Woman discovers AirTag on her vehicle after receiving iPhone alert
kait8.com
kait8.com
Google Play: https://play.google.com/store/apps/details?id=de.seemoo.at_t... F-Droid: https://f-droid.org/packages/de.seemoo.at_tracking_detection... Source code: https://github.com/seemoo-lab/AirGuard
Does each manufacturer of those also owe you an Android app?
Yeah, probably.
Well, if you're a company that manufactures a product that can be used for spying on people, and you want to make clear that the intended use isn't for spying on people, then I guess you need to ask how badly you want to make clear that it's not a technology for spying on people.
In the case if your specific questions, if you don't have a phone with BTLE, then your phone probably can't detect it.
If you are an Android user, and I put an AirTag on you, your phone won't report the location on the tag.
But every apple product that gets close to you will report your location.
The solution is correct, inform a user that they’re being followed by an AirTag. But if the platform isn’t opened you risk having to install half a dusin app from different tracking devices, to be informed that you’re being followed.
Doesn’t it also beep?
How hard is it to snip the speaker leads, or damage the speaker in some other way so that it produces no sound?
But to play devil's advocate, can't someone buy any cheap old iPhone (or any smartphone), activate it with a cheap prepaid plan, and use the phone itself as a tracking device instead of an airtag?
I guess the only thing special about the airtag is it's (slightly) cheaper than a cheap smartphone, longer battery life, and explicitly marketed for the purpose of tracking things. Even if a cheap prepaid smartphone can accomplish the same thing while going completed undetected.
When I was younger I had a friend who worked in a cellular phone store (back when most people went to a physical store to buy cell phones).
He very frequently got customers asking for another phone to do exactly this. It was a common problem for their commission structure because the cheap phones used for tracking people (usually spouses suspected of cheating) were often returned within 30 days and their data plan cancelled, which was a net negative for their sales stats and commission structure.
- An Android app will make the "AirTag network" even more pervasive, with even Android phones doing the tracking for Apple.
- What happens when there are such "tags" all around you? How many false alerts will it take before users start ignoring it?
GPS trackers cost like $50 and are smaller than a cell phone (thicker though because they usually have a big battery/lots of batteries). They're weather/waterproof for the most part and have strong magnets to attach to the underside of a car where no normal person would ever look. They usually come with hard-wire options as well so you can tie into a car's 12V system (depending on the car this is either trivial/fast with a vampire tap or a time consuming activity).
These devices can't be easily detected from a cell phone; it's easier to physically look for them than to try to capture their wireless emissions (unless you have special equipment). Some of them just record their locations over time and don't even emit anything at all but there's probably some that can communicate these logs via Bluetooth but I'm not sure how common that is.
Using an AirTag to track someone's car is basically ridiculously lazy and risky... Too easy for the target to notice IMHO.
For reference, most of the folks on HN could probably make their own GPS tracker with their microcontroller of choice and a ~$5 GPS breakout. Could even get super fancy to have it transmit coordinates via LoRa and whatnot. You could even 3D print an enclosure for it that precisely matches the contours of the underside of a (specific) car so that it wouldn't be found unless you were super duper familiar with what the underside of your car looked like.
Another evil reason to buy an iphone!
"The company also announced that it was working on an app for Android users that would send them alerts about unwanted tracking devices similar to those iPhone users receive. The Android app is set to launch later this year."
Apple may not hit the end of 2021, and they don't get full credit until they release the app, but they're aware of the issue and have stated they are working on a solution.
I'd rather they work with Google to get those notifications automatically, rather than requiring someone to be aware of AirTags, and download an app, in order to be notified. Perhaps they can work with carriers to get the app pre-loaded?
It's not like Apple are the only company in the world manufacturing tracking devices. In fact with most tracking systems their entire MO is to NOT alert the person you're tracking to their existence.
Hah. Imagine the reaction in this community if the parties were reversed: Google released a creepy device that can track an individual's location, and iPhone users had to install and continuously run a Google app just to defend themselves.
EDIT: Well, as others pointed out, indeed having physical access to a device changes things. The serial number is rather tied to an iCloud account, so Apple, if subpoenaed, should be able to identify its owner (but not their location).
https://osxdaily.com/2021/07/08/found-lost-airtag-find-owner...
I think people are mixing identifying the owner from the tracking beacon communications and identifying it from the physical device / serial number.
That having said, the serial number is rather tied to an iCloud account, so Apple should be able to identify its owner (but not their location).
