Apple reveals more about AirTag stalking protections
fastcompany.comThere are a lot of comments here about how useless these protections are, because A or B already exist, or C works better for stalking.
I think most of those comments are missing the real point here. If an Apple product were ever used to stalk - or God forbid, harm - an individual, it would be a big national story. If a Tile or a Samsung tag (or an amazon gps tracker made for stalking) were used in the same way, it would likely only be mentioned in passing if the story were reported at all.
That's why it's so important for Apple to do this. Additional benefit - this may push other vendors to do similar things, pushing stalkers back to more tailored devices. That's still helpful, as it's a lot easier to show intent if someone uses a device like that (as opposed to 'whoops, I lost my airtag).
Well, if it ridiculously easy to work around, they will probably get flak even earlier, harder, and be legislated to the ground more certainly than otherwise.
I spoke with Frank Wang on a few meetups in Shenzhen many years ago, back when DJI was still kind of a garage company.
Frank had big, nebulous ideas how he will be "engaging the civil society," "stakeholder negotiations," "industry wide self-governance body" blah blah blah to safeguard DJI from troubles.
I told him hiring lobbyists, and talking to officials, or even just making buzz about potential problems is a bad, bad idea.
Lawmakers can't ban things they don't know they can ban... unless you give them an idea.
Same thing with public reaction. People don't get outraged if they don't know why they should be.
In the end it came to that exact outcome, and drones are now in the process of being legislated to the ground, and effectively becoming unflyable by regular people without few kilograms of permits, and licenses.
He wanted to pride DJI on how government compliant, and safe his drones are, but instead just got them banned around every major city.
I think in this case it's likely that Apple is drawing attention to the stalking concerns on purpose. Bring on the regulation and the public outrage! Just let it be directed at Tile for not doing this sooner.
> Bring on the regulation and the public outrage! Just let it be directed at Tile for not doing this sooner.
Public outrage seems to be based on a very low-res view of reality drawn from viral sound-bites, so I doubt that's how any public outrage would work.
Yeah, god forbids that a company may actually want to genuinely address an ethical problem, amirirte?
His customers got them banned by doing reckless things.
Really not.
Prior to the big buzz about drones, and DJI buying full page ads describing how their software can load no fly zones, avoid nuclear power stations, prisons, flight into people etc, nobody was ever concerned with some random Chinese gizmo.
And then he made people in places of power to read all kinds of scary things, to which they reacted in the most usual to them manner.
As a counter point, my flight was unable to land some years ago because some moron was flying his drone in the airport airspace.
Was it DJI drone?
Especially because apple has a lot riding on their use of crowdsourcing even though they have a privacy stance.
Personally I think privacy and crowdsourcing cannot go together, no matter how much algebra and privacy boilerplate is thrown in.
> privacy and crowdsourcing cannot go together
Not to downplay the difficulty of these things, but cryptography literally enables things that seem impossible, so I wouldn't write it off that easily
Note that Tile already does this mesh network of crowdsourcing. The issue is that Apple pushes privacy so much that it's bound to be a bigger story when they mess up compared to others, as stated in the OP.
If someone slips an AirTag in your car to stalk you, your own phone would enable your stalker because by default it would automatically update the location of the AirTag, even if you are not an AirTag user.
It is a bit different if your stalker used Tile to track you. You'd have to download that app and opt in.
> your own phone would enable your stalker
No it wouldn't. If your phone can track an AirTag being used to stalk you, it can also alert you to this stalking.
No, you wouldn’t. It would only be necessary for the stalker to do it and then slip the Tile in with your belongings.
Tiles can be marked lost until found by other users with the Tile app.
The main difference is Apple made it work way better and more accessible. Tile users are pretty rare in the wild.
Apple mostly got there because they already had so many phones. As Jobs would've said, Tile is a feature, not a product.
Unfortunately things start getting weird/potentially negative at scale, but at least Apple is trying to get ahead of the problem.
The problem is that there is some benefit in integrating almost any service into the growing Apple ecosystem and almost any product could conceiveably benefit from become an Apple feature. I think regulators need to draw the line somewhere to protect competition.
Would it really help, though?
A stalker, not stupid and well-aware about the protection, visits iFixit for a picture of internals, takes a drill, and physically obliterates the buzzer, right through the case. Epoxy or superglue for protection from the elements.
