Urban75 Home About Offline BrixtonBuzz Contact

Apple's iPhone <eta: and other smartphones?> tracks users every movement

The commentators on that article aren't exactly impressed by the spin, are they :)

Totally, looks like horseshit to me, be interesting to see how Apple attempts to spin this given the US senate investigation and negative coverage in the press and blogs...
 
Laughable. :D At least we know who not to go to for forensics research.

It's not new - ok, not sure how that is good.

It's not _really_ tracking users - how is it not _really_ tracking users?

http://www.thefreedictionary.com/tracking

:facepalm:
Cos it ain't continuous. It's like a big checklist of places and it ticks them off (with a time) as you go there - only once.

I'm no Apple fan by any means, and I'm not suggesting this approach is right, but there's a lot of FUD generated around it too.

Apple database said:
CREATE TABLE CellLocation (MCC INTEGER, MNC INTEGER, LAC INTEGER, CI INTEGER, Timestamp FLOAT, Latitude FLOAT, Longitude FLOAT, HorizontalAccuracy FLOAT, Altitude FLOAT, VerticalAccuracy FLOAT, Speed FLOAT, Course FLOAT, Confidence INTEGER, PRIMARY KEY (MCC, MNC, LAC, CI))
My bold - if you are geeky enough to know what this means, it proves the point above. MCC = country code, MNC = network code, LAC = geographic area code, CI = cell tower ID.
 
Cos it ain't continuous. It's like a big checklist of places and it ticks them off (with a time) as you go there - only once.

I'm no Apple fan by any means, and I'm not suggesting this approach is right, but there's a lot of FUD generated around it too.

My bold - if you are geeky enough to know what this means, it proves the point above. MCC = country code, MNC = network code, LAC = geographic area code, CI = cell tower ID.
Not sure of your point, can you expand on this?
 
Are Apple about to issue an update to remove this? Daring Fireball claims he's heard this was either a bug or an oversight to leave it in...

The big question of course, is why Apple is storing this information. I don’t have a definitive answer, but my little-birdie-informed understanding is that consolidated.db acts as a cache for location data, and that historical data should be getting culled but isn’t, either due to a bug or, more likely, an oversight. I.e. someone wrote the code to cache location data but never wrote code to cull non-recent entries from the cache, so that a database that’s meant to serve as a cache of your recent location data is instead a persistent log of your location history. I’d wager this gets fixed in the next iOS update.

Viral pr..?
 
Not sure of your point, can you expand on this?
It might be tracking but it doesn't fit your stated definition of it.

Suppose that tomorrow I embark a fictional affair thrice weekly with a fictional lady from the fictional but quintessentially English village of Yermamington. After a number of years of doing this my fictional wife gets suspicious after I keep coming home covered in bruises and smelling of bleach. She somehow gains an intermediate level understanding of SQL databases, steals my fictional iPhone and is able to determine - - that I went to said village once, in April 2011. I claim that I went there to judge the local Boringshire In Bloom contest and never again returned. She poisons me a decade later and gets the last laugh after all.
 
It might be tracking but it doesn't fit your stated definition of it.

Suppose that tomorrow I embark a fictional affair thrice weekly with a fictional lady from the fictional but quintessentially English village of Yermamington. After a number of years of doing this my fictional wife gets suspicious after I keep coming home covered in bruises and smelling of bleach. She somehow gains an intermediate level understanding of SQL databases, steals my fictional iPhone and is able to determine - ta da - that I went to said village once, in April 2011. I claim that I went there to judge the local Boringshire In Bloom contest and never again returned.
:confused: I don't see how it doesn't fit at all. That's a bizarre assertion.

Of course a digital system takes snapshots of the location, because that's all it can ever do. By your logic no digital system could ever be described as tracking!
 
It's nothing to do with snapshots - it's that it can only record a location once. One cell tower, maximum one record. It shows that you went somewhere once, at a time. If you went there again, nothing.
 
It's nothing to do with snapshots - it's that it can only record a location once. One cell tower, maximum one record. It shows that you went somewhere once, at a time. If you went there again, nothing.
Gotcha. That is marginally better, yes. Good spot.
 
Looking into this further, a similar story appears to be true for the WifiLocation table - one entry per Wifi MAC address. However, there is no such primary key restriction on the WifiLocationHarvest table which contains pretty much the same thing. I wonder how often that table is populated. This could conceivably be more tracking type data, but without an iPhone handy I can't tell.

