Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple Q&A on gathering and use of location data (Apple Press Release)

apple.com

Post reply on HN
Print view View original

11–20 of 159 posts

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#11

Post by pieter »

yalogin wrote: post #7
pieter wrote: post #2

5. Can Apple locate me based on my geo-tagged Wi-Fi hotspot and cell tower data? No. This data is sent to Apple in an anonymous and encrypted form. Apple cannot identify the source of this data I hate it when companies use 'encrypted' like it would somehow make your data more secure in their hands. They mean here they use something like SSL so snooping the traffic is impossible, but of course they can still read what…

I understand being cynical but in this case the keyword is anonymous. The encryption is for protecting in transit like you said. In order to populate their wi-fi/location database they really don't have to send over a person's IP to the server. In fact its something they don't want I would assume as it adds absolutely no value to the data. They already know who you are and where you are don't they?

They receive your IP address because that's how IP works; otherwise they wouldn't have an address to send data back (and IP packets with a spoofed source IP are dropped immediately). They might not do anything with it, but they definitely have access to it.

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#12

Post by jkahn »

eli wrote: post #6
delphi42 wrote: post #5

"In the next major iOS software release the cache will also be encrypted on the iPhone." Great, thanks a lot! Now I no longer have the option of viewing what law enforcement will be able to get anyways. Nor will I have access to what essentially was a pretty neat database to look through.

Not to sound flip, but if you're concerned about law enforcement tracking your movements, you should leave the phone at home.

Not flippant at all. Law enforcement can track where you are through your telco even if you don't have a fancy phone. And they can do it live.

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#13

Post by ajdecon »

Sometime in the next few weeks Apple will release a free iOS software update that:

- reduces the size of the crowd-sourced Wi-Fi hotspot and cell tower database cached on the iPhone,

- ceases backing up this cache, and

- deletes this cache entirely when Location Services is turned off.

Looks reasonable to me. The only thing missing that I'd like to see is an option to opt out of the tracking data (anonymous or not).

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#14

Post by delphi42 »

eli wrote: post #6
delphi42 wrote: post #5

"In the next major iOS software release the cache will also be encrypted on the iPhone." Great, thanks a lot! Now I no longer have the option of viewing what law enforcement will be able to get anyways. Nor will I have access to what essentially was a pretty neat database to look through.

Not to sound flip, but if you're concerned about law enforcement tracking your movements, you should leave the phone at home.

True -- or don't use a cell-phone at all: http://news.cnet.com/Cell-phone-tracking-raises-privacy-issu....

I guess what I really meant was I'm happier knowing what they're keeping. Future versions may add other features of interest & we'll never know.

I wonder what this story would have been like if this database was originally encrypted & then it was discovered. "Apple attempts to hide location tracker on your iPhone via encryption!"

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#16

Post by sounddust »

I often travel internationally (with no data roaming) and I've noticed that the iPhone's A-GPS is incapable of determining my location when I arrive in a new place, even if I've pre-loaded my route/maps in the maps application prior to arrival. But once I've connected to the internet - even for a few seconds - my phone is permanently able to track itself in that city, even after I've left and returned months later.

It's going to be unfortunate when I can't do this anymore because of people blowing this issue out of proportion. I hope Apple will at least provide the option of caching this data for longer than 7 days.

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#17

Post by yalogin »

pieter wrote: post #11
yalogin wrote: post #7

Earlier quoted context omitted.

I understand being cynical but in this case the keyword is anonymous. The encryption is for protecting in transit like you said. In order to populate their wi-fi/location database they really don't have to send over a person's IP to the server. In fact its something they don't want I would assume as it adds absolutely no value to the data. They already know who you are and where you are don't they?

They receive your IP address because that's how IP works; otherwise they wouldn't have an address to send data back (and IP packets with a spoofed source IP are dropped immediately). They might not do anything with it, but they definitely have access to it.

I was specifically talking about storing your IP along with the location data. That makes no sense as it does not add value to the data.

They have access to it sure. But they have access to it through a lot of other methods. In fact they even have your credit card information. You gave to it them :)

Re: Apple Q&A on gathering and use of location data (Apple Press Release)

#18

Post by ugh »

pieter wrote: post #11
yalogin wrote: post #7

Earlier quoted context omitted.

I understand being cynical but in this case the keyword is anonymous. The encryption is for protecting in transit like you said. In order to populate their wi-fi/location database they really don't have to send over a person's IP to the server. In fact its something they don't want I would assume as it adds absolutely no value to the data. They already know who you are and where you are don't they?

They receive your IP address because that's how IP works; otherwise they wouldn't have an address to send data back (and IP packets with a spoofed source IP are dropped immediately). They might not do anything with it, but they definitely have access to it.

Sure, that's why they say "anonymous". If they do not delete the IP address as soon as technically possible they are lying about the anonymous part.

This is not about ability. This is about trust. They say the data is anonymous which means they are obligated to disregard the IP address and to not log it anywhere.

Post reply on HN