So they plant an Airtag, it gets found by accident, shit hits the fan, Apple's name goes in the news, journalists start journalist things, people don't are outraged and demand Apple's repentance, AirTags made of diamond-covered vibranium, including a microphone to control the buzzing and stopping working if buzzer is broken. PR problem not solved, and the core problem of humans not understanding technology is not solved.
> A stalker, not stupid and well-aware about the protection, visits iFixit for a picture of internals, takes a drill, and physically obliterates the buzzer, right through the case. Epoxy or superglue for protection from the elements.
You eliminate 95% of the potential stalkers. It is hard to remember that for most consumers the idea of drilling into a thing made of Apple black magic is a foreign idea.
The assumption that all stalkers are smart and informed and skilled is not accurate.
Plenty of them are in fact stupid, followed some advice from discussion forum without really understanding what they are doing and that is that.
If you ask me, I'd say the odds that Apple makes a second revision of the AirTag within 4-6 years are pretty high. And that they end up deprecating/limiting the resolution of looking up the location of the first-gen devices.
That said, there is a foolproof way of preventing trackers from tracking you: like how the iPhone can warn you when a tracker than isn't yours is present (that's how the tracker works, after all!) then just make that feature open source and broadly available within Android. Poof, instantly you've reduced the need to worry about trackers to nil as both iOS and Android phones can thus warn users when trackers are following them and don't belong to them.
Because trackers must be registered, they actually become proof of stalking as much as they can harm individuals, if they can be caught in time of course.
A less scrupulous competitor might even create a bunch of these and just plant them on random people. Instant scandal.
On the other hand, I can virtually guarantee that even if a Tile or Samsung tag is used that way, occasionally the headlines will mention Apple in a negative light anyway.
It just comes with the mindshare, I guess.
Occasionally? More like unfailingly. I wonder if any journalist has ever written a story about worker condition in Foxconn factories without also mentioning Apple. It's like nobody in media cares about Chinese workers unless they're making Apple products. I suppose Foxconn workers who assemble Xboxes and PlayStations don't matter as much.
>If an Apple product were ever used to stalk - or God forbid, harm - an individual, it would be a big national story. If a Tile or a Samsung tag (or an amazon gps tracker made for stalking) were used in the same way, it would likely only be mentioned in passing if the story were reported at all.
it's weird to ascribe some kind of martyr-complex to how Apple is treated.
They're treated that way because they are by far the largest single corporation in the mobile game, not because the media has some sort of anti-apple fetish.
"..., it would be a big national story."
Lawsuit would follow.
Does any company have deeper pockets than Apple.
All these stalking counter-measures make it useless if your device is stolen rather than mislaid.
If my bag is stolen I want it to contain a hard to find device, not one that gives away its position (by warning the thief). I also want an easy mechanism to give the police temporary access to track it, til they catch the thief and get my stuff back.
It gets back to picking a purpose for the device and tradeoffs for privacy and the rest.
Airtags are not for finding stolen things. They're for finding lost things.
I think what you described is a privacy nightmare that Apple very rightly wants to avoid. They do not want to make a small device that is hard to find and doesn't give itself away to allow people to track each other. At Apple's scale, it will be abused and there would be significant negative attention on Apple for that.
Then why did Van Moof bikes adopt the Find My feature as a third party? No one really misplaces their bike. Surely it’s for anti-theft.
Pretty sure Van Moof is literally the first example of a third party Find My device and it sounds to me like it completely contradicts your (and Apple’s) statement about the scope and intended use of the Find My network.
I don’t know where you are, but in the US, if I gave the police a literal GPS coordinate of a stolen good, I still wouldnt expect them to actually go there and find it unless it’s of exceptionally high value (car, etc).
If it was anything less than a kidnapped police officer or child, I wouldn't expect them to do anything.
yep... I had a cell phone stolen when I was in high school, we could track it to a specific house, and they didn't even knock on the door.
If there was an easy mechanism to temporarily hand over tracking of stolen tags/iPhones/iPads to police, with the nice ultra wideband tracking that gives an arrow and direction, police would go and get a lot of stuff back. The police love low-hanging fruit and easy arrests.
You can already do this today with iPhones and iPads and the police won’t do anything
Chasing down petty thieves is not the low hanging fruit most police departments go for.
