Live data from Hacker News

Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

404media.co

21–30 of 50 posts

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#21

This feels illegal. If it's not, it probably should be.

It should be, but the last time the US got new privacy regulation it was because an employee at a VHS rental store embarrassed a member of Congress by telling people what movies he'd rented.

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#22

Program your flipper0 to record all wireless identifications for a few weeks. hook broadcaster to amplifier and attach to your car playing all the time. Every time you drive by one of these, it'll look like a parade just went by. Probably do the same thing when you go into retail stores. just flood the place with every possible identification. Maybe an easier solution is just write something that spoofs hundreds of f…

There are very few ways to fight stuff like this and 100% agree this is a good one. I predict we are gonna need so much more of this type of obfuscation to just live our lives normally.

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#23
MAC randomization is all well and good but that extra security is undercut if people name their device with their full name. It seems to be common with Apple devices especially. After seeing just how much data my neighbors were leaking with their device names, I name all of mine with nondescript names that do not identify me or the device.

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#24

Program your flipper0 to record all wireless identifications for a few weeks. hook broadcaster to amplifier and attach to your car playing all the time. Every time you drive by one of these, it'll look like a parade just went by. Probably do the same thing when you go into retail stores. just flood the place with every possible identification. Maybe an easier solution is just write something that spoofs hundreds of f…

I have a F0 but it’s been sitting in my drawer any links to good scripts to run for this?

I used to go pop teslas all the time but that got old

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#25

Program your flipper0 to record all wireless identifications for a few weeks. hook broadcaster to amplifier and attach to your car playing all the time. Every time you drive by one of these, it'll look like a parade just went by. Probably do the same thing when you go into retail stores. just flood the place with every possible identification. Maybe an easier solution is just write something that spoofs hundreds of f…

Flipper Zero (without extra hardware) doesn't do 2.4 GHz for Bluetooth or Wi-Fi (or 5GHz Wi-Fi).

On the other hand, I'd bet for under $10 you could build something with an ESP32 and a battery and solar panel that could spoof signals these things will believe all day.

I'd start with transmitting signals with MAC vendor prefixes identifying Axon Tasers and Bodycams. Make it look like there's thousands of cops going past every day.

I'd love it if someone managed to get a bluetooth and wifi sniffer close enough to the CEO of Flock and publish that fingerprint. Or sneak a sniffer into a Flock board meeting and sniff out all the board members and c suite's devices. Or a meeting of local politicians and cops who're supporting and paying for this. I mean, that can't possibly be illegal or even wrong, if they're doing it wholesale, right?

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#26

According to the graphic, all RFID/NFC tags including pet microchips and your company badge will be associated with you too. I can remember in the late 1990's Berkeley Public Library was considering adding RFID tags to the books as asset tags. The public push-back was significant and surprising at the time. Freedom-loving library patrons were concerned about nefarious tracking. Proponents of the new tags thought that…

I wonder how theyre going to get that to work at range? I reckon you'd need pretty big and specialised antennas to have and hope of reading RFID or NFC off devices in a car going past a Flock surveillance camera. Even people walking past are going to be more that a few meters away, which is and order of magnitude further away that RFID and NFC are typically read from.

Not impossible, but it feels pretty unlikely that'd work inside the enclosure of a typical ALPR camera and at the distances devices would typically be away from them. Not without national security or military budgets at least. (Although perhaps that have that kind of budget? I mean one insular and NIMBY tech billionaire could pay for that in their San Francisco neighborhood. Possible already has, perhaps that where this company came from?)

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#27
post #23

MAC randomization is all well and good but that extra security is undercut if people name their device with their full name. It seems to be common with Apple devices especially. After seeing just how much data my neighbors were leaking with their device names, I name all of mine with nondescript names that do not identify me or the device.

[deleted]

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#28

Program your flipper0 to record all wireless identifications for a few weeks. hook broadcaster to amplifier and attach to your car playing all the time. Every time you drive by one of these, it'll look like a parade just went by. Probably do the same thing when you go into retail stores. just flood the place with every possible identification. Maybe an easier solution is just write something that spoofs hundreds of f…

Seems like a great use for Fable ;)

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#29
post #25

Program your flipper0 to record all wireless identifications for a few weeks. hook broadcaster to amplifier and attach to your car playing all the time. Every time you drive by one of these, it'll look like a parade just went by. Probably do the same thing when you go into retail stores. just flood the place with every possible identification. Maybe an easier solution is just write something that spoofs hundreds of f…

Flipper Zero (without extra hardware) doesn't do 2.4 GHz for Bluetooth or Wi-Fi (or 5GHz Wi-Fi). On the other hand, I'd bet for under $10 you could build something with an ESP32 and a battery and solar panel that could spoof signals these things will believe all day. I'd start with transmitting signals with MAC vendor prefixes identifying Axon Tasers and Bodycams. Make it look like there's thousands of cops going pas…

> Flipper Zero (without extra hardware) doesn't do 2.4 GHz for Bluetooth or Wi-Fi (or 5GHz Wi-Fi).

Flipper Zero has Bluetooth built in, that's how the phone app works.

I don't know how much control the apps have over it, but there were definitely Flipper apps to abuse the BLE auto-pairing feature of a lot of devices and spam popups to nearby phones.

Re: Company Will Add Phone, AirPod, and Smartwatch Trackers to ALPRs

#30

Earlier quoted context omitted.

I wonder how much that actually helps. A license plate scanner and a camera can easily identify me in my car. What tracking advantage does “there are three (probably) Apple devices” in the car as well confer. If I’m away from my car later, I’m just a guy walking around with 3 Apple devices (or two if I forget my phone in the car).

> A license plate scanner and a camera can easily identify me in my car. Sure, but now you can track someone from their car through public transport, shops and god knows wherever else someone placed a sniffer. And no, randomization doesn't help, because in the end the Find My beacons have to resolve down to some common identifier otherwise the "an unknown device has been following you for 2 hours" warning would not w…

> in the end the Find My beacons have to resolve down to some common identifier otherwise the "an unknown device has been following you for 2 hours" warning would not work.

Not really, this is actually pretty easy. If such a device beacons and a trusted device is within range the trusted device can respond to the beacon and let it know it's nearby, then it just counts up if not. X number of beacons with no response, set the "not near my trusted device" flag. Some other device sees X number of beacons with that flag set while moving around, send alert to the user.

Post reply on HN