flipper – AirTag and SmartTag Emulator

#21

Post by rekoil »

compsciphd wrote: post #15
winkelmann wrote: post #12

Earlier quoted context omitted.

You wouldn't actually physically cycle/replace the tag. As you can see in the README, you can clone real tags, which could be advertised by the device in intervals.

right, I'm actually wondering if one could build an esp32 device that did this itself (i.e. without the need of a flipper zero). Basically something in a similar form factor of an actual air tag. the anti-stalking features make airtags less useful for anti-theft (or theft discovery), as any aware thief can just disable the tag due to the anti-stalking feature (apple does note that its not designed for anti-theft purp…

You can, there's been ESP32 firmware out for years that does this: https://github.com/seemoo-lab/openhaystack/tree/main/Firmwar...

Re: FindMy Flipper – AirTag and SmartTag Emulator

#22

Post by xyst »

very interesting project, but one of the downstream dependencies used here is insecure by default:

https://github.com/biemster/FindMy/blob/113ebf4017729b92a381...

Seems to be auth lib for iCloud.

Also seems to hard code a MacBook device agent in order to associate the generated keys with a device.

As with anything in the centralized world, I wouldn’t use this on an account with a high number of services/digital assets tied to it. I wouldn’t be surprised if Apple bans accounts that use this.

Wouldn’t be difficult to find out either given the unique “adsid” code that is required to login.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#23

Post by circustaco »

copperx wrote: post #17
compsciphd wrote: post #15

Earlier quoted context omitted.

right, I'm actually wondering if one could build an esp32 device that did this itself (i.e. without the need of a flipper zero). Basically something in a similar form factor of an actual air tag. the anti-stalking features make airtags less useful for anti-theft (or theft discovery), as any aware thief can just disable the tag due to the anti-stalking feature (apple does note that its not designed for anti-theft purp…

What is purpose of the law enforcement feature? Would it be like donating an AirTag to police?

In the case that one is using an airtag for ant-theft purposes and they do not want to alert the thief of the existence of the airtag while maintaining the intention of the alerts (anti-stalking).

ex. You notice your bike is stolen. immediately turn on law enforcement mode. The anti-stalking notifications are disabled but the owner can no longer track the airtag. However, after alerting the police, they could access the location of the device and investigate or recover the bike.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#24

Post by dmitrygr »

compsciphd wrote: post #15
winkelmann wrote: post #12

Earlier quoted context omitted.

You wouldn't actually physically cycle/replace the tag. As you can see in the README, you can clone real tags, which could be advertised by the device in intervals.

right, I'm actually wondering if one could build an esp32 device that did this itself (i.e. without the need of a flipper zero). Basically something in a similar form factor of an actual air tag. the anti-stalking features make airtags less useful for anti-theft (or theft discovery), as any aware thief can just disable the tag due to the anti-stalking feature (apple does note that its not designed for anti-theft purp…

> law enforcement mode

> provide legally recognized law enforcement the ability to request the tracking record

Where do you live where law enforcement cares about stolen property? 1985 America?

Re: FindMy Flipper – AirTag and SmartTag Emulator

#25

Post by gruez »

compsciphd wrote: post #6

This concept would possible be used to get around the stalking features that Apple et al has implemented. Ex: Get N donor tags. Have it cycle through the N tags every 24/N hours. Therefore, to apple (/ device tracking), the "stalkee" is never being followed by a single tag for an extended period of time.

Why do you need donor tags? The README for the project has instructions for generating tags.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#26

Post by _lvbh »

phasE89 wrote: post #9
nunobrito wrote: post #8

Still using flipper a few times per week. Looking forward to the next edition with Wi-Fi and other frequencies.

What do you use it for?

Not OP but I still use mine quite frequently.

- My family’s old subhz car keys are dying so I cloned it & use the flipper when the real one doesn’t work. It’s a car from before the 2000s so no security whatsoever.

- Apartment, lift, gym rfid. Don’t need to bring multiple sets of cards

- IR is also helpful as a backup while I procrastinate going out and buying batteries for some remotes.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#27

Post by sulandor »

theshrike79 wrote: post #20
copperx wrote: post #18

Earlier quoted context omitted.

I'm glad you've found an use for it. Its most common use is a paperweight at home.

Dunno about the current prices, but it was a REALLY expensive paperweight for a long time. People paid hundreds of dollars for one.

nah - a "good" paperweight can easily rival the cost of a car

Re: FindMy Flipper – AirTag and SmartTag Emulator

#28

Post by CPLX »

nom wrote: post #19
compsciphd wrote: post #6

This concept would possible be used to get around the stalking features that Apple et al has implemented. Ex: Get N donor tags. Have it cycle through the N tags every 24/N hours. Therefore, to apple (/ device tracking), the "stalkee" is never being followed by a single tag for an extended period of time.

If it's not patched yet: I heard you can just power cycle a tag on a timer to evade detection. Add a large battery with a simple timer circuit, remove the beeper and you got yourself an amazing tracking device. IIRC this came up in the context of tracking shipments with expensive equipment, where it can be in transit for many months. The tags are so power efficient that they work for ages on a large battery, existing…

I use them out of the box to track expensive equipment in cases and the batteries are good for 6-12 months or so, sometimes longer.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#30

Post by reaperducer »

sulandor wrote: post #27
theshrike79 wrote: post #20

Earlier quoted context omitted.

Dunno about the current prices, but it was a REALLY expensive paperweight for a long time. People paid hundreds of dollars for one.

nah - a "good" paperweight can easily rival the cost of a car

I see you've been shopping with my wife.
Post reply on HN