They'd be interested if drug activity in that house were reported. Then they could raid the house, and keep whatever goods weren't broken or burned in the raid for themselves.
Part of the problem is the GPS resolution, which isn't accurate enough to know exactly which individual on a street has your stuff, or even which house it might be inside.
A long while back, on a early Saturday morning, I was awoken by my doorbell and accosted by an angry father of a crying daughter who had had their iPhone stolen by someone at a bar the previous night. Well, "Find My iPhone" showed the dot location of the phone was my house, so it must be me... turned out it was a neighbor two houses down - thanks Apple.
The best GPS resolution available to civilians is about 8 meters (26 feet) - and that's under the best, most ideal situation using the best GPS receiver and a large antenna... things a small cell phone in a pocket or bag doesn't have.
Cell tower triangulation isn't much better either... although the two used in unison can provide better resolution, but still far from good enough to pinpoint an exact individual, or even house (if the device is near an exterior wall, it may appear to be in the neighbor's house).
Police can't exactly go up and search people on the street because some Apple service says somebody within 20-40 feet or whatever might have the device - doubly so for searching a vehicle or house without a warrant.
So, while these devices are great for personal use - they probably cannot be used for real law enforcement purposes.
> The best GPS resolution available to civilians is about 8 meters (26 feet) - and that's under the best, most ideal situation using the best GPS receiver and a large antenna... things a small cell phone in a pocket or bag doesn't have.
I am not sure where you got this from but that is incorrect - the accuracy (or resolution) depends entirely on the number of satellites and/or augmentation systems you're tapped into, and how strong / clear those signals are. It can vary from a few kilometres down to a few centimetres.
Back in the 90's "Selective Availability" was a thing but it has since been removed.
See https://www.gps.gov/systems/gps/performance/accuracy/
Also - most modern phones can and do tap into the major providers (Galileo, Glonass, GPS etc), towers, WiFi spots, beacons and use all of these to give a a VERY accurate position of where the device is.
Edit: Might mention I worked first hand on indoor tracking of users, and a warehouse project for optimising worker picking - we were able to easily distinguish where a person was in a busy retail setting down to which section of a clothes rack they were selecting clothes from, and exactly where a worker was in a very interference-heavy (metals) warehouse floor using the above mentioned technologies.
From your link:
> For example, the government commits to broadcasting the GPS signal in space with a global average user range error (URE) of ≤7.8 m (25.6 ft.), with 95% probability. Actual performance exceeds the specification. On May 11, 2016, the global average URE was ≤0.715 m (2.3 ft.), 95% of the time
Which assumes clear skies and good line of sight... Neither condition exist inside your pocket or house.
Regardless, none of the technologies you listed are accurate enough for police to legally search a person or their home simply because some tech company says a device is located around some dot on a screen.
PS: Your warehouse tracking thing is interesting, although I think you'd of had an easier time tracking gyroscope/accelerometer senor data.
From your quote:
> Actual performance exceeds the specification. On May 11, 2016, the global average URE was ≤0.715 m (2.3 ft.), 95% of the time
Did you read nothing else? That is the best possible case, as measured by someone's particular device under ideal conditions - which simply do not exist for a cell phone or a device in a pocket, backpack, or house.
Civilian grade gps receivers often do not have large antenna, can track only a few active satellites at once (often only processing 3-4 satellites even if they are aware of 20 or more) and only receive a single frequency of signals instead of both available frequencies. You want your device to be thin, right?
All this means your stolen cell phone, in someone's pocket inside of a building is going to have horrible resolution, unless it augments it's position data with other sources such as realtime cell tower triangulation or is in a really dense, previously observed wifi area... which are things not available to these tracker devices.
This is true, but irrelevant to discussion of AirTags. AirTags give much finer grained location once you are close, as it uses the new iPhone's ultrawideband hardware to give you accurate bearing and distance to the tag, based on live information.
What police should do is keep a record of reports and their location and if too much shows up on one address, they investigate.
I have also seen reports of actual police knocking on people’s doors looking for things that show as on their house but we’re inaccurate.
>All these stalking counter-measures make it useless if your device is stolen rather than mislaid.
