51–60 of 327 posts
FYI, that API requires entitlements to be used, which are only available if you request them from Apple and justify their use. It's not a general-purpose API any app can use.
It’s worth noting that use of NEHotspotHelper requires a special entitlement (com.apple.developer.networking.HotspotHelper) that you have to apply for, and presumably Apple won’t grant unless your app has a legitimate need for it. That said, this maybe shows an incompatibility between Apple’s privacy strategy and “super-apps” like WeChat and AliPay. When a company shoves all functionality into one app, that app sudde…
> presumably Apple won’t grant unless your app has a legitimate need for it. Increasingly clear that Apple is in charge of what happens on your devices not the users themselves.
Earlier quoted context omitted.
If it does, it would be for network, not location. Per the rules, this isn’t a location api, except it actually is. Iirc Android has always asked for location to enable Bluetooth, I wonder if there are similar apis there?
Yeah, Apple may want to rethink Network != Location.
Earlier quoted context omitted.
As I said, it's a valid concern. However the author forget the mention that you need to apply and get approved to use this API. I find it dishonest and alarmist. Here's the request form that you fill up for it: https://developer.apple.com/contact/request/hotspot-helper/
> However the author forget the mention that you need to apply and get approved to use this API. And? How is this any better? e.g. if I'm a dissident/etc. in China I would be much concerned about government affiliated large corporations being able to track my location than some random private developer (not that this specific API really matters that much if you're using those apps anyway). > I find it dishonest and a…
If you don't want the government track you, you will have to do much better than using mainstream consumer devices. Apple is not your spycraft supplier.
TL;DR: Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. Seems like a valid concern, though the author's writing style can be off putting since has a tone with an agenda. However, AFAIK apps need to declare the use of this API and have a go…
> TL:DR; Apps can access the nearby Wi-Fi hotspot SSID and MAC addresses through an API that is intended to help with connecting to hotspots. Then they can use this info to look-up in databases that collect SSIDs based on their locations. This is the whole story. Thank you for writing it, and sorry that you're getting downvoted for it. > I'm sorry you don't like it but that's the truth, the author left out crucial de…
One should realize that what they call ‘track user locations’ is actually ‘get a list of visible SSIDs’. Should be behind a permissions check, but not the end of the world.
Earlier quoted context omitted.
> presumably Apple won’t grant unless your app has a legitimate need for it. Increasingly clear that Apple is in charge of what happens on your devices not the users themselves.
Wasn't it ever thus?
Earlier quoted context omitted.
That’s not really any consolation, since (according to the article) Apple has granted that entitlement to WeChat and Alipay. Yes, these are “super-apps” and Wi-Fi hotspot services are probably part of their offerings, but that’s just more reason this should be a user-grantable permission like “local network access”. If I don’t care for the hotspot feature, I don’t want the app to have that capability.
Certain apps have always gotten special treatment. If it’s big enough to mess with phone sales they’re allowed nonsense a normal dev would be permanently banned for. Ex: all the stuff FB has been caught doing over the years My understanding (no first hand experience) is that WeChat and Alipay are basically required in China. If a phone doesn’t have them, it’s worthless and won’t sell. So naturally they too can do non…