Post #1763658
2024-05-22 01:38 UTC
This is bad. Apple' API enabled anyone to anonymously track the movement of basically all wifi routers that weren't randomizing their BSSID. So, soldiers in war zones back to their home addresses, victims of domestic partner abuse, etc.
https://infosec.exchange/@briankrebs/112480004285401846
Replies (1)
-
@jschuh@infosec.exchange 2024-05-22 14:34
@parkern@infosec.exchange Wow... this one is just... wow. I'm assuming it was either debugging/bootstrapping behavior that got left in. Or maybe it was a very wrong-headed "privacy" scheme where iPhones will beacon back to Apple less because they calculate a fix based on Apple sharing everyone else's location information publicly. But damn, it's still surprising to see something like this, and they must have been doing it for years.