I think “useless” is a bit extreme. After three days, the thief may notice it when it starts beeping, but before then it will track just fine. Clearly there’s a trade off here, but I think having anti-stalking protections is pretty important for a product that millions of people are going to bug.
Are the advertising it as a way to find stolen items? I've only ever thought of products like this as a way to find something I've misplaced.
Given that they talked about people scanning found AirTags and that they have those fancy looking holders for them, I can't imagine they expect the tags to be hidden. And if that's the case then a thief is going to know to take the AirTag off right away.
VanMoof bikes adopted Find My technology explicitly for theft protection:
https://www.macrumors.com/2021/04/07/find-my-third-party-acc...
It's a tradeoff of course, but I think they struck a pretty good medium.
I like how much they thought about this issue.
Agreed. Previously I could not find lost or stolen items. Now I can find lost items. That’s a pure improvement in my eyes.
I would think they would both not advertise these for locating stolen items as well as warn people not to retrieve items they suspect have been stolen.
Retrieving stolen items can be very dangerous, and Apple would want no liability from that.
The anti-theft argument is a bit over stated.
1. The thief would probably still find the tracker.
2. You would probably still lose connection/track of the device.
3. Police would probably still be reluctant to travel to a private residence somewhere and try to find it.
4. Are you going to physically find and confront a criminal yourself?
Encrypt your digital devices, have backups and insure anything valuable. That is the better than using some tracker and spending your time trying to chase down criminals.
This goes against someone else not wanting to be tracked. (via someone gluing an airtag under their car, hiding one in their coat or whatever)
I'll definitely look if a easy to use bluetooth scanner/tracker is on fdroid and build one if not.
I also wonder how easy it is to generate random ids / ddos iphones in an area... since by default they listen and forward tags on users data connection.
edit: it beeps after 3 days so its nice enough to prevent a need for countermeasures
I would not trust police with location data or with getting my device back.
> give the police temporary access to track it, til they catch the thief and get my stuff back.
I don’t know where you live, but as somebody who previously lived in San Francisco, do you really think the police are going to actively pursue theft claims? It’s why car break-ins and petty theft are out of control in the bay area. The police don’t enforce laws, and certainly don’t actively track down stolen property.
As somebody who has lived in a lot of places that aren't San Francisco, I can tell you that San Francisco is an outlier WRT how much illegal activity "law enforcement" puts up with.
If you dig a little deeper, you'll find out the issue isn't police choosing not to enforce the laws in SF...
> If you are an iPhone user, for instance, and someone has placed an AirTag on your person, your phone will eventually alert you that an AirTag that isn’t yours has been found “moving with you.” Apple didn’t clarify how quickly or often this alert will arrive, but it did share that it will occur when you arrive at your home (the address stored in your Apple “Me” card) or at certain other locations that your phone has learned you frequent over time. Apple declined to disclose further specifics, citing the interest of public safety.
It’s not great that the alert won’t trigger until you get home. At that point, the stalker now knows where you live.
And you also know where theif theif lives.
For a very high value item, or for repeat offenses, it gives you a shot at getting your item back.
I also find it ironic, that from the quote you posted it also sounds like: "no one can stalk you but us".
s/us/your phone, that we control the software for/
I believe this learning is done on-device, not relayed to the cloud.
Depending on whether you take Apple's statements at face value about how much they care about your privacy, that's either a big difference or a meaningless difference.
I doubt that figuring the places that you frequent is computed on your phone. Most likely it sends your locations and then Apple runs hadoop jobs (or whatever it is used these days) to get these things.
I'm curious - does Tile have similar protections for their devices?
Because I found this article that says Tile trackers were used by bad actors
https://blog.malwarebytes.com/stalkerware/2019/07/helping-su...
So, if Airtags have stalking protections, why wouldn't I just use a Tile to track someone? They're sortof in the same ballpark of price and size.
Is it because Apple's scale is so wide that it makes their Airtags significantly better for stalking?
It's likely because Apple doesn't want to be in the news when something like this happens. If that had been Apple, that would have been a bunch of news articles rather than an obscure blog post.
The only reason a hypothetical stalker would choose Airtags is if they needed the larger network of devices (say, in a rural area where the victim likely has an Apple device but doesn't have a Tile nor neighbors with a Tile) and only needs their location for 3 hours (the time before it alerts the victim with the beeping).
