Live data from Hacker News

OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

github.com

1–10 of 17 posts

Re: OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

#5
post #4

How does Apple prevent me from using this to track random people based for instance on their Bluetooth headphones?

You would have to flash their headphones with custom firmware to do this. Take a look at https://github.com/seemoo-lab/openhaystack#how-does-apples-f...

Re: OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

#6
Awesome work! I can recommend people interested in the iOS/Apple ecosystem to check out the Secure Mobile Networking Lab of TU Darmstadt in general. They do a lot of cool stuff in the space, a good starting point might be https://owlink.org.

As a side note: I wonder what the story is on the whole AirTag hardware project. It's becoming so "delayed" that reverse engineered implementations are here before.

Re: OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

#8

Awesome work! I can recommend people interested in the iOS/Apple ecosystem to check out the Secure Mobile Networking Lab of TU Darmstadt in general. They do a lot of cool stuff in the space, a good starting point might be https://owlink.org . As a side note: I wonder what the story is on the whole AirTag hardware project. It's becoming so "delayed" that reverse engineered implementations are here before.

This isn't a reverse engineering of airtags - this find me service has been available for Apple devices via the same bluetooth mechanism (iPhones and MacBooks) for a couple of years now.

Re: OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

#9
post #4

How does Apple prevent me from using this to track random people based for instance on their Bluetooth headphones?

If you are within BLE range you can "track" someone, but that is already the case with wifi/bluetooth in general.

Even known the public key, you can download the encrypted reports from Apple, but since you don't have the private key you can't decrypt the location messages.

Re: OpenHaystack: Tracking Personal 'AirTags' via Apple's Find My Network

#10
post #8

Awesome work! I can recommend people interested in the iOS/Apple ecosystem to check out the Secure Mobile Networking Lab of TU Darmstadt in general. They do a lot of cool stuff in the space, a good starting point might be https://owlink.org . As a side note: I wonder what the story is on the whole AirTag hardware project. It's becoming so "delayed" that reverse engineered implementations are here before.

This isn't a reverse engineering of airtags - this find me service has been available for Apple devices via the same bluetooth mechanism (iPhones and MacBooks) for a couple of years now.

It has been available since iOS 13/macOS 10.15
Post reply on HN