Sniffing tool for capturing WiFi location data disclosed by iOS devices

https://github.com/hubert3/iSniff-GPS

by casca • 13 years ago

94 21 13 years ago

github.com

tagabek2• 13 years ago

I see why this is interesting, but how or when would it be practical or useful?

cellis• 13 years ago

I think the point is that iOS devices inadvertently leak the privacy of the user. This hack exploits that leak.

deepinsand2• 13 years ago

You could install this in a retail store to get competitive intel on where your customers have previously browsed or been

tagabek2• 13 years ago

Something like this seems... illegal. Isn't this type of data farming only allowed after explicit permission of the user?

kevin_p• 13 years ago

Perhaps not for honest folk like yourself, but there are obvious ways that it could be used for evil - set up an access point with the same name and MAC address to sniff traffic and/or perform all sorts of man-in-the-middle attacks.

nikcub• 13 years ago

check the SSID they are looking for, setup the network they want, establish a connection and then MITM their connection.

This is what products like the Pineapple are setup to exploit and automate. It really is a lot of fun trying it out and pranking friends:

http://hakshop.myshopify.com/products/wifi-pineapple

toyg• 13 years ago

" Presented at Blackhat USA July 2012, code published on Github 2012-08-31."

Old news.

blocking_io• 13 years ago

Headline is hyperbole. According to the linked page, iOS devices leak some network information and it may be possible to analyse this to establish where the device's owner lives.

DenisM• 13 years ago

How is this a hyperbole? The device broadcasts MAC address of previously connected, which is easily converted into geographical coordinates.

binderbizingdos• 13 years ago

as far as I remember this is a feature, the wifi connection stack on osx is trying to connect to recent wifis first with the mac address because that is much faster than trying to get a new lease and so on

shadesandcolour• 13 years ago

I'm curious to know if this is an iOS only issue. It seems to me that any device that remembers past SSIDs would look for them actively. That way the user gets on their preferred network whenever it's available. Then anyone with access to a database with GPS coordinates for base stations would be able to achieve the same effect, no?

aneth4• 13 years ago

I didn't realize looking for SSIDs was an active process. Why wouldn't it just listen for broadcast SSIDs? Is this only for hidden ones?

Regardless, headline should not single out iOS unless this is iOS specific - maybe it is? Readme says: "iPhones, iPads and other wireless devices"

jamesbrennan• 13 years ago

It isn't only iOS devices that do this. All operating systems probe for SSIDs that they have been previously associated with, thats what makes devies like the WiFi Pineapple possible [0].

[0] http://hakshop.myshopify.com/products/wifi-pineapple

newman314• 13 years ago

However, Apple devices do do "optimization" to get on the network quickly. If you previously associated with a SSID, it'll get reconnected much faster.

See http://cafbit.com/entry/rapid_dhcp_or_how_do

D9u• 13 years ago

Mobile phones are rife with security concerns, and this article is merely another in a long list.

This is why I choose to purchase pre-paid (burner) type devices, which have the added bonus of not locking me into any restrictive "contracts."

leephillips• 13 years ago

Whether or not your phone is disposable seems not to be relevant to this attack, such as it is. Your device will still leak information suggesting where you have recently been.

jetsnoc• 13 years ago

I had to install aircrack-ng. Upon doing so and watching for about 30 minutes, I saw my MacBook Pro and iPhone 5 both leak an uncomfortable amount of probes for SSID's my devices have attached to. The thing is, quite a few SSID names are unique enough it nailed the specific devices I had attached to and through Apple's geo-coordinate database, their coordinates.

If the author is reading I just sent a pull request for a defect in the 'SSID Search' page. Thanks.

Sniffing tool for capturing WiFi location data disclosed by iOS devices

Related Stories