“Instead, an AirTag that has not paired locally with its iPhone in three days will emit a sound.”
Ugh, so if I’m gone for longer than a weekend all my stuff at home is going to start beeping? I’m sure my roommate will love that.
I think it has to be three days _and_ the airtag has to be in motion
I guess an ill-intentioned stalker could cripple or neuter the speaker to avoid it doing any sounds.
People have posted the steps to do it. It’s not very hard. But if you are willing to strip the airtag to bits, it would be easier to plant a cheap android with a sim in someones car.
The point is that stalking has always been possible, it’s only important that apple doesn’t make it way too easy. Also when you find an airtag you can bring it to the police and they can get apple to give the owners details. Removing the speaker shows proof of intent.
Is this really how it works? This seems like it would be a huge problem.
It isn’t. The tags have to be moving around and away from their owner. And if they really do go off and annoy someone. It’s trivial to twist the backs off and the coin cell battery pops out.
Turn them off before traveling? Maybe Apple will prompt you?
I really hope these Airtags can reduce theft. Living in SF I had so many bikes, bags and motorcycles stolen. I'd love to have an Airtag in these things and show the police where my stolen item was. I wonder what law enforcement's response is going to be with the airtags? Will having an Airtag's location be enough for a warrent? Will people become vigilantes and try to get their stuff back without law enforcement?
> I wonder what law enforcement's response is going to be with the airtags?
"Sorry, we have too many other cases"
> Will having an Airtag's location be enough for a warrent?
Probably not (see answer #1)
> Will people become vigilantes and try to get their stuff back without law enforcement?
Some of them, surely. Most of them, no.
We already see this with things like bicycles that people are able to track down on Craigslist.
Startup of private airtag "recovery" services could be a thing.
Just wait till your bike is on the move, then get a group to recover it.
if they get 200 reports to the same location they might investigate.
This really feels like a losing battle - especially the part where you only get warned about being stalked by the AirTag if you have an iPhone. Having the technology to know where things are is great but we need to figure out how to account for bad actors somehow.
I don’t have answers but tech companies can’t create the tools that enable harm and then wash their hands of it. Good for Apple for doing _something_, points for effort.
> especially the part where you only get warned about being stalked by the AirTag if you have an iPhone
I believe that's not 100% true because of a final failsafe: the AirTag will start making noise if it's separated for too long (the definition of which could be an issue) from the owner's iPhone. That failsafe works if the person doesn't even have a smartphone.
I don't know if there _is_ a perfect solution for this, but they are indeed trying.
The failsafe (audible alarm) looks like it would take a couple minutes to disable physically: https://www.iphonehacks.com/2021/04/airtag-teardown-reveals-...
As a caveat to that, from the reviews it seems the sound is produced by vibrating the outer shell.
I wouldn’t be surprised if removing the outershell or altering it would stop it making much noise. We’re in a situation where there is intention to hide the device, so making some effort to make it silent should be taken into account.
I think the suggestion to cooperate with Google, like they did with COVID-19 tracking, is a great idea. I'm not sure they will go for it, though.
Url changed from https://9to5mac.com/2021/04/30/airtag-stalking-protections/, which points to this.
How exactly can stalking protection work with apples claim that the system doesn't provide any outsider or apple themselves the ability to track your airtag?
Surely stalking protection is doing exactly that? Couldn't I take a modded/hacked iPhone and track somebody elses tag all day long from near the edge of UWB range?
Apples original paper [1] said the signals emitted contained no unique/trackable identifier except to the key-holder who could link together all the rolling keys. Yet that can never offer this stalking protection feature.
Have Apple dropped the privacy protections they had in mind to enable this anti-stalker feature?
[1]: https://www.wired.com/story/apple-find-my-cryptography-bluet...
Nearly zero knowledge of the airtags protocol, but something like this would allow tracking a stalking tag without giving a trackable identifier.
• An AirTag which is seeing an owning device might only be reporting its presence to that device. We can ignore those. (I'm guessing AirTags listen in some limited way, this still works if they don't, it just is always in the separated state.)
• An AirTag which is separated from its owning device will be broadcasting a public key in an "I'm separated" message.
This public key is rotated periodically, but is used for a while. When my phone sees an "I'm separated" message it will send a hash of the public key and a location (encrypted with that key) to Apple central.