> To disable the AirTag and stop sharing your location, tap Instructions to Disable AirTag and follow the onscreen steps. If you feel your safety is at risk, contact your local law enforcement who can work with Apple. You might need to provide the AirTag or its serial number.
Reality disappoints.
I assume I'm just missing something obvious, but why is tracking someone without permission happening more now that the holidays are approaching? I can't come up with anything that seems likely.
I suspect the lady had one of the nicer cars in the parking lot.
That being said, the story itself is fishy. Why would someone duct tape one of these in plain sight?
Checked in at the Business Class Lounge - On way to Cancun (Back in a Week!!)
Maybe they need to give everyone on request a device to detect them, but even then you have to know what Airtags are and know to (and how to) request this device, so it’s still an imperfect solution.
Maybe they ought to do a background check and have Airtags registered to your name, that you’re legally responsible for. This sounds crazy now, but it may be the discussion society is having in 10 or 20 years.
At the least, they shouldn’t release an app to detect these. They should release a white paper so everyone can have their own implementation of Airtag detection.
As for me, I’m fully prepared to see my ass bearing down on a toilet as I’m about to take a shit in a toilet paper advertisement. We need strong privacy laws. Technology has upended everyday life and there’s very little room left for you to not be monitored by stalkers^W marketers^W the rest of the world.
* I’m not saying this is a good idea, but it looks like Remington might legally bear some liability for Sandy Hook.
As for registration, they already are registered to the owner's Apple account. That's how the owner is able to track it and know if it's been found.
> An AirTag that isn't with the person who registered it for an extended period of time will also play a sound when moved so you can find it, even if you don’t use an iOS device.
* edit - It appears that may be in the works: https://gizmodo.com/apple-lets-you-scan-for-evil-airtags-tha...
Also. This is mostly PR for Apple. If someone puts any other tracker on me. I’ll never be notified.
But really the important question is if your target notices the stalking, and for that they either need an iPhone or travel with someone with an iPhone.
The main difference between the Tile and the AirTag is that the AirTag network automatically includes every iPhone and is therefore much larger than the Tile, despite being newer. Apple anticipated the stalking and included the anti-stalking feature. Tile has not implemented anything like that.
I do believe Apple at least needs to make the anti-stalking detection available for Android. At core it's just Bluetooth. I suspect they always intended to, after they'd gotten the maximum of "I need an iPhone just for this" sales out of it. Once they've passed that, they might as well expand their AirTag reach (and network) to Android users.
On the other, it sounds like the alert was not timely enough to allow her to prevent the AirTag from disclosing her home location.
If not, how did she detect it?
Asking because in the article "At the time, she did not even know what an Air Tag was until she received a notification that she was being tracked." this implies that she did not use, therefore did not need the Air Tag app, so then how did she detect it?
https://support.apple.com/en-us/HT212227
> If you see this message on your iPhone, iPad, or iPod touch running iOS or iPadOS 14.5 or later, an AirTag that has been separated from the person who registered it is traveling with you, and the owner might be able to see its location. It's possible that the AirTag might be attached to an item you're borrowing.
It beeps after the thief gets to somewhere that thief frequently stays with, such as home, school, office etc.. I found this out with my kid as there is no difference between thief took your item, or stalking someone, as oppose to tracking a family member who's aware of it. It functions the same way. In the case of tracking a family member or a friend, it beeps in kid's classroom or office which is quite annoying even though the person tracked is fully aware of the tracking.
With a simple update, I'd hop Apple allows a family member or who's aware of the tracking but not the owner of the airtag be able to tap the "Moving with you.." message and acknowledge it so the warning message and aritag beeping doesn't continue yet not disabling the tracking (it currently allows to disable the tracking). Not sure why Apple hasn't thought about it or didn't want to do that, as Apple PR insisted that airtag is for tracking items not human but many have found airtag used in tracking human (e.g. family, friend) for safety reason more convenient and cheaper than an Apple watch.
If there are no iphones nearby, the airtag doesn't work.
Will an iPhone alert you if you're being tracked by a Tracki/Tive/Lightbug GPS+cellular tracker? These are common in commercial shipping, but easily accessible for consumers too Here's [1] for $16 (requires $20/mo monthly fee) and [2] is a bring-your-own-SIM off-brand device for $20. Or, heck, they could just get an actual Android phone (either just an old one they have in an electronics drawer, or they could buy a used low-end model for $50), plug it into a 12V charger in the trunk, and set up location sharing.