Code:
CREATE TABLE Wifi (Timestamp FLOAT, MAC TEXT, RSSI INTEGER, PRIMARY KEY (Timestamp, MAC));
CREATE TABLE WifiLocation (MAC TEXT, Timestamp FLOAT, Latitude FLOAT, Longitude FLOAT, HorizontalAccuracy FLOAT, Altitude FLOAT, VerticalAccuracy FLOAT, Speed FLOAT, Course FLOAT, Confidence INTEGER, PRIMARY KEY (MAC));
CREATE TABLE WifiLocationCounts (Count INTEGER);
CREATE TABLE WifiLocationHarvest (MAC TEXT, Channel INTEGER, Hidden INTEGER, RSSI INTEGER, Age FLOAT, BundleId TEXT, Timestamp FLOAT, Latitude FLOAT, Longitude FLOAT, HorizontalAccuracy FLOAT, Altitude FLOAT, VerticalAccuracy FLOAT, Speed FLOAT, Course FLOAT, Confidence INTEGER);
CREATE TABLE WifiLocationHarvestCounts (Count INTEGER);
CREATE INDEX WifiLocationHarvestIndex ON WifiLocationHarvest (MAC);
 
A key question is - iOS4 introduced encryption for the data (activate your passcode and you should see a 'Data protection is enabled.' message at the bottom of the Settings>General>Passcode Lock screen). Apple document that Mail uses the appropriate API. Does the core iOS system though and thus offer some degree of protection of this data?

On older devices that shipped with iOS3 and were then upgraded to iOS4 one has to jump through a few hoops to enable this feature:

http://support.apple.com/kb/HT4175
 
Android caches wifi connections and cell locations too, with latitude and longitude and timestamp:

https://github.com/packetlss/android-locdump#readme
You will need root access to the device to read this directory..

Important note: looking at old android source (this code is no longer open from Google it seems) it seems to be limited heavily.

However, data is only pruned when new info is added. There is no time based pruning unless there is new data being added to the cache. This could lead to old data being if there is limited movement of the device.
It's hardly in the same league as the iPhone leaving an unprotected file on both the phone and the home computer tracking a user's movements for up to a year (even across upgrades) is it?
 
It's hardly in the same league as the iPhone leaving an unprotected file on both the phone and the home computer tracking a user's movements for up to a year (even across upgrades) is it?

The Apple thing looks like a bad implementation of a function that any smart device might want to do. There's no reason it should be in plain text, but I can understand why it is stored and can be shared between devices.
 
Google has made it clear that it doesn't follow Apple's behaviour regarding tracking:

“All location sharing on Android is opt-in by the user. We provide users with notice and control over the collection, sharing and use of location in order to provide a better mobile experience on Android devices. Any location data that is sent back to Google location servers is anonymized and is not tied or traceable to a specific user.”

But, even then, the WSJ article also refers to data that isn’t actually being anonymized by Google:

Google previously has said that the Wi-Fi data it collects is anonymous and that it deletes the start and end points of every trip that it uses in its traffic maps. However, the data, provided to the Journal exclusively by Mr. Kamkar, contained a unique identifier tied to an individual’s phone.

Google explains that when a phone transmits data back to its servers some location data is actually assigned*a unique identification number, but it says that this number is in no way associated with the device’s IMEI, the user’s name, or other information. In other words, they’d have a hard time associating a user with that data.

http://techcrunch.com/2011/04/22/go...ation-tracking-uproar-says-android-is-opt-in/
 
If it stores a unique identifier, it's not anonymised. It's pseudonymised, and there is a large amount of difference between that and anonymised data.A "send anonymous info to Google" tickbox would not cover it.
 
Google are not squeaky clean either.

If you've got a Wi-Fi network, chances are Google has used its top-selling Android mobile operating system to store your router's precise location and broadcast it for all the world to see.

Google has been compiling the publicly accessible database of router locations in its quest to build a service, a la Skyhook, that pinpoints the exact location of internet users who use its sites. Now, hobbyist hacker Samy Kamkar has developed a site that demonstrates just how comprehensive Google's catalog is.

Plug the MAC address of your router into Kamkar's website, and chances are it will pull up its precise location, courtesy of Google Maps.
 
Google are not squeaky clean either.
But still a whole load better than Apple's fucking dodgy practices that leaves users with their precise, time-stamped whereabouts - for up to a year or more - left easily accessible on any machine they've synced their iPhones/iPad with.

