I'm routing my cellphone through VoIP in my house to a landline phone... I will be not using a cellphone in the near future. all calls to the house, if I'm not home... too bad, leave a message.
oh you need me to have a phone for mfa? too bad... I won't use your service or I'm going into the building. it's 1998 lifestyle for me now.
I actually realized this seconds before your notification came through- I was thinking mono factor authentication as another joke option for a second and then it clicked.
A surveillance company plans to add sensors to automatic license plate readers (ALPRs) that would mean the devices, as well as capture the license plate of passing vehicles, would also sweep up unique identifiers of mobile phones, wearables, and other Bluetooth-enabled devices in those cars, potentially letting law enforcement identify specific drivers or passengers.
This sucks and shouldn’t be happening, but is also relatively simple to counteract if you turn your Bluetooth off. Of course most people won’t, which is why it sucks and shouldn’t be happening.
Also, most Bluetooth devices today - the ones they seem to be tracking, anyway - are using Resolvable Private Addresses, meaning the devices exchange not the MAC address directly, but a crypto key that can be used, in correlation with the current time, to determine a pseudo-randomly generated address and establish connection...
I've implemented Bluetooth tracking in my home (using ESPHome and in-house triangulation - I have appropriate nodes all over my home for this), and needed to extract the IRK for my iPhone and Apple Watch (but same goes for Android devices).
They may be able to track older Bluetooth devices (headphones and such), and older built-in Bluetooth systems in cars (not sure if they can be disabled tbf), but modern phones? Not unless they illegally tap into the phone somehow and extract the key for predicting the addresses.
I wonder if it gets to be like browser fingerprinting where turning your Bluetooth off itself becomes a data point in combination with your make, model, dents and dings on your car, etc.
that's only useful if they are in pursuit tho, because the device beeing in the car (or near the sensor) is not proof of the owner being actually there, especially if it's devices that don't even have lock functions, like airpods.
Sadly not a surprise, this is why I switched back to wired headphones some time ago and like how Graphene turns Bluetooth off automatically if not in use.
24 Comments
PiraHxCx@lemmy.dbzer0.com · 24 pts · 99d
leaving the house with a dumbphone on a faraday bag and that's it
empireOfLove2@lemmy.dbzer0.com · 23 pts · 99d
Drive a car made later than 2007? Too bad they're profiling the car electronics already.
Bluegrass_Addict@lemmy.ca · 9 pts · 99d
I'm routing my cellphone through VoIP in my house to a landline phone... I will be not using a cellphone in the near future. all calls to the house, if I'm not home... too bad, leave a message.
oh you need me to have a phone for mfa? too bad... I won't use your service or I'm going into the building. it's 1998 lifestyle for me now.
idiomaddict@lemmy.world · 2 pts · 99d
For a master’s in fine art. Or for the metropolitan fransit authority.
ThunderQueen@lemmy.world · 3 pts · 99d
idiomaddict@lemmy.world · 3 pts · 99d
I actually realized this seconds before your notification came through- I was thinking mono factor authentication as another joke option for a second and then it clicked.
ironycanal@lemmy.dbzer0.com · 2 pts · 99d
That's less creative than you could have been.
ThunderQueen@lemmy.world · 1 pts · 98d
ironycanal@lemmy.dbzer0.com · 1 pts · 98d
Just getting content out fast? I'm not sure I approve. There's a lot to be said for timelessness.
ThunderQueen@lemmy.world · 1 pts · 98d
Retro_unlimited@lemmy.world · 5 pts · 98d
Some even check the wireless TPMS tire sensors…
Catoblepas@lemmy.blahaj.zone · 23 pts · 99d
This sucks and shouldn’t be happening, but is also relatively simple to counteract if you turn your Bluetooth off. Of course most people won’t, which is why it sucks and shouldn’t be happening.
fonix232@fedia.io · 17 pts · 99d
Also, most Bluetooth devices today - the ones they seem to be tracking, anyway - are using Resolvable Private Addresses, meaning the devices exchange not the MAC address directly, but a crypto key that can be used, in correlation with the current time, to determine a pseudo-randomly generated address and establish connection...
I've implemented Bluetooth tracking in my home (using ESPHome and in-house triangulation - I have appropriate nodes all over my home for this), and needed to extract the IRK for my iPhone and Apple Watch (but same goes for Android devices).
They may be able to track older Bluetooth devices (headphones and such), and older built-in Bluetooth systems in cars (not sure if they can be disabled tbf), but modern phones? Not unless they illegally tap into the phone somehow and extract the key for predicting the addresses.
fluffykittycat@slrpnk.net · 6 pts · 99d
What if you're using it?
ironycanal@lemmy.dbzer0.com · 4 pts · 99d
Dont.
yellerbadger@piefed.social · 3 pts · 98d
I wonder if it gets to be like browser fingerprinting where turning your Bluetooth off itself becomes a data point in combination with your make, model, dents and dings on your car, etc.
BeMoreCareful@lemmy.world · 1 pts · 98d
It'll probably suck and use AI to guess at mac addresses and just end up costing a bunch.
Turret3857@infosec.pub · 7 pts · 99d
😐
lurch@sh.itjust.works · 5 pts · 98d
that's only useful if they are in pursuit tho, because the device beeing in the car (or near the sensor) is not proof of the owner being actually there, especially if it's devices that don't even have lock functions, like airpods.
noxypaws@pawb.social · 7 pts · 98d
as if cops give a shit about such a fundamental aspect of what their jobs are purported to be
db_null@lemmy.dbzer0.com · 2 pts · 98d
It's enough, especially if you collect several data points over time
lurch@sh.itjust.works · 1 pts · 98d
for what? for in court? i doubt it
db_null@lemmy.dbzer0.com · 4 pts · 98d
Sadly not a surprise, this is why I switched back to wired headphones some time ago and like how Graphene turns Bluetooth off automatically if not in use.
noxypaws@pawb.social · 4 pts · 98d
they're fucking weaponizing TMPS sensors now??
muusemuuse@sh.itjust.works · 2 pts · 98d
Called it! Totally called this!
minorkeys@sh.itjust.works · 1 pts · 98d
Always remember. If they can, they will. We are powerless animals to people with power.