iOS 4.3.3 Coming Soon to Address Location Tracking Bugs

[SkyStudios]

I am glad they are addressing it as well; however...Apple's response to this issue has been somewhat confusing (and begs the question as to why they needed that much data and why it was not encrypted properly). Ill be first to say that it most likely is and was just a dumb move on Apple's behalf...



Were taking a beating with a smile, then remarking on how wonderful and magical it was.

http://www.nbcbayarea.com/blogs/press-here/Apple-Hires-NSA-Security-Expert-Ahead-of-iPhone-5-Development-114492024.html

Apple Hires NSA Security Expert Ahead of iPhone 5 Development, Apple has reportedly gotten serious about its secrecy again and hired former U.S. Naval cryptology officer and NSA global network vulnerability analyst David Rice to work as the company's director of security.

I read somewhere that congress wants to know why NSA has a security expert over at Apple, NSA specifically does not spy on US citizens but how can this be now.

The Agency usually has a hit list of people they need to TRACK DOWN, people who are a threat to the nations security.

So Apple knew something about this file according to experts.

 

[dejo]

I read somewhere that congress wants to know why NSA has a security expert over at Apple...

NSA does not have a security expert at Apple. Apple has a security expert who used to be with the NSA. Big difference.

 

[toddybody]

NSA does not have a security expert at Apple. Apple has a security expert who used to be with the NSA. Big difference.

To your knowledge, they dont.

 

[err404]

Isn't it interesting how a seemingly intentional act (active user tracking) changes to a "bug" once it's existence is published in the news media?

Not again... The database in question is NOT used by Apple to actively track users. It's a local cache on your phone, sent to you from Apple. This database serves a legitimate purpose on your phone to improve the performance of location services.
The issue is that this DB can be used by others (not Apple) to gain in-site into your relative location over time. Technically I wouldn't even call this a 'bug' since it's working as designed. However it is a serious oversight on Apples part.

FTR - Apple does collect location data from your phone (assuming you opted-in). This tracking is done via entirely different process than is being discussed.

 

[samcraig]

Not again... The database in question is NOT used by Apple to actively track users. It's a local cache on your phone, sent to you from Apple. This database serves a legitimate purpose on your phone to improve the performance of location services.
The issue is that this DB can be used by others (not Apple) to gain in-site into your relative location over time. Technically I wouldn't even call this a 'bug' since it's working as designed. However it is a serious oversight on Apples part.

FTR - Apple does collect location data from your phone (assuming you opted-in). This tracking is done via entirely different process than is being discussed.

That's only one aspect of the situation.

The kill switch was defective. The new update fixes that so that it works as per the EULA and as per advertised (and common sense).

 

[AlphaBob]

All that 'forensic' work is now FUBAR

I wonder how many people have been targeted/prosecuted based on the false assumption that the data logged was a record of the user's location, and not simply a list of WiFi and Cell tower devices obtained over a series of months.

I'd hate to think someone is sitting in jail as a result of this pseudo science being accepted as 'fact' by the courts.

 

[Stanjara]

Hmm

If this is going to improve ios and iphone performance than fine...i will update....if not, like if the gps and maps are going to be slower then no thanks...

 

[pmz]

I find it hilarious that Steve Jobs claimed Apple was not tracking users, but now all of a sudden we find Location tracking being completely removed from this version of iOS, that is honestly something that annoyes me..

It should annoy you, and everyone, because its a ridiculous shell game. Smart people know this, but smart people aren't the majority on blogs.

 

[mrelwood]

In case you didn't catch it, 4.2.1 was the last firmware ever for the iPhone 3G. The hardware simply can't handle more features.

Yeah, bug fixes are a hell of a strain on the CPU.

 

[SkyStudios]

Isn't it interesting how a seemingly intentional act (active user tracking) changes to a "bug" once it's existence is published in the news media?

i love your post, we are in trouble if this was not intentional, security issues for sure haha

http://tech.fortune.cnn.com/2010/10/18/what-steve-jobs-said-about-google/

lol

 

[iMouse]

Screenshot fail build number in Quicklook titlebar.

haha, that was the first thing I noticed too. Way to protect that build number!