Like iOS devices, Android phones do collect location information in a local file. But they seem to erase it relatively quickly instead of saving it forever. Swedish programer Magnus Eriksson has highlighted a portion of the Android source code suggesting a maximum of 50 cell tower locations are retained, which a source close to Google indicates is correct.

http://news.cnet.com/8301-31921_3-20056657-281.html
 
So what's in this for Apple then?

It doesn't have to be anything sinister. It looks like it might be a simple programming error. That doesn't change the fact that it's storing the data in unencrypted form in a way that's accessible to anyone who can get control of your phone or computer, directly or via a trojan.
 
In Google's case an Android HTC phone tracked its location every few seconds and transmitted the data back to Google several times an hour, according to new research by security analyst Samy Kamkar for the Wall Street Journal.
It also transmitted the name, location and signal strength of any close Wi-Fi networks and the phone's unique identifier.
Both Google and Apple have previously admitted they are using location data to build massive databases of Wi-Fi hotspots.
This can then be used to pinpoint individual's locations via their mobile phones, which in turn could help the companies tap into the huge market for location-based services, currently worth $2.9billion.
This figure is expected to rise to a staggering $8.3billion in 2014, according to research company Gartner.
Location data is some of the most valuable information a mobile phone can provide, since it can tell advertisers not only where someone's been, but also where they might be going — and what they might be inclined to buy when they get there.
A spokeswoman for the Office of the Privacy Commissioner of Canada told the Journal the office 'had concerns' about using mobile phones to collect Wi-Fi data and had expressed those concerns to Google itself.

Read more: http://www.dailymail.co.uk/sciencet...its-user-locations-company.html#ixzz1KTF3M1Lq
 
Looks like Google are even more ethically fucked than Apple then - at least the Apple location data doesn't get uploaded to Apple HQ unlike Google - who have already been slapped with fines for their Google car system that unlawfully accessed wifi networks...
 
In Google's case an Android HTC phone tracked its location every few seconds and transmitted the data back to Google several times an hour, according to new research by security analyst Samy Kamkar for the Wall Street Journal.
Does it leave an unprotected and detailed file of all your movements on any desktop you sync your phone with?

As for Apple's ethics: Apple named 'least green' tech company
http://www.guardian.co.uk/environment/2011/apr/21/apple-least-green-tech-company
 
Apple does sync location data with central servers every now and then, though not as frequently as Android does with Google, which is every few seconds apparently. Storing certain data on a phone and requiring physical access to it is an effectively insignificant security risk compared to a phone which actively sends your data to a central server. With a unique identifier. That's what people should be looking at.

eta: yes, Android does store a cached location file too, though it's supposed to have a lower retention time than the iPhone's.
 
Perhaps a mod can change the title of this thread to include Google's name along with Apple given recent news?
 
Does it leave an unprotected and detailed file of all your movements on any desktop you sync your phone with?

What does it matter? - it transmits said file to Google - that's private info about your personal life becoming property of Google.


That's a bit misleading - the report estimated dependence on coal for Apple's data centres at 54.5%, followed by Facebook at 53.2%, IBM at 51.6%, HP at 49.4%, and Twitter at 42.5%.

It's more about the locations chosen for their data centres and the power supplies nearby, that the company directly polluting the planet.
 
It's more about the locations chosen for their data centres and the power supplies nearby, that the company directly polluting the planet.
Ah. It's "misleading" is it? So you think that one of the richest corporations on the planet have no choice over where they decide to locate their business? LOL.

Google seem to have managed a different way of thinking:
Solar Energy

April 7th - Google agreed it's first clean-tech investment in Europe, pumping $5 million into a German solar power plant based in Brandenburg near Berlin.

April 12th - Google invested $168 million in BrightSource Energy to fund the Ivanpah solar energy project in the Mojave Desert. It is the world's largest solar power tower.

Wind Energy

April 18th - Google invested in $100 million in the Shepherds Flat Wind Farm in Oregon. Currently under construction, when completed, it is expected to be the largest wind farm in the world.

April 21st - Today Google agreed to buy all the energy to power it's Mayes County data center for the next 20 years from the NextEra Energy Resources' Minco II wind farm in Oklahoma.

http://blog.searchenginewatch.com/110421-144800
 
Back
Top Bottom