Hacker News Reader

Wait what, this was not public knowledge?

I have been using apple geolocation api for the last 6-7 years to regularly download a snapshot of all access points in the world.

https://github.com/dirk-makerhafen/apple-bssid (the basic request code, not the mass downloader part)

View on HN

No, I'm pretty sure Google (or Skyhook?) fixed this issue in like 2012. I assumed Apple had done the same.

what issue are you referring to?

They used to have an API that would let you submit a single ssid and get its location. I believe their fix was that you needed to submit at least 2 (maybe more) ssids and it would only return the location if they were in close proximity.

Seems like Apple didn't get the message.

Does this still work or did Apples mitigations stop this from working?

it's a public api and public cloud exists, how would they stop scraping?

Authentication via remote attestation?

it's not a public api anymore if you have to auth, but i guess you're right

Reply on news.ycombinator.com