Live data from Hacker News

FindMy Flipper – AirTag and SmartTag Emulator

github.com

61–69 of 69 posts

Re: FindMy Flipper – AirTag and SmartTag Emulator

#61
post #22

very interesting project, but one of the downstream dependencies used here is insecure by default: https://github.com/biemster/FindMy/blob/113ebf4017729b92a381... Seems to be auth lib for iCloud. Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. As with anything in the centralized world, I wouldn’t use this on an account with a high number of services/digital asset…

> Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. Hold short, so you don't need an iOS device technically to onboard AirTags, any Apple device is sufficient? Why in the name of everything that is holy does Apple not support this officially, just to push sales for iOS devices or what? (Angry rant of someone who bought an extra used iPhone despite owning like 5k in…

I think Apple just doesn't think about use cases outside their ecosystem as a general rule, in the same way that SF engineers don't think about uses outside the Bay. It's not malicious when things stop breaking because they lose mobile connectivity, or when your rideshare app demands you wait outside in the middle of winter in Minnesota, these issues just aren't thought of as an organization.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#62

It would be nice if this can be ported to a low cost BLE device such as the ESP32-C3. Using a flipper as an airtag is a bit expensive.

There are a few projects for this. Check this out: https://github.com/seemoo-lab/openhaystack/tree/main/Firmwar...

Re: FindMy Flipper – AirTag and SmartTag Emulator

#63
post #22

very interesting project, but one of the downstream dependencies used here is insecure by default: https://github.com/biemster/FindMy/blob/113ebf4017729b92a381... Seems to be auth lib for iCloud. Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. As with anything in the centralized world, I wouldn’t use this on an account with a high number of services/digital asset…

duh, its localhost:

https://github.com/biemster/FindMy/blob/113ebf4017729b92a381...

Re: FindMy Flipper – AirTag and SmartTag Emulator

#64
post #9

Earlier quoted context omitted.

What do you use it for?

The IR blaster is the most common usage. After that, some games are good. Pass hours playing scorched earth while travelling. Also give it for my kids to play instead of letting use the phone and browse random stuff on youtube.

Is this the game? https://lab.flipper.net/apps/scorched_tanks

Re: FindMy Flipper – AirTag and SmartTag Emulator

#65
post #26

Earlier quoted context omitted.

Not OP but I still use mine quite frequently. - My family’s old subhz car keys are dying so I cloned it & use the flipper when the real one doesn’t work. It’s a car from before the 2000s so no security whatsoever. - Apartment, lift, gym rfid. Don’t need to bring multiple sets of cards - IR is also helpful as a backup while I procrastinate going out and buying batteries for some remotes.

I thought many gym and apartment key fobs can’t be replicated due to rolling keys. Has this been addressed or flipper works on older fobs?

I’m in Malaysia. We still think RFID is a new thing

Re: FindMy Flipper – AirTag and SmartTag Emulator

#67

Earlier quoted context omitted.

> Also seems to hard code a MacBook device agent in order to associate the generated keys with a device. Hold short, so you don't need an iOS device technically to onboard AirTags, any Apple device is sufficient? Why in the name of everything that is holy does Apple not support this officially, just to push sales for iOS devices or what? (Angry rant of someone who bought an extra used iPhone despite owning like 5k in…

I think Apple just doesn't think about use cases outside their ecosystem as a general rule, in the same way that SF engineers don't think about uses outside the Bay. It's not malicious when things stop breaking because they lose mobile connectivity, or when your rideshare app demands you wait outside in the middle of winter in Minnesota, these issues just aren't thought of as an organization.

> I think Apple just doesn't think about use cases outside their ecosystem as a general rule

No. They deliberately do this for gatekeeping. That's what I'd expect from a company forcing you to own a Mac in order to develop for iOS, by license terms.

If it's just technical issues Apple usually do have more helpful alternatives, for example you can only request password reset for your Apple ID on an Apple device (because they can throttle and potentially ban a threat actor trying to stuffing, I guess?), but they invite you to go to an Apple Store and use iPad in the store to do it if you happen to not have one.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#68

Earlier quoted context omitted.

The IR blaster is the most common usage. After that, some games are good. Pass hours playing scorched earth while travelling. Also give it for my kids to play instead of letting use the phone and browse random stuff on youtube.

Is this the game? https://lab.flipper.net/apps/scorched_tanks

Yeah. Flipper version is just another clone from https://www.whicken.com/scorch/

The original one was funnier because you could change the config for the different weapons.

Re: FindMy Flipper – AirTag and SmartTag Emulator

#69
post #14

Still using flipper a few times per week. Looking forward to the next edition with Wi-Fi and other frequencies.

WiFi dev board does not cut it?

Flipper is a nice device. Dev boards don't travel well inside your pockets.
Post reply on HN