Interesting, wondering why Apple doesn't restrict the queries to its server using a certificate that would be pinned on the devices, etc, so at least you would need a legit iPhone/Mac to be able to do a query?
This is quite common, you add the private key to some secure hardware module, so that only that device can sign using the certificate, and then use TLS to connect
I get that this is how iMessage works, as I understand it. I am wondering what tradeoffs make Apple decide to use the Secure Enclave versus more mundane certificate infrastructure and how they would make it hard for us to get at this with a debugger if they chose that route.
I feel like that's not a true cold GPS signal! Though I'm not arguing the parents scenario is realistic either. I got a GPS module for a drone I was building and it took 20 minutes to get a proper GPS lock from cold!!! I was sitting there watching betaflight doing it's thing wondering why the heck it takes so long when there's so many satellites in view!
It doesn't need to be a cold GPS signal, it only needs to be one that doesn't track you. Your drone doesn't have access to the internet to do the almanac and ephemeris download, that's the difference.
Aiding the fix by obtaining data from a faster unidirectional source (instead of satellite to device, it's just internet to device) doesn't reveal anything private, unlike mass-capture of WiFi (B)SSIDs.
Also, I would look into the quality of the GPS radio and antenna you are using - $95 u-blox modules will get an RTK-quality fix without outside assistance in minutes.
20minutes just means a shitty module or lots of ~1.3ghz noise (e.g. from dji o3/o4 or gopro cpu), although bad input filtering and gps located near an antenna could saturate the amplifier even with antenna on a different frequency. 1min is typical for cold fixes but you can make it faster by uploading ephemeris/cache using AssistNow (valid for about a month).
The same physical location showing a different SSID every week but the surrounding ones not changing would be deanonymizing you much more aggressively.
People mostly don't change SSIDs or even move networking hardware - e.g. AirBnBs.
Edit: and also are you still carrying a smart phone while doing this? The device which has GPS and a cloud internet connection?
For a while they had a paid program, I had a Windows Mobile app I could run with an external GPS dongle that would record wifi APs and location, upload to skyhook, who would occasionally cut me a check for my trouble. I made tens of dollars!
Worth noting that the coordinates for cell towers returned by the WLOC API are coarse enough to be just about useless for locating towers. For APs it’s much better but still not great.
> The owner of a Wi-Fi access point can opt it out of Apple's Location Services by changing the access point's SSID (name) to end with "_nomap." For example, "Access_Point" would be changed to "Access_Point_nomap."
I had an an interference issue with a logitech mouse on my desk so I asked Pi to take a look. Next thing I knew I'm in the macOS sdk measuring all the wireless devices at my desk. That was the coolest experience to date. I could see everything in our house in RF.
29 comments
[ 4.3 ms ] story [ 38.7 ms ] threadAiding the fix by obtaining data from a faster unidirectional source (instead of satellite to device, it's just internet to device) doesn't reveal anything private, unlike mass-capture of WiFi (B)SSIDs.
Also, I would look into the quality of the GPS radio and antenna you are using - $95 u-blox modules will get an RTK-quality fix without outside assistance in minutes.
People mostly don't change SSIDs or even move networking hardware - e.g. AirBnBs.
Edit: and also are you still carrying a smart phone while doing this? The device which has GPS and a cloud internet connection?
For a while they had a paid program, I had a Windows Mobile app I could run with an external GPS dongle that would record wifi APs and location, upload to skyhook, who would occasionally cut me a check for my trouble. I made tens of dollars!
https://www.nytimes.com/2009/06/01/technology/start-ups/01lo...
Which will likely get cut off at some point.
https://support.apple.com/en-us/102515
> The owner of a Wi-Fi access point can opt it out of Apple's Location Services by changing the access point's SSID (name) to end with "_nomap." For example, "Access_Point" would be changed to "Access_Point_nomap."