Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple allows some iOS apps to track user locations via lists of nearby SSIDs

wingu.se

Post reply on HN
Print view View original

31–40 of 327 posts

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#31

Post by karmakaze »

mrpippy wrote: post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

> presumably Apple won’t grant unless your app has a legitimate need for it.

Increasingly clear that Apple is in charge of what happens on your devices not the users themselves.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#32

Post by readams »

JKCalhoun wrote: post #22
mrpippy wrote: post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

I love when I launch an app and then get a bevy of requests to access my Camera, my Microphone, my Contacts, etc... I nope out and if the functionality of the app is trashed, so goes the app.... Google Maps constantly hounding me to turn on precision location services, asking me if I am navigating for a friend and to allow access to my contacts... Wow, no.

You don't think location is useful for a map ... ?

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#34

Post by [deleted] »

_justinfunk wrote: post #28

>Credit: This article was written with the assistance of ChatGPT for the purpose of refining my English writing. I appreciated this disclosure. The English was still a bit clunky - but it was a great use of the technology to open up the article to a wider audience. It felt sincere to me.

[deleted]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#35

Post by [deleted] »

mrpippy wrote: post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

[deleted]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#36

Post by [deleted] »

otterley wrote: post #9

If you care about this, the best thing you can do to get Apple’s attention is to fill out the form at this site: https://www.apple.com/contact/feedback/ and select “product feedback.” Doing so was instrumental to persuading Apple a few years ago to add an option “allow only once” when apps asked for permission to access the user’s current location.

[deleted]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#37

Post by lencastre »

nequo wrote: post #19
mrpippy wrote: post #12

It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…

> com.apple.developer.networking.HotspotHelper Where do you revoke this entitlement on iOS? Settings → Privacy & Security → Local Network? Or is this something else?

General > Reset > Reset Location and Privacy Settings

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#38

Post by [deleted] »

mrtksn wrote: post #3

TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda. However, AFAIK apps need to declare the use of this API and have a go…

[deleted]

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#39

Post by qwytw »

filleokus wrote: post #11
coldcode wrote: post #2

FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.

But if Facebook/Instagram/Messenger (or Alipay / WeChat as mentioned in the article) has this entitlement and does fishy stuff, I guess this can actually be a large privacy issue? Does Apple do any analysis of entitlement usage and withdraw them when abused? A similar thing I remember is the Facebook VPN "scandal" where I think Apple withdrew the Facebook enterprise signing certificate?

What do entitlements have to do with not asking for user permission though? Seems like separate issues.

Re: Apple allows some iOS apps to track user locations via lists of nearby SSIDs

#40

Post by eduction »

I thought users were prompted to give permission for this already? I get asked if I want to give “local network” access to apps sometimes (- lot these days actually) which I take to mean the ability to see local WiFi hotspots. I almost always deny this (and after reading this just turned it off for Spotify). I think the dialog that asks for permission could be improved, though, as most people don’t realize this can be used to deduce their location.
Post reply on HN