If I'm in motion, and continue to see the same public key crying out that it is separated, then it is traveling with me.
Of course everything is way more complicated…
• It probably doesn't just switch to a new public key and stop using the old one, that would let you correlate them, so there is probably some period of overlap to complicate that.
• How to decide when to tell the user about the tag is a complicated problem. If I'm on a train traveling with a tag I don't recognize, I probably don't care. If I change train cars (I'm still in motion, but 98% of the tags around me changed) I might care. If am walking after getting off the train and most of the other tags are gone, except this one, I might care. If it's still with me when I get home, I care.
I think an important part you might’ve missed is that the tag has to be away from its owner to be considered stalking you. If two strangers ride a train together, their air tags won’t be considered stalking each other.
That is the test in the first two bullet points. If the AirTags don’t listen then you’d have to add a “I am responsible for that AirTag” broadcast message from the responsible device. But I kind of suspect they do listen, if only for a short period after a beacon message. They need to get their public keys from somewhere.
> The random ID has a fixed suffix in the spec, so you can infer that it’s the same AirTag if you see the same suffix across multiple rotations.
So if that suffix is 8 or more bits, as soon as you have an airtag on your keys, wallet, and bag, you've become a nice easy to track person.
If the suffix is less than 8 bits, then the 200 airtags around me in a classroom setting will always be falsely setting off the alert - at least one of those 256 possible suffixes will remain always in use for hours with every rotation.
Privacy 100% broken. Great.
just spitballing here...
>So if that suffix is 8 or more bits, as soon as you have an airtag on your keys, wallet, and bag, you've become a nice easy to track person.
This can be easily solved by disabling the fixed bits if an "owned" device (eg. your iphone) is present. It prevents the anti-stalking feature from being used, but presumably if you can get a phone to follow the person you can probably get a GPS tracker to follow the person as well so that's not really a security risk.
>If the suffix is less than 8 bits, then the 200 airtags around me in a classroom setting will always be falsely setting off the alert - at least one of those 256 possible suffixes will remain always in use for hours with every rotation.
The phone can take the number of airtags that it sees into account. If it saw an airtag with the same suffix for the last 3 hours, but during that time it also saw 300 airtags, it's probably a false alarm. But if it only saw 10 airtags then that might warrant warning.
We can avoid speculation and just read the Specs here it seems : https://images.frandroid.com/wp-content/uploads/2020/06/Find...
Ok, so I made these things called OttoTags in 2017. Think of them as AirTags with QR code instead (I'm a solo dev)
From what I understand, when you find an airtag, you connect it to your device and it gives you the owners contact info. Anyone can get your phone number.
When you find an ottotag, you scan it and you contact the owner through ottomon. From here the GPS location is captured and communicated. All interactions are done through the service (ottomon.net). This layer act as a security layer where we filter out spam and possibly stalkers based on past behavior and other heuristics.
The two parties can communicate without revealing any information about themselves. So yeah, Apple could have made it much simpler, but they are my competitors now so let's keep this between us.
Edit: For more info -> https://www.ottomon.net/blog/privately-communicate-on-ottomo...
> Anyone can get your phone number.
If you put it in lost mode. Otherwise, it doesn't reveal the owner's phone number. It's assumed that clicking lost mode and putting a phone number means you expect to be called about that lost item.
I have tested them. If you nfc scan one not in lost mode, it opens a page explaining what airtags are and shows you it’s serial number. If you put it in lost mode, scanning shows the same page but with a phone number and a lost message.
Being in lost mode will also give the owner a notification when it is found.
The airtags are also account locked the whole time and must be manually removed by the owner before someone else can use them.
I must have lived a sheltered life because none of these concerns crossed my mind.
So much of that kind of stuff wouldn't be likely to cross my mind either. (What a nice privilege.) Shows how important it is to have a diverse set of listened-to voices when building tech products.
We were working on a directory of users and their contact methods for an application, when one of the engineers asked, “Has anybody considered how this might be misused by a vengeful ex-partner should an office romance break up badly?”
Nobody had asked themselves this question.
That's what we call privilege, and why it's actually great to build diverse teams so they can bring concerns that others wouldn't think of.
If you really want to track someone it's not that hard to just buy an iPhone and turn "find my iPhone" on and slip it somewhere. You could even hardwire it into a car so it remains charged.
