Hacker News Reader

Comment by stephen_g | Hacker News Reader

"If someone finds/steals your iPhone they can with little effort recover the GPS data."

Except that it wasn't GPS data - just a list of cell tower and wifi hotspot pings.

Except that it is GPS data ... the file "consolidated.db" does contain a list of (your) latitude + longitude + timestamp -- and when this was discovered, that file contained location data for the last 10 months (probably since iOS 4 was released).

This data is indeed used by Apple to build a database of Wifi hotspots and cell towers, along with their locations, doing this to improve their location services when GPS data is not available (the first iPhone could show you your location by doing triangulation on the cell towers nearby).

The fact of the matter is that if you can get your hands on such an iPhone (without a security fix, which I'm sure it's available by now) - you can find out where that iPhone has been.

You know, a simple search on Google could have told you the answer to this -- now you've just added noise.

Can you point to a page that says there are indeed latitude + longitude + timestamp that follow a user's location?

From what I've read, the database was a cache of nearby cell tower and wifi hotspot locations from Apple's servers, not the GPS-calculated (or even tower-triangulated) location of the user.

All comes to the same end: random guy, jealous colleague, nosy employer or landlord snatches your phone while you're not looking and it only takes a few minutes to upload a very thorough archive of "places stephen_g's iPhone has been".

They can get a very rough idea of the places you've been. But if they've stolen your phone, getting access to a list of cell towers you've been near isn't very much of a breach compared to all of your email, bookmarks, facebook, twitter, all of your contacts, etc. The whole thing is a very silly argument and Apple has already addressed it; so lets stop spreading FUD, please.

Reply on news.ycombinator.com