Re: Tutorial: Query the Apple database with Python for your access point BSSID

Arlen,

>>> How could anyone discover that AA:BB:CC:11:22:33 belongs to Arlen?
>>
>> Easy : Someone drives up to his house and than checks their phone which 
>> SSIDs it detects. :-)
>
> Here's the key thing we need to do to gain an appreciation for privacy.
>
> I suggest anyone else who thinks a BSSID is "just a number" begin to
> separate the object being tracked from the person being inferred.

It is.  You can get rid of it - or replace it - at the drop of a hat.   Just 
like you do with your nym.


There is quite a list of "just a number" stuff that you have on you which 
are *not* you, but do associate themselves with you.   Including the name 
you are referring to yourself within your neighbourhood.

You likely have a smartphone.  That means that your phone company has got 
data about where your phone is, every minute of the day.

Your phone has bluetooth enabled ?   Than anyone with less than $50 
equipment will be able to register that you walked by.  A store will be able 
to register that you entered and even where you paused (which products 
you're looking at).

You have a credit and/or loyalty cards ?   Every time you use it data is 
stored about where you did so it and what you payed for - meaning location 
and behavioural data.

Anyone with a bit of equipment can walk near you and scan the cards that you 
have in your wallet within your trousers or coat.

You drive a car ?   Its plates will likely be scanned when you drive around, 
and that data is also stored.   Besides that, you already gave your 
"private" data to the DMV and, I might hope, to some insurance company.

And than I have not even talked about the upcoming industry of biometrics, 
where a random street camera can identify you on your face alone.


Your whole problem with your BSSID is that you had access to a database it 
appears in, and as such *have become aware* about how many "just a number" 
thingies are available to other people.

All those other databases you know nothing about / have no access to ?   Law 
enforcement can demand that data, and anyone willing to spend a buck 
(private investigators, head-hunters, your neighbour) can also get it.

You think you can be anonymous / untrackable ?    Think again.

Regards,
Rudy Wieser