AirTags + FindMy == espionage heaven.
Find You: Building a stealth AirTag clone
101–105 of 105 posts
Re: Find You: Building a stealth AirTag clone
#102What's preventing Apple from stopping OpenHaystack from working? Is this simply a security vulnerability that will get fixed, or is there something inherent that may not be fixable? After all, Apple knows all the ids of the airtags they've created.
Re: Find You: Building a stealth AirTag clone
#103Earlier quoted context omitted.
My memory is a little fuzzy, but iirc after required tags in the advertising packet you had ~28 bytes that could be tagged 0xFF - mfg data. Then there is also BLE5 which adds advertising extensions to get to 240-250bytes. And the scan response packet which was under 30 all the time. But I could be wrong about all of that, been a little while since I was that deep in BLE. Point for me is that Apple absolutely could do…
I've read a bunch of different numbers around 30, but I've never used beacons personally. I pulled out my copy of the O'Reilly book on BLE (covers up to Bluetooth 4.1), which says this > Each advertising packet can carry up to 31 bytes of advertising data payload, along with the basic header information (including Bluetooth device address). I didn't know about advertising extensions, thanks for the info. Without that…
4.1 is before packet extensions, but that shouldn’t matter here.
The reason you’ll see different numbers is that not everyone considers the overhead the same. Some count it, some don’t. I do because it just isn’t usable.
Re: Find You: Building a stealth AirTag clone
#104Does this mean that Apple is failing to validate the capability of things that purport to be AirTags? Or that the BLE protocol is just not powerful enough to have Apple signatures on each broadcast public key? If it's the latter, it might mean that the entire AirTag product line is dead in the water.
The Apple strategy would be that it works fine and then 6 months in they release an update that specifically targets these devices and they are instantly worthless.
Re: Find You: Building a stealth AirTag clone
#105Earlier quoted context omitted.
I understand your point and it's completely valid, but I think the difference is that Apple is mainstreaming personal tracking in a way that other companies could only dream of, and in doing so is also mainstreaming awareness of how technologies like this might be abused. Because of this, Apple has painted a giant target on their back even though they're arguably handling privacy issues better than anyone else in thi…
I think what Apple is really mainstreaming is the mass-use of their devices as a low-bitrate, irregular sneakernet. This should replace lots of IoT stuff. It's kinda dumb that our cabin has a 'smart' meter on a meshnetwork, but there's no way for me to remotely turn-on a heater 4h before I arrive without a $10+/month subscription. Maybe one day I can offline order a book and it just shows up because the on-line devic…