Are you really comparing a device that costs hundreds of USD and has a form factor of... A phone, with a device that's supposed to be hooked up to a keychain and that costs 29 USD?
To be fair, it's easy to buy an old working iPhone on eBay for $30. And size is entirely irrelevant if you're putting it in someone's car.
So I think the parent makes a point worthy of discussion. If Apple is providing this protection for Airtags, why aren't they providing it for all devices?
Well, "to be fair", a phone's battery would die in a few days. Airtags are supposed to last for a year.
Why work so hard to pretend these things are the same and therefore deserve to have the same protections applied when it is obvious with a few moments of thought that they are completely different things?
Why are you working so hard to pretend they're completely different when it's obvious from a few moments of thought that tracking is tracking, full stop?
If someone wants to stalk you for a couple of days to find out where you live or work or whatever, what does the difference matter of "a few days" vs a "a year"?
I don't understand why you think this isn't something worth discussing. It's a safety issue worth asking about, no?
I find it truly bizarre that this is being downvoted. Especially on HN which is generally so extremely anti-tracking and pro-privacy.
Does that service not require an ongoing data connection with the device? (Cellular service or wifi)
The AirTags use a distributed bluetooth connection I think.
Here's a crazy hypothetical for some mulling...
Let's say an abuser does use this, and goes on to track someone and then kills them (or commits some other very serious crime). The cops get involved, they start looking into it and discover (through a lapse in other privacy elements of this technology) that a third-party's iPhone was the one that gave away the location.
What are the third parties' legal defenses from the law to avoid being labeled an accomplice here?
They don't need one. An accomplice is a person who knowingly, voluntarily, or intentionally gives assistance to another in (or in some cases fails to prevent another from) the commission of a crime.
The judge is going to be very annoyed at the incompetent prosecutor for wasting his time improperly trying to try anybody and anything connected to the actual actor as an accomplice.
Are these domestic abuse activists aware that GPS tracking devices already exist and have existed for a long time? See here for an example [0].
[0]: https://www.amazon.com/Real-time-Tracker-Worldwide-Coverage-...
Let’s say I make stoves, and I become aware that somebody could maliciously alter the stove to turn it into an IED. Realizing this, I make some changes to make the stove harder to turn into an IED.
Is the argument really, “Are you aware that malicious actors can just go out and buy explosives, so there’s no point in making it difficult to turn a stove into an explosive device?”
Or maybe I make a device for the home. I work hard to secure it against malicious actors. Is anybody going to say, “Don’t bother, most people have insecure light bulbs in their home, so there’s no point securing this WiFi speaker you’re selling?”
I. Think. Not.
It’s always a good idea to reduce the threat area. Security for most people is not a simple binary “secure or not.”
---
Also, what’s with the phrase “domestic abuse activists?” Is that supposed to be some kind of slur? I’m baffled, it adds nothing to your argument, and in fact it hints at some kind of cultural bias on your part, which is irrelevant to the soundness of your reasoning.
All in all, my advice is to drop language like this unless you are specifically trying to make an argument about social activism. Sprinkling arguments with emotional devices like this subtracts from your message, it doesn’t add to it.
Just because similar devices already exist doesn't mean there isn't also a potential for harm with this device, particularly since these will be sold at every Apple Store and have much more exposure.
A) Apple doesn't sell those and wouldn't sell those
B) The airtags are more capable than those, more affordable, and easier to use
C) If you own an airtag, this will be available on a moment's notice. Is your wife going to get lunch with a friend? take it off your keyring and throw it in the glovebox. Boom, now you've got realtime tracking in about 5 seconds.
This obviously won't solve the problem of domestic abuse that existed before airtags were introduced, but it will go a long way towards not making it worse.
Yes, people in that field are painfully aware.
Sure, but it makes sense to raise concerns about an Apple product because your organization would get more media coverage.
This is basically "No wireless. Less space than a Nomad. Lame." but make it pro-Apple.
Murderers could also kill someone by strangling them any old time, but guns make it a lot easier. Sometimes simply improving the user experience of a heinous act is enough.
Personally I am old fashioned and blame the murderer. I must not be involved with communists or ambulance chasers enough to have been imbued with values like "The person with money is always the most at fault."
