Live data from Hacker News

Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

github.com

81–90 of 117 posts

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#81
post #17

Earlier quoted context omitted.

Yup, there was a project recently that used the airtag network to transmit data from a hardware keylogger. The computer could be totally gapped and the data still gets home via the typist's iPhone.

It's not airgapped if it has bluetooth access.

[deleted]

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#82

Earlier quoted context omitted.

I saw someone use this to track his mail state. They have a contact sensor inside their mailbox that rotates the broadcasted key based on the trigger count. If the key changed, aka a new different device is visible, you know mail has been dropped in, very clever !

I wish we had more / more easily accessible networks that let you do this. Something that would let you send extremely tiny ( Amazon has a network like this called Sidewalk, using Alexa devices as gateways, but I don't think it's very open to third-party experimentation, and it's definitely not an interoperable standard on the gateway side.

I don't particularly want my devices transmitting arbitrary packets from unknown parties.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#83

Earlier quoted context omitted.

I saw someone use this to track his mail state. They have a contact sensor inside their mailbox that rotates the broadcasted key based on the trigger count. If the key changed, aka a new different device is visible, you know mail has been dropped in, very clever !

I wish we had more / more easily accessible networks that let you do this. Something that would let you send extremely tiny ( Amazon has a network like this called Sidewalk, using Alexa devices as gateways, but I don't think it's very open to third-party experimentation, and it's definitely not an interoperable standard on the gateway side.

Starlink's Swarm (or what ever they are calling it now) might be nice if they ever release the hardware and pricing.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#84
Can someone point me to something I saw earlier? Apple alerts users to "tags that might be following you". Someone made an implementation that used a KDF to rotate the mac address or private key or something, but it was predictable in a way you could track each derivation of the of the mac/private key.

There is a really obnoxious petty theft problem where I live, and the time it takes to constantly get my windows fixed or forced entry crap removed is worth a significant amount of my personal time. I have zero desire to confront anyone, but I'd like to be able to create a track for a PI or Law enforcement some day.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#85

Can someone point me to something I saw earlier? Apple alerts users to "tags that might be following you". Someone made an implementation that used a KDF to rotate the mac address or private key or something, but it was predictable in a way you could track each derivation of the of the mac/private key. There is a really obnoxious petty theft problem where I live, and the time it takes to constantly get my windows fix…

Hm, AFAIK AirTags rotate their private key anyway, so I don't know if that will help your problem. Maybe they rotate it slowly, though, I'm not very familiar with the exact algorithm.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#86
post #64

Earlier quoted context omitted.

Guessing those are missing ultra wide band? Seems doubtful to me that someone implemented all three frequencies at 5 bucks

How much do you think a $20 AirTag costs to actually manufacture?

I don't know how much it costs to manufacture, but nobody is selling a UWB tag for $5. For $5, you only get BLE.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#87

I wish there was a good option for non Apple users. From what I've heard Google made their version pretty bad, as expected. They rate limit how often you can search for your own tags, they won't show the location until a tag has been seen by multiple phones, there's poor coverage. One test I saw showed that Samsung's network was better, which makes no sense since Samsung phones should be a subset of all Android phone…

It's actually hilarious that whoever was in charge of Google's finder network decided to cripple the product's one and only function by prioritizing privacy. In this tradeoff, Google gained a handful of articles mentioning the "innovative" privacy improvements (before the writers had a chance to test how terribly the network actually performs). For that, they sacrificed the chance to compete with Apple in this catego…

Google's interest in user privacy extends as far as keeping competitors or customers of google from getting data about an Android user other than through Google.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#88
post #86

Earlier quoted context omitted.

How much do you think a $20 AirTag costs to actually manufacture?

I don't know how much it costs to manufacture, but nobody is selling a UWB tag for $5. For $5, you only get BLE.

I certainly can't claim to have ordered and received one, but there are absolutely $5 UWB devices for sale on AliExpress, and that's before any bulk discount.

If Apple sells them for $20 it's highly likely some random Chinese seller can make money at $5.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#89
post #86

Earlier quoted context omitted.

I don't know how much it costs to manufacture, but nobody is selling a UWB tag for $5. For $5, you only get BLE.

I certainly can't claim to have ordered and received one, but there are absolutely $5 UWB devices for sale on AliExpress, and that's before any bulk discount. If Apple sells them for $20 it's highly likely some random Chinese seller can make money at $5.

Can you link me to one? I haven't found any of those.

Re: Openhaystack: Build 'AirTags' – track Bluetooth devices via Apple's network

#90

I wish there was a good option for non Apple users. From what I've heard Google made their version pretty bad, as expected. They rate limit how often you can search for your own tags, they won't show the location until a tag has been seen by multiple phones, there's poor coverage. One test I saw showed that Samsung's network was better, which makes no sense since Samsung phones should be a subset of all Android phone…

I dunno, a less than perfectly all-seeing omnipresent tracking network actually is a little comforting

Google is still seeing everything, of course, just not the plebs.
Post reply on HN