Live data from Hacker News

Apple allows some iOS apps to track user locations via lists of nearby SSIDs

wingu.se

21–30 of 327 posts

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#21
post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

Facebook is a SuperApp. It had a WiFi-hotspot-finder in it for years.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#22
post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

I love when I launch an app and then get a bevy of requests to access my Camera, my Microphone, my Contacts, etc...

I nope out and if the functionality of the app is trashed, so goes the app....

Google Maps constantly hounding me to turn on precision location services, asking me if I am navigating for a friend and to allow access to my contacts... Wow, no.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#23
post #13
post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

Musk wants Twitter to be a super app. https://www.theverge.com/2023/7/26/23808796/elon-musks-x-eve...

[flagged]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#24

Earlier quoted context omitted.

Thanks. The docs confirm that an entitlement is required to call this API — still does not make clear to me whether the presence of the entitlement brings up a prompt allowing the user to deny the use of the API.

If it does, it would be for network, not location. Per the rules, this isn’t a location api, except it actually is. Iirc Android has always asked for location to enable Bluetooth, I wonder if there are similar apis there?

Yeah, Apple may want to rethink Network != Location.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#25
post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

Is there a way for an end user to see which apps have this entitlement?

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#27
post #19
post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

> com.apple.developer.networking.HotspotHelper Where do you revoke this entitlement on iOS? Settings → Privacy & Security → Local Network? Or is this something else?

AFAIK entitlements are not necessarily exposed as toggles.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#28
>Credit: This article was written with the assistance of ChatGPT for the purpose of refining my English writing.

I appreciated this disclosure. The English was still a bit clunky - but it was a great use of the technology to open up the article to a wider audience. It felt sincere to me.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#29
post #3

TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda. However, AFAIK apps need to declare the use of this API and have a go…

> off putting since has a tone with an agenda

completely agree, I read 2 sentences and closed it.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#30
post #3

TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda. However, AFAIK apps need to declare the use of this API and have a go…

Sure, entitlements need approval from Apple. But clearly, apps are able to get it for undisclosed reasons and use it for tracking. Obviously, this goes against Apple’s guidelines and should be dealt with swiftly, especially now that it is public knowledge.
Post reply on HN