It seems that people already in that situation are already very vulnerable and AirTags don’t really add that much new vulnerability.
If someone has physical access to you and your devices, it will be very hard for you you be sure they are not tracking you. With a lot of Android devices, you can root them and get access to a ton of location data.
Many apps also store your location data. You can also side load apps that would do this even more so.
Buying an AirTag is more accessible to vastly more people than rooting phones and side-loading apps.
> It seems that people already in that situation are already very vulnerable and AirTags don’t really add that much new vulnerability.
It doesn't add more "functionality" in the "tracking" use case, but it does make it more widely available to everyone and possibly easier to use than custom tracking solutions built with ESP32 chips.
I'm not saying to block the sale of AirTags, but they should really think through and make it impossible for misuse, otherwise reconsider if the value provided by this product is actually higher than the potential for misuse.
network effects have nonlinear impact in the size of the network. there are other products which do the same thing. none of them has that scale.
This is such an amazingly terrible invention I have no clue where to begin. How many people will be sexually assaulted by predators planting these devices in the bags of unsuspecting folks at bars and tracking their every location? How many domestic abuse survivors will be terrorized by their abusers planting the tag on some possession then having access to their every location? Hell, how many folks will be burglarized by criminals who plant the tag on their car and can see when someone is away for on a distant vacation.
Some technology very much should not exist. “Tags that use an unsuspecting victim’s own phone to report their location back to a would-be criminal without their consent” is definitely on the list.
That being said, there are very easy ways to make this unusable for these cases, and I have no clue why they haven’t been implanted. Off the top of my head: a notification any time a tag has been away from it’s owners device for more than X time and has been around your device for at least Y time since, saying “it looks like XXX’s airtag has been lost and is with you, click here to message them”. Yes, this would sacrifice the privacy of the airtag owner, but it’s an opt-in, they only suffer if they buy an airtag. Compared to as-is a completely random unsuspecting person with no involvement in the ecosystem has both their privacy and security compromised.
> Off the top of my head: a notification any time a tag has been away from it’s owners device for more than X time and has been around your device for at least Y time
That's exactly what Apple has done. This isn't even new information. It was part of the AirTags announcement on the 20th of April.
"iOS devices can also detect an AirTag that isn’t with its owner, and notify the user if an unknown AirTag is seen to be traveling with them from place to place over time."
https://www.apple.com/newsroom/2021/04/apple-introduces-airt...
So I can track every person that doesn't have an iPhone?
> an AirTag separated from its owner for an extended period of time will play a sound when moved to draw attention to it.
How long is "extended"? It probably won't take more then 60-90 minutes to track someone.
This also sounds really annoying. Anytime I leave a tag somewhere I have to somehow be able to tell it "don't buzz" and if I forget it annoys all the people near where I left it. Leaving things at my parent's when going out while visiting, leaving things in a hotel room, leaving things in the gym locker, etc...
> If a user detects an unknown AirTag, they can tap it with their iPhone or NFC-capable device and instructions will guide them to disable the unknown AirTag.
So if don't own an NFC capable device? How many people would even know to "NFC" the tag or how?
3 days : https://images.frandroid.com/wp-content/uploads/2020/06/Find... but you can also follow someone around for 60-90 minutes as well.
I don’t viable these are viable for tracking since these are linked to your iCloud. I’m willing to bet that with a. Warrant Law enforcement can ask Apple to identify a specific airtag.
Knowing whose airtag it is isn’t all that helpful in domestic abuse cases. My partner is a domestic abuse survivor, if there were an airtag found on her items we’d know exactly whose it is, but we’d still be scared for both of our lives, probably need to permanently vacate our living area, and the police wouldn’t be all too helpful. (Restraining order already in place, not much help when the opposing party is insane)
“Don’t want to be assaulted/stalked/robbed via our $29 device? Buy our $1,000 device!”
> and I have no clue why they haven’t been implanted. Off the top of my head: a notification any time a tag has been away from it’s owners device for more than X time and has been around your device for at least Y time since, saying “it looks like XXX’s airtag has been lost and is with you, click here to message them”
Did you read past the headline? Apple is doing exactly this.
Did you? Only if they have an iPhone. “Don’t want to be assaulted/stalked/robbed via our $29 device? Buy our $1,000 device!”