Re: Tutorial: Query the Apple database with Python for your access point BSSID

Andy Burns wrote:
> Marian wrote:
> 
>> this tutorial is only useful if you want to control the query
>> of Apple's highly insecure WPS database, which has no privacy controls.
> 
> I've not followed this thread in detail, I could understand the outrage 
> *if* apple were storing SSID/GPS pairs, such as
> ssid:Arlens_house_nomap=latitude:40.12345678,longitude:-120.12345678
> 
> But how is it compromising to store BSSID/GPS pairs such as
> bssid:AA:BB:CC:11:22:33=latitude:40.12345678,longitude:-120.12345678
> 
> How could anyone discover that AA:BB:CC:11:22:33 belongs to Arlen?

Since I reproduced almost exactly what the researchers said could be done,
did you read the research papers which were cited about this subject?

How would you summarize what they said about the privacy danger involved?

See references in the sig... 
-- 
 *Surveilling the Masses with Wi-Fi-Based Positioning Systems*
 <https://par.nsf.gov/servlets/purl/10540853>


Cybernews: *Anyone can tap into your WiFi location data to track you*
explains how Apple's WPS can be exploited for mass surveillance.
<https://cybernews.com/privacy/apple-beams-wifi-location-data-privacy-risk/>

Cybersecurity News: *Hackers Can Abuse Apple¢s Wi-Fi Positioning System*
details the University of Maryland study showing global tracking risks.
 <https://cybersecuritynews.com/apples-wi-fi-positioning-system/>

Dark Reading: *Apple Geolocation API Exposes Wi-Fi Access Points Worldwide*
notes that researchers could query hundreds of millions of APs in days.
<https://www.darkreading.com/endpoint-security/apple-geolocation-api-exposes-wi-fi-access-points-worldwide>

Krebs on Security: *Why Your Wi-Fi Router Doubles as an Apple AirTag*
describes how Apple¢s data was used to track billions of devices globally
<https://krebsonsecurity.com/2024/05/why-your-wi-fi-router-doubles-as-an-apple-airtag/>

Register: *Apple Wi-Fi Positioning System open to global tracking abuse*
covers the academic paper "Surveilling the Masses with Wi-Fi-Based
Positioning Systems" by Erik Rye and Dave Levin
 <https://www.theregister.com/2024/05/23/apple_wifi_positioning_system/>