Apple's 'Find My' Feature Uses Some Very Clever Cryptography | WIRED


64 bookmarks. First posted by edan 13 days ago.


"Apple broke down that privacy element, explaining how its "encrypted and anonymous" system avoids leaking your location data willy nilly, even as your devices broadcast a Bluetooth signal explicitly designed to let you track your device. The solution to that paradox, it turns out, is a trick that requires you to own at least two Apple devices. Each one emits a constantly changing key that nearby Apple devices use to encrypt and upload your geolocation data, such that only the other Apple device you own possesses the key to decrypt those locations."
apple  security  privacy  cryptography  wired 
7 days ago by colm.mcmullan
Apple says an elaborate rotating key scheme will soon let you track down your stolen laptop, but not let anyone track you. Not even Apple.
privacy  apple 
7 days ago by amitp
The Clever Cryptography Behind Apple's 'Find My' Feature via Instapaper https://www.wired.com/story/apple-find-my-cryptography-bluetooth/
IFTTT  Instapaper 
8 days ago by zhangtai
Apple says an elaborate rotating key scheme will soon let you track down your stolen laptop, but not let anyone track you. Not even Apple.
privacy 
8 days ago by jellis
Apple says an elaborate rotating key scheme will soon let you track down your stolen laptop, but not let anyone track you. Not even Apple.
apple  findmy  lost  device  feature  innerworking 
9 days ago by gilberto5757
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
9 days ago by hybridsolidr
Say someone steals your MacBook. Even if the thief carries it around closed and disconnected from the internet, your laptop will emit its rotating public key via Bluetooth. A nearby stranger's iPhone, with no interaction from its owner, will pick up the signal, check its own location, and encrypt that location data using the public key it picked up from the laptop. The public key doesn't contain any identifying information, and since it frequently rotates, the stranger's iPhone can't link the laptop to its prior locations either.
The stranger's iPhone then uploads two things to Apple's server: The encrypted location, and a hash of the laptop's public key, which will serve as an identifier. Since Apple doesn't have the private key, it can't decrypt the location.
When you want to find your stolen laptop, you turn to your second Apple device—let's say an iPad—which contains both the same private key as the laptop and has generated the same series of rotating public keys. When you tap a button to find your laptop, the iPad uploads the same hash of the public key to Apple as an identifier, so that Apple can search through its millions upon millions of stored encrypted locations, and find the matching hash. One complicating factor is that iPad's hash of the public key won't be the same as the one from your stolen laptop, since the public key has likely rotated many times since the stranger's iPhone picked it up. Apple didn't quite explain how this works. But Johns Hopkins' Green points out that the iPad could upload a series of hashes of all its previous public keys, so that Apple could sort through them to pull out the previous location where the laptop was spotted.
privacy  security  networking  ios 
10 days ago by janpeuker
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
10 days ago by dannystewart
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
10 days ago by dainiusblynas
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
11 days ago by theory
via Feedbin Starred Entries for joewiz@gmail.com
IFTTT  Feedbin  Starred  Entries  for  joewiz@gmail.com 
11 days ago by joewiz
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
11 days ago by joneccles
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
apple  privacy  security  location  cryptography  from instapaper
11 days ago by leeomara
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on Monday, it sounded—to the sufficiently paranoid, at least—like both a physical security innovation and a potential privacy disaster.
article 
11 days ago by mud
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
11 days ago by dabigc
Apple's 'Find My' Feature Uses Some Very Clever Cryptography
privacy  from twitter
11 days ago by amspatel
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
11 days ago by stoleaglance
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
11 days ago by nimprojects
from Daring Fireball

Andy Greenberg, writing for Wired:

When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company’s Worldwide Developer Conference keynote on Monday, it sounded — to the sufficiently paranoid, at least — like both a physical security innovation and a potential privacy disaster. But while security experts immediately wondered whether Find My would also offer a new opportunity to track unwitting users, Apple says it built the feature on a unique encryption system carefully designed to prevent exactly that sort of tracking — even by Apple itself.

Just a brilliant feature.

 ★ 
ifttt  daringfireball 
11 days ago by josephschmitt
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on…
from instapaper
12 days ago by kerim
This is very very impressive, even if it does mean the things are constantly emitting.
crypto  security  privacy  apple  cool 
12 days ago by yorksranter
Apple's doing interesting work to protect privacy while giving their customers neat features like find-my-widget:
from twitter_favs
12 days ago by bob
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
12 days ago by skinnyj
WHEN APPLE EXECUTIVE Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote on Monday, it sounded—to the sufficiently paranoid, at least—like both a physical security innovation and a potential privacy disaster. But while security experts immediately wondered whether Find My would also offer a new opportunity to track unwitting users, Apple says it built the feature on a unique encryption system carefully designed to prevent exactly that sort of tracking—even by Apple itself.
In upcoming versions of iOS and macOS, the new Find My feature will broadcast Bluetooth signals from Apple devices even when they're offline, allowing nearby Apple devices to relay their location to the cloud. That should help you locate your stolen laptop even when it's sleeping in a thief's bag. And it turns out that Apple's elaborate encryption scheme is also designed not only to prevent interlopers from identifying or tracking an iDevice from its Bluetooth signal, but also to keep Apple itself from learning device locations, even as it allows you to pinpoint yours.
"Now what’s amazing is that this whole interaction is end-to-end encrypted and anonymous," Federighi said at the WWDC keynote. "It uses just tiny bits of data that piggyback on existing network traffic so there’s no need to worry about your battery life, your data usage, or your privacy."
apple  encryption  find_my_device  privacy  security  technology 
12 days ago by rgl7194
- The clever cryptography behind Apple’s “Find My” feature
from twitter
13 days ago by drac
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
13 days ago by toph
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
13 days ago by teisam
via Starred items from BazQux Reader http://bit.ly/2UjATNM and IFTTT
Starred  items  from  BazQux  Reader 
13 days ago by stinkingpig
via Feedbin Starred Entries for steven.lubitz@gmail.com
Feedbin 
13 days ago by WickedGood
When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company's Worldwide Developer Conference keynote Monday…
from instapaper
13 days ago by breau
Apple's 'Find My' Feature Uses Some Clever Cryptography | aapl
from twitter
13 days ago by edelagrave
Apple says an elaborate rotating key scheme will soon let you track down your stolen laptop, but not let anyone track you. Not even Apple.
newswire  apple  privacy 
13 days ago by kejadlen
Andy Greenberg, writing for Wired:

When Apple executive Craig Federighi described a new location-tracking feature for Apple devices at the company’s Worldwide Developer Conference keynote on Monday, it sounded — to the sufficiently paranoid, at least — like both a physical security innovation and a potential privacy disaster. But while security experts immediately wondered whether Find My would also offer a new opportunity to track unwitting users, Apple says it built the feature on a unique encryption system carefully designed to prevent exactly that sort of tracking — even by Apple itself.

Just a brilliant feature.

 ★ 
via:daringfireball  from instapaper
13 days ago by rufous
The clever cryptography behind Apple’s “Find My” feature
loopinsight  spike 
13 days ago by edan