Live data from Hacker News

Apple allows some iOS apps to track user locations via lists of nearby SSIDs

wingu.se

121–130 of 327 posts

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#121

My iPhone asks if I want to allow an app to access the Local Network. I assume that this 1) means that Apple does cover this situation and 2) my opinion that the phrasing "Apple allows applications to track user locations without authorization" is contemptible are both true.

[flagged]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#122

My iPhone asks if I want to allow an app to access the Local Network. I assume that this 1) means that Apple does cover this situation and 2) my opinion that the phrasing "Apple allows applications to track user locations without authorization" is contemptible are both true.

Pretty sure that's a different thing just to prevent tcp/ip connections to other devices on your local subnet after you have already joined a wifi.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#123
post #61

Earlier quoted context omitted.

"Get a list of visible SSIDs" is exactly how phones derive your location. There's little distinction between seeing SSIDs and seeing GPS coordinates for 99.9% of the population.

Back in the real world SSIDs are a very coarse and not very reliable way of locating devices. You are exaggerating.

Not an exaggeration—Apple’s primary “location services” API, used on iOS/macOS, is just a lookup table for wireless APs’ MAC addresses. [1]

WiFi scanning is much less power intensive than GPS, much more reliable indoors, and often (in dense areas) more accurate even outdoors. iirc the iPhone only connects to “real” GPS in specific situations, such as when visible wifi signals are insufficient (e.g. highway driving).

[1]: https://www.appelsiini.net/2017/reverse-engineering-location...

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#125

Earlier quoted context omitted.

Does your employer have a donation matching program? It’s a great time of year to donate to the EFF.

It's so hard to prioritize non-profits these days. EFF is huge and super relevant, but so are aid programs to Ukraine or I/P, and reproductive health orgs. There's a lot going on I want to contribute to.

I wonder if there is a service to automate small (or large) donations to multiple organizations on a regular basis similar to an investment service?

Edit: I can only find services marketed towards the nonprofit, not for the donor. A service that aggregated and automated all the nonprofits I want to regularly donate small amounts to would be great. I think it would be important to not require the nonprofits direct involvement in order to allow me to donate as diversely as I want.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#126
post #105

Reading through the linked docs, this API seems to specifically be for apps created by owners of WiFi hotspots to help users connect to those hotspots ( https://developer.apple.com/documentation/networkextension/h... ). > NEHotspotHelper allows your app to participate in the process of authenticating with hotspot networks, that is, Wi-Fi networks where the user must interact with the network to gain access to the wid…

Because the Chinese market is too important. For wechat you can maybe argue that it's a "super app" and probably also can be used to connect to wifi hotspots, but for alipay I fail to come up with an explanation..

Alipay is also pretty much an everything app (it also has its own ecosystem of mini-apps built on Alipay's platform). Except for the social aspect, it's nearly interchangeable with WeChat.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#129
post #108
post #2

FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.

> that API requires entitlements to be used Lately I've witnessed a number of apps asking for Local Network permission ("Foo would like to find and connect to devices on your local network") when they have no business doing so in any possible way that I can think of.

Many do this if they play video, mostly to enable chrome cast.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#130
post #111
post #59

Earlier quoted context omitted.

Why does apple get to decide which app gets automatic access to my private data, on my device, without needing to ask me?

Because this is how all operating systems work. If Microsoft wanted to give special apps access to your private data without asking, then that is exactly what would happen. The same thing is true in Linux, other than we'd expect that the open source nature would have users going "Yo, WTF"

Android requires the app to ask the user's permission to read WAP identification details. Previously, the app had to ask for location permission, and now there is a special permission just for this. https://developer.android.com/develop/connectivity/wifi/wifi...
Post reply on HN