Google, Apple gear to raise tracking tag stalker alarm
- Reference: 1715693415
- News link: https://www.theregister.co.uk/2024/05/14/android_apple_devices_anti_stalking/
- Source link:
Basically, if someone places a hidden tracking tag in your bag, car, or something else that you take with you, and your phone or tablet detects that unpaired Bluetooth-based tag as you move around, it's a clear sign someone's trying to stalk your location using the secret tag, and your own device will alert you to it.
It's a continuation of the tech giants' work on an industry-wide [1]specification for Bluetooth tracking devices, [2]announced last year. And it follows allegations of stalkers using these trackers to harass and even [3]kill victims.
[4]
[5]Apple , [6]Amazon, and Tile devices have all allegedly been used to facilitate stalking users and violating their privacy with Bluetooth tracking tags.
[7]
[8]
Apple's Find My network already has a feature that will send an alert to users if there is an unauthorized AirTag moving with them – implying that someone has planted a tracker somewhere, such as in a bag or hidden in a vehicle. This latest update – and iOS 17.5 is out this week – will mean they get a similar alert if any kind of supported Bluetooth tracker is detected – not just AirTags.
Android users have been able to get similar AirTag-detection, but it presently requires downloading a separate app specifically for AirTags. The collaboration on a universal standard will eliminate that hassle. In other words, Android will also flag up any supported tracker tag without the need for a separate app.
[9]
Google's [10]blog post on Monday emphasized the cross-platform cooperation. "With this new capability, Android users will now get a 'Tracker traveling with you' alert on their device if an unknown Bluetooth tracking device is seen moving with them over time, regardless of the platform the device is paired with."
If a user gets this alert, it means that a stalker's Bluetooth tracker is following them. According to Apple and Google, users will then be offered assistance in locating the widget (by having the tracker make a noise) and - if possible - disabling them.
According to [11]Apple's announcement , other Bluetooth tag manufacturers – including Chipolo, eufy, Jio, Motorola and Pebblebee – have committed that future trackers will support the anti-stalking alert. Samsung and Tile have endorsed the spec, too, but there's no word on when their products will be updated with the privacy feature.
[12]
For now, Apple and Google say this anti-stalking mechanism works with widgets that are an "AirTag, Find My accessory, or other industry specification-compatible Bluetooth tracker."
"Bluetooth trackers like AirTags are great for finding stuff. However, they've always creeped us out with how they can be – and are – abused for stalking," Mozilla Foundation's Jen Caltrider, program director for its Privacy Not Included project, told The Register .
This added protection, she added, is "long overdue."
Tile started selling Bluetooth Low Energy (BLE) wireless tracking tags ten years ago. More recently, in 2021, Samsung introduced its Galaxy SmartTag and Apple introduced its AirTag. Shortly after, reports of stalkers abusing these devices to track – and sometimes physically harm – their victims began popping up.
"The fact that these Big Tech giants are still working on a public industry specification for these Bluetooth trackers that have been around for over three years now says they care more about profit than protecting people – they'll get around to the safety features as an afterthought," Caltrider argued, noting that Mozilla found similar problems with newer [13]car tracking and monitoring technology.
"I really wish the smart people at these companies would think through how their technologies could be used to harm the most vulnerable before they launch them," Caltrider added.
[14]Three dozen plaintiffs join Apple AirTag tracking lawsuit in amended complaint
[15]Apple, Google propose anti-stalking spec for Bluetooth tracker tags
[16]Women sue Apple claiming AirTags helped their stalkers
[17]Stalking victims sue Tile and Amazon for negligence over tracking tech
EFF director of cybersecurity Eva Galperin told The Register the move by Apple and Google is "a very good start." But she pointed out that the standard to track the trackers also raises its own privacy concerns – which [18]Matthew Green , a cryptographer and professor at Johns Hopkins University in the US, and fellow researchers referenced in a September paper last year.
"On one hand, yes, you will be able to protect people from being stalked using AirTags," Galperin noted. "It's very good that people will be getting always-on alerts, no matter what kind of phone they have. But if you are creating a tracking system that allows people to be able to know where all AirTags are and who they belong to, that is also a very serious privacy problem."
In that [19]paper , the academics propose a cryptographic fix, which they say balances user privacy and stalker detection. "My hope is that Google and Apple will implement [Green et al's] recommendations," Galperin added.