 

[SkyStudios]

Not again... The database in question is NOT used by Apple to actively track users. It's a local cache on your phone, sent to you from Apple. This database serves a legitimate purpose on your phone to improve the performance of location services.
The issue is that this DB can be used by others (not Apple) to gain in-site into your relative location over time. Technically I wouldn't even call this a 'bug' since it's working as designed. However it is a serious oversight on Apples part.

FTR - Apple does collect location data from your phone (assuming you opted-in). This tracking is done via entirely different process than is being discussed.

active tracking means real time reporting, the data base is just to record it, they can say they erase the data base on your device but that does not mean they did not record it on their side, its like firefox says in their agreement, regardless of private browsing, the ISP can still record the traffic and know what websites and all you been looking at, search engines can even help them find words that match their desired character, whats strange to me is what this article says,

Apple's privacy policy strictly forbids developers, apps, and ad networks from collecting personally identifiable information without specifically requesting permission from the user. But according to research by the Wall Street Journal, data such as location, age, gender, and even sexual orientation or political views are collected and sent back to Apple, developers, or ad networks themselves. Apple has claimed that it effectively anonymizes data that it collects, and does not share any of that data with advertisers. Most ad networks also told WSJ that they also take steps to protect individual user privacy.

hope they get the bugs out

 

[nlr]

They don't need to track you any more, they got Osama Bin Laden already.

 

[err404]

The kill switch was defective. The new update fixes that so that it works as per the EULA and as per advertised (and common sense).

Common sense to a programmer is not all ways the same same a common sense to a user.
The code is working as intented, but the design is flawed. A switch that prevents applications from calling a service is functionally the same as disabling the service; except in this case. In this case they intentional left the service running, without considering the consequences of the cache continuing to update.

 

[dethmaShine]

They don't need to track you any more, they got Osama Bin Laden already.

Image

lolol

That's the best post I have seen all day.

 

[8CoreWhore]

is there any way we can view our own tracked info. it would be cool to see where i have been.

There are GPS apps that allow you to leave "breadcrumbs"... a trail of your travels with data like avg speed, distance, etc.

 

[GadgetGav]

If you cant show the date your full of BS, then again your also free to be naive and excused if crimes where committed by apple

If you can't learn the difference between "your" and "you're", then your [sic] going to have a hard time convincing people of your argument.

 

[Glideslope]

I should hope that this update will allay any of the concerns and fears that some panic-stricken people have had lately.

Old news. Already moved to the White iPhone's Thickness.

 

[8CoreWhore]

Not that I really care about the tracking services...but I wonder if Apple will skip the 3G again with this update...

If not, encrypt your backups in iTunes on your computer (that's where the greatest threat lies).

 

[GadgetGav]

Running a sweatshop company offshore to protect themselves from any human rights violations

Name one manufacturer of consumer electronics who does ALL of their manufacturing in the continental USA.

 

[GadgetGav]

Isn't it interesting how a seemingly intentional act (active user tracking) changes to a "bug" once it's existence is published in the news media?

How do you know it's "intentional" and not a "bug"..??

 

[8CoreWhore]

I find it amusing that the G1 can run Android Gingerbread fairly well, but Apple makes it impossible to upgrade the original iPhone to the latest and greatest iOS.

The G1 came out more than a year after the iPhone, and had a dual-core and more RAM.

And, upgrading it to 3.0 Gingerbread is unofficial --- for a reason.

So, um, big deal.

Really, what's the point you're making? Everyone should therefore throw their iPhones in the garbage and buy an HTC?

 

[kgtenacious]

I kinda liked the fact i could look at where I've been with my phone.

We kind of liked the fact that we could look at where you've been with your iPhone, too.

Signed,
Mr. Stalker, Mr. Hacker and Mr. Big Brother

 

[samcraig]

Common sense to a programmer is not all ways the same same a common sense to a user.
The code is working as intented, but the design is flawed. A switch that prevents applications from calling a service is functionally the same as disabling the service; except in this case. In this case they intentional left the service running, without considering the consequences of the cache continuing to update.

The common sense I referred to is that an on/off switch doesn't need to be explained to a user. Off = Off. On = On.

The code is NOT working as intended. Apple even said so. Turning it off wasn't supposed to continue the recording of locations.

That's like the old joke that a broken clock is still right twice a day.

Look - they're fixing it. They know it was an issue (now for certain). That's really what matters here.

 

[toddybody]

Everyone should therefore throw their iPhones in the garbage and buy an HTC?

dont be irrational, step away from the trashcan!