Live data from Hacker News

How apps track your location without asking for permission

blog.trustlook.com

1–10 of 35 posts

Re: How apps track your location without asking for permission

#3
Basically doing what the coarse location provider does anyways, which is corollate visible APs on the device with a db of mapped APs.

Yes, it's possible, but constantly scanning for APs will have the side effect of an app draining battery even faster than if it used the phone's location service.

Re: How apps track your location without asking for permission

#5
Very real issue to consider as we all try to guide Android's imminent permission system update (Make noise and open issues!)

Is accessing nearby BSSIDs available in a similar fashion on iOS? A quick look reveals: https://developer.apple.com/library/ios/documentation/System...

Re: How apps track your location without asking for permission

#6

Very real issue to consider as we all try to guide Android's imminent permission system update (Make noise and open issues!) Is accessing nearby BSSIDs available in a similar fashion on iOS? A quick look reveals: https://developer.apple.com/library/ios/documentation/System...

On iOS you can only access the information of the SSID you are connected to, not a list of nearby networks.

Re: How apps track your location without asking for permission

#7
post #3

Basically doing what the coarse location provider does anyways, which is corollate visible APs on the device with a db of mapped APs. Yes, it's possible, but constantly scanning for APs will have the side effect of an app draining battery even faster than if it used the phone's location service.

I'm sure there are tricks against battery consumption - for example - scan only when user stops driving. And when user walking scan rarely. Or maybe use Gyro/Accelerometer to estimate where the user walked.

Re: How apps track your location without asking for permission

#8
post #2

I wonder if this is a corner case of Google Play policy. Stealing privacy is forbidden on GP, but nearby wifi AP should be considered as a public accessible info.

Since nearby APs indicate where you are, I'd argue that IS private information.

Re: How apps track your location without asking for permission

#9
post #6

Very real issue to consider as we all try to guide Android's imminent permission system update (Make noise and open issues!) Is accessing nearby BSSIDs available in a similar fashion on iOS? A quick look reveals: https://developer.apple.com/library/ios/documentation/System...

On iOS you can only access the information of the SSID you are connected to, not a list of nearby networks.

Android has a lot of information leaks. I hate to keep beating this dead horse, but as of last year Google gives every app you install access to your cellphone number without them needing to ask for an extra permission (READ_PHONE_STATE is now a freebie as far as the app store is concerned, it isn't listed, in fact it will say "no special permissions" if READ_PHONE_STATE alone is in the manifest).

I honestly think Android's permission system is a joke, and a sceptical Google will fix the majority of the information leaks with this up-coming update.

PS - It is "interesting" that getting your google account address requires a special permission on Android, but getting your phone number does not. Wonder why that is? IMEI too.

Re: How apps track your location without asking for permission

#10
> Note that these metrics are accessible even with system wifi and location disabled

Can someone explain this? It doesn't seem to make sense that with wifi disabled this would be possible (and the code they link to specifically has a fall through if wifi is disabled). Maybe something just got jumbled up in their explanation.

Post reply on HN