"All manufacturers of physical trackers need to step up and make sure that their trackers have mitigations that cannot be turned off," she continued. "But it also needs to be done in a careful, thoughtful manner that does not create an entirely new network for tracking people who have trackers that they're using on their phones." ®
Get our [20]Tech Resources
[1] https://datatracker.ietf.org/doc/draft-detecting-unwanted-location-trackers/01/
[2] https://www.theregister.com/2023/05/02/apple_google_antistalking_bluetooth/
[3] https://www.theregister.com/2022/06/14/airtag_tracking_murder_charge/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZkOKnxcu22yZfvU05E1JogAAAFA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://www.theregister.com/2023/10/13/three_dozen_plaintiffs_join_apple_airtag_suit/
[6] https://www.theregister.com/2023/08/17/tile_and_amazon_lawsuit/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZkOKnxcu22yZfvU05E1JogAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZkOKnxcu22yZfvU05E1JogAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZkOKnxcu22yZfvU05E1JogAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://security.googleblog.com/2024/05/google-and-apple-deliver-support-for.html
[11] https://www.apple.com/newsroom/2024/05/apple-and-google-deliver-support-for-unwanted-tracking-alerts-in-ios-and-android/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZkOKnxcu22yZfvU05E1JogAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://www.theregister.com/2023/09/06/mozilla_vehicle_data_privacy/
[14] https://www.theregister.com/2023/10/13/three_dozen_plaintiffs_join_apple_airtag_suit/
[15] https://www.theregister.com/2023/05/02/apple_google_antistalking_bluetooth/
[16] https://www.theregister.com/2022/12/06/apple_sued_for_enabling_stalking/
[17] https://www.theregister.com/2023/08/17/tile_and_amazon_lawsuit/
[18] https://ioc.exchange/@matthew_d_green/111652534584820287
[19] https://eprint.iacr.org/2023/1332
[20] https://whitepapers.theregister.com/
Re: So a thieves alert...
Like if police cares.
Airtag for theft is basically useless because law enforcement will not lift a finger and if you go to retrieve it yourself you'll get done for theft and burglary, as you are likely a non-threatening, non-violent type that police can tackle more easily than those actually scary and mean thieves that use curse words and dress funny.
Re: So a thieves alert...
Rather depends on where you live and what's been stolen by whom.
Tracking the trackers
Just wondering ... if someone puts a tracker in their suitcase on a long haul flight will I get a tracker tracking me alert? Will I get one for each of the other 200 people who put tracking devices in their suitcases?
Re: Tracking the trackers
Sounds like it could turn into cookie permissions all over again. And does it distinguish between a tracker and a phone either with Bluetooth left in a "looking for devices" mode or perhaps using it as a proxy for location checking (effectively reverse tracking!)
Re: Tracking the trackers
Only if you don't put your phone in flight mode.
What's Latin for "Who tracks the trackers?"
Re: Tracking the trackers
Google gave me this: qui vestigia elit
Re: Tracking the trackers
AFAIK one of the triggers is if the tag owner ISN'T present. So hundreds of trackers in suitcases would presumably have their owners on the same flight.*
* Yes, we've all been there... When you know more about where your luggage is than the airline helpdesk they tend to be more like an unhelpdesk.
Puzzled Old F*rt Here....
Quote: "...your phone or tablet detects that unpaired Bluetooth-based tag..."
Yup.....but ALL THE OTHER Bluetooth devices nearby ARE STILL PHONING HOME!!!!!!
....you are still being tracked...............even if this "NEW TECHNOLOGY" is telling you!!!!
What am I missing????
(Well.....I'm actually missing the fact that this news item is MISINFORMATION.......about Apple Corp "doing something".......)
Going to have to explain that to my better half. One car has a blackbox (using BLE) that is only paired to my phone.
Dumb question - but why is your car advertising its Bluetooth black box when not in pairing mode ?
My headphones only pop up as a device when I press the wrong button and cause them to go into pairing mode. Otherwise they can my phone do some sort of secret tango using remembered credentials and the connection happens automatically. Do a Bluetooth scan afterwards, neither device will show up (recent Android versions often only transmit their presence openly if you're in the Bluetooth settings).
So a thieves alert...
No point in air tagging anything that might get stolen...