To be clear, I think Apple made a reasonable effort to do the right thing here. The difference between Tile and AirTags is that the AirTag has a scale factor and pervasiveness that enables 'crimes of opportunity'. It's infeasible to prevent determined criminals: if you have to plan purchasing it, and signing up for the subscription with your personal details, and wait for the shipment, and install it, most people will think twice before following through with that whole sequence. On the other hand, if coworker A is preparing a laptop bag for coworker B to take home, and is fidgeting with the AirTag on their keychain while they do it, their impulse control might not be sufficient to prevent them from slipping in the tracker that they already have on their person.
So you want to congratulate them for this I assume? As that would be the "consequence" of this event should we hold them "accountable" for the outcome.
Apple are making it extremely easy for anyone to track you without your knowledge. If you're then the victim of a crime due to that as far as I'm concerned apple is complicit.
I can see this harming victims of domestic violence.
How? There's tons of these tracker products out there. Are we going to make the entire category illegal?
If you're limiting the conversation to "any iPhone" then there's a few, such as the Chipolo One, which also use Apple's network. However, Samsung has a competing network which uses any nearby Samsung phone (also a popular brand, so I'm told) and Tile has a network which uses any phone that has the Tile app installed. None of these need GPS to work, though their networks will probably be smaller than Apple's in most US cities.
Statutory damages executed against company executives.
This is quite literally the solution for every singe "corporations no longer fear anything" argument. Execute against execs. They are the ones who would be balancing their multimillion-billion dollar rewards against either criminal or civil penalties.
If Apple's ( the company ) fuckups could make Mr Cook spend a weekend in Rikers next to a guy who beat up his gay roommate into pulp over $10, Apple won't ever fuck up as Mr. Cook would have all the needed motivations not to allow for it to happen.
I agree that we need to improve corporate accountability, but that's a bit extreme.
Uber stonewalls investigations into their drivers raping customers? Dara gets dragged out of his fancy dinner into the nastiest prison we have while the case makes it through the courts. If it takes 5 years, he gets to spend those 3 years eating cheese and ham.
Apple? Cook goes it.
Google? Sundar.
Facebook? Mark.
That will immediately fix "corporate culture" as the executives will be incentivized to ensure their organization behave. This does not affect the shareholders and shareholder protection rather it should affect officers and directors of the company.
It's a legitimate product with legitimate uses and a lot of competitors. If you punish the CEO of the manufacturer every time someone uses their product in a crime you'll get every Fortune 500 executive in like a week.
No, not at all. If Apple/Google/Facebook/Clorox "agree to pay a fine to settle a case" then the officers and directors of the company go to prison, not because they are sharedholders of the company - but because they are officers or directors of the company.
So if for whatever reason, Apple agrees to pay a fine and change practices or whatever else regarding AirTags, then Cook should go to jail, not because Cook is a shareholder of Apple but because he is the CEO of Apple.
If Uber agrees to settle, pay a fine/change practices, then Dara should go to jail, not because he is a shareholder of Uber but because he is a CEO of Uber.
If Clorox company agrees to pay a fine/change practices, then the CEO of Cholorox should go to jail, not because he is a shareholder of Clorox but because he is the CEO.
The fact is that an AirTag will start beeping after 8-24 hours if separated from its owner. So no, it's just plainly false that an Android user "would have never known". Plainly, and obviously false.
As the protocol is already reverse engineered you can actually just DIY a tracker even more unnoticeable than Airtags that generates new keys periodically to trick the Iphones into thinking it's a new Airtag that never saw before.
I know the airtag is there or at least I know of one thats there! For some reason it's not on my "find my" under the family account. Also I've never had the notification come up when my partner is around only when I was on my own.
Ironic, since IIRC Apple phones were the very first to follow people's locations without their permission.
The airtag technology uses peoples iphones without authorization as part of the airtag mesh.
Why? Seems to me there are plenty of privacy protections in place, here.
Yes, it should be - or rather mesh networking should be. Apple has deliberately enabled this by default, so that they can better spy on you (for example, now even if you turn off location services, Apple can still track you using other iPhone users near you - all this is deliberately designed to reduce our privacy.)
> If you’re curious to find who’s the owner of the AirTag that you have in hand, you can use your iPhone to view this information. Don’t have an iPhone? You can still use your NFC-enabled smartphone to see contact details.