Live data from Hacker News

Apple allows some iOS apps to track user locations via lists of nearby SSIDs

wingu.se

221–230 of 327 posts

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#221
For the last few months, I am consistently receiving spam calls (on my mobile number) shortly after I left the house regardless of weekday, time etc.

I never thought about the idea that an app can track when I leave my (most frequently) used WiFi and derive from that I left home.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#222
post #59

Earlier quoted context omitted.

Why does apple get to decide which app gets automatic access to my private data, on my device, without needing to ask me?

I've asked similar questions before and am usually told that this is how Apple does things and it's what makes their users happy. It's in fact why they love and choose Apple. They trust Apple to make the right decisions, and this is in fact a big part of the value add of their products. This is much related to the walled garden approach. For example, ask about why sideloading should remain not an option at all, rathe…

This mentality is fascinating to me. In a sense, nobody owns an Apple device. It's more like renting: the landlord keeps a bunch of doors locked and has strict rules, but the place comes pre-furnished and includes millennial-grade amenities.

I can see the appeal if you don't particularly care about owning a device, but it blows my mind that people become so dedicated to this way of living.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#223
post #194

Earlier quoted context omitted.

Centralized superapps seem incredibly dangerous to privacy, given that the limited mobile privacy models are designed around per-app permissions. 1. Create app that does 1 thing 2. Add more features to app 3. Abuse superset of permissions 4. Gov leans on app owner 5. Gov abuses superset of permissions

No, I more than 100% agree, I am just staing that most people just dont realize just how deeply entangled the mobile is to Asian life. I wasn't praising it, I am horrified, but also in awe by it.

I'm pretty sure most people are very aware that most of east Asia never saw massive PC adoption and so their internet developed in a very mobile-centric way. This hasn't been surprising for a long time?

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#224

Earlier quoted context omitted.

That doesn’t mean seeing an SSID means you are at exactly that location. If you are in a city you see 50 SSIDs at any given moment. Are you at those 50 locations at the same time? No. Is there a way to triangulate where you are exactly? No, its unreliable and not an exact science.

you're all over these comments trying to convince everyone that SSIDs can't be used to determine location, yet you don't know how triangulation works? are you trolling?

[flagged]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#225
post #138

They're not tracking locations because they're not using GPS. They are checking the environment for stuff that might have known locations, which is different. You can do the same with bluetooth/BLE.

SSID / BSSID is often enough to pinpoint the location. Recently someone debated this with me, so I asked him what his wifi AP name was, then proceeded to provide their home address.

How? By searching it in https://wigle.net.

That ended the debate quite swiftly.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#226
post #105

Reading through the linked docs, this API seems to specifically be for apps created by owners of WiFi hotspots to help users connect to those hotspots ( https://developer.apple.com/documentation/networkextension/h... ). > NEHotspotHelper allows your app to participate in the process of authenticating with hotspot networks, that is, Wi-Fi networks where the user must interact with the network to gain access to the wid…

Its a more basic question to me, why do these apps need a special entitlement? Couldn't they ask users for permissions like any other app, presumably with a good reason to go along with it since location is needed for some features?

Apple wants to gatekeep the feature for "legitimate" uses. If it was just another permission, random flashlight apps (as the joke goes) would ask for the permission and _n_% of people would just blindly accept it. Then, of course, Apple would get blamed for allowing random flashlight apps to track people's location. Of course this could all be done via the regular app review process, but Apple seems to have decided on a few permissions they want to keep super locked down (CarPlay is another, to avoid blame for when someone crashes while using some CarPlay app).

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#227

Earlier quoted context omitted.

I've asked similar questions before and am usually told that this is how Apple does things and it's what makes their users happy. It's in fact why they love and choose Apple. They trust Apple to make the right decisions, and this is in fact a big part of the value add of their products. This is much related to the walled garden approach. For example, ask about why sideloading should remain not an option at all, rathe…

I have to agree with this sentiment, I read it here on HN 'power' users more than once. Although most Apple users have no clue about what we discuss here, the part about actively wanting it is simply not true en masse. Needless to say that's not for me and I will probably keep sporting Androids (in my case I am happy with Samsung's top ultra offerings) since I actually use those added features, ie saving 500 bucks on…

[deleted]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#228

Earlier quoted context omitted.

Most entitlements though trigger a privacy prompt to allow the user to disable the functionality. Without writing a test app, I don't know that this is the case with this entitlement. I think it should ask the user's permission.

Keep in mind that in a corporate context, not asking the user for permission or explaining what/why you are doing something is the (sociopathic imo, but nevertheless) norm . To the degree you do disclose something like that it is inevitably hidden away or obfuscated by being put somewhere in the UX that no one ever really goes. Like seriously. I had the argument before; Architect: we're going to fingerprint users. Me…

How does that apply to thise case though? Asking for permissions on iOS is the norm and many apps include a message indicating what and why they are about to request something non-obvious before sending the request and triggering the popup.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#229
post #59
post #49

Earlier quoted context omitted.

Certain apps have always gotten special treatment. If it’s big enough to mess with phone sales they’re allowed nonsense a normal dev would be permanently banned for. Ex: all the stuff FB has been caught doing over the years My understanding (no first hand experience) is that WeChat and Alipay are basically required in China. If a phone doesn’t have them, it’s worthless and won’t sell. So naturally they too can do non…

Why does apple get to decide which app gets automatic access to my private data, on my device, without needing to ask me?

With Apple there's no such thing as “my device”.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#230
post #105

Reading through the linked docs, this API seems to specifically be for apps created by owners of WiFi hotspots to help users connect to those hotspots ( https://developer.apple.com/documentation/networkextension/h... ). > NEHotspotHelper allows your app to participate in the process of authenticating with hotspot networks, that is, Wi-Fi networks where the user must interact with the network to gain access to the wid…

This is functionally a Location Services feature, so the user should grant location permissions to use this.

I am not sure how it works in practice.

Post reply on HN