Live data from Hacker News

Battery power alone can be used to track Android phones

bbc.co.uk

11–20 of 78 posts

Re: Battery power alone can be used to track Android phones

#11
post #8

This is really selling a quite interesting intellectual effort on meaningless paranoia. Who would have any interest in tracking people in this manner? Any government based group can grab the data much more conveniently via the phone towers. Anyone else? Well you've got to trick someone into downloading this thing, so it's probably not that good for targeting a specific individual. If you can think up some nefarious s…

I am sure that advertisers would like the data if unavailable via other means, redundancy is being offered by this technique.

Re: Battery power alone can be used to track Android phones

#12
post #8

This is really selling a quite interesting intellectual effort on meaningless paranoia. Who would have any interest in tracking people in this manner? Any government based group can grab the data much more conveniently via the phone towers. Anyone else? Well you've got to trick someone into downloading this thing, so it's probably not that good for targeting a specific individual. If you can think up some nefarious s…

Don't mobile devices store their battery usage over time (and also the per-app breakdown of energy usage)? I don't know what precision the stored data is in, but if it's precise enough, you could reconstruct past movements using it. E.g. when you arrive into a country, the border control could "track" your steps back for a day or so.

Re: Battery power alone can be used to track Android phones

#13
post #9
post #7

Earlier quoted context omitted.

This snippet (from the PDF) reveals the effectiveness of the technique: "To evaluate the first algorithm for distinguishing routes we recorded reference profiles for several different routes. We used a dataset of 43 profiles for 4 different routes about 19 kilometers each. Driving in different directions along the same roads (from point A to B vs. from point B to A) is considered two different routes. We perform a le…

But that if the battery discharges exactly the same. I think that is not the case, for example the battery when is at 50% might discharge (doing the exact thing) differently than when is at 20%. Maybe the battery is not well calibrated or the internal part of the battery are more wasted than others.

I would guess that even if the curve is different from say 50% to 40% than 20% to 10% for the same journey it would be easy enough to normalise the data after profiling a couple of phones.

Re: Battery power alone can be used to track Android phones

#17
post #9
post #7

Earlier quoted context omitted.

This snippet (from the PDF) reveals the effectiveness of the technique: "To evaluate the first algorithm for distinguishing routes we recorded reference profiles for several different routes. We used a dataset of 43 profiles for 4 different routes about 19 kilometers each. Driving in different directions along the same roads (from point A to B vs. from point B to A) is considered two different routes. We perform a le…

But that if the battery discharges exactly the same. I think that is not the case, for example the battery when is at 50% might discharge (doing the exact thing) differently than when is at 20%. Maybe the battery is not well calibrated or the internal part of the battery are more wasted than others.

Well since they have access to the battery info, they prolly take that into account.

Re: Battery power alone can be used to track Android phones

#18
post #8

This is really selling a quite interesting intellectual effort on meaningless paranoia. Who would have any interest in tracking people in this manner? Any government based group can grab the data much more conveniently via the phone towers. Anyone else? Well you've got to trick someone into downloading this thing, so it's probably not that good for targeting a specific individual. If you can think up some nefarious s…

Not sure if the "Who would have any interest in tracking people in this manner?" is really relevant. Based on the collect all, hoover all metadata etc that seems to be going on, _anything_ remotely possibly useful seems to be interesting.

And the big thing is that this data can of course (and will be) correlated with things like cell tower location, wifi hotspots all kinds of other metadata.

Re: Battery power alone can be used to track Android phones

#19
post #2

The article mentions that the required permissions are "very common permissions", and then in the next paragraph says that 179 apps on the Google Play store require those permissions. As of July 2014, there were 1.3 million apps in the app store [1]. That's ~0.014% of the apps on the store. Not exactly "very common" in my mind. Although the remark that they are "unlikely to raise suspicion" is valid, especially for t…

The typical consumer would probably just give the app access to the GPS. The hard part is getting them to download it. Interesting research but not the most practical attack.

That's the problem with android. The 'typical user' has no control over individual app permission - it's literally all or none. If you install the app you give it access to the GPS, as long as it has specified that permission.

Re: Battery power alone can be used to track Android phones

#20
Seriously? Have you not heard of side channel and timing attacks? This is called information leakage and is a big deal. Because it is not common/easy now doesn't mean it won't be in the future. The nature of information disclosure (whether data or metadata) is that people find "impractical" methods of accessing information we might prefer they not have, then make them practical. It may also be the case that the researchers cannot make it practical, but that doesn't mean there aren't actors who can and possibly have already done this.

This is a very useful article OP, thank you for posting

Post reply on HN