• 0 Posts
  • 3 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle
  • This is separate from A-GPS. Google seems to be using WiFi rather than Bluetooth, but the broader point remains the same. No one is stopping any vendor from crowdsourcing the location of every BT device… which is what Apple has done, for Airtags which don’t have the battery capacity to run a GPS chip.

    Sure without GPS it wouldn’t be very effective to rely on only nearby devices to guess the current location. But an attacker only has to get lucky once to get your home address. So the only safe approach is to hide nearby devices/networks from unauthorized apps.


  • Every Bluetooth device has a unique identifier. Any phone that has seen that Bluetooth device in the past could have told google/apple/whoever “hey BTW this device is at those coordinates”.

    Google already uses this with WiFi to help “bootstrap” GPS localization. It is much faster to get a GPS fix if you already know roughly where you are (a few seconds vs a couple minutes), so they use nearby WiFi/Bluetooth devices to determine that. Remember 10-15 years ago when getting a GPS fix took forever? GPS didn’t change, this did.
    Apple went further and does this with Airtags now. Every Bluetooth device that ever went near an iPhone is in Apple’s database with GPS coordinates.

    So unless you live alone in a mountain cabin that has never been visited by someone with a smartphone before and you didn’t disable the “enhanced localization” feature on your phone, yes your Bluetooth is at risk of giving up your location.


  • Oh they definitely exist. At a high level the bullshit is driven by malicious greed, but there are also people who are naive and ignorant and hopeful enough to hear that drivel and truly believe in it.

    Like when Microsoft shoves GPT4 into notepad.exe. Obviously a terrible terrible product from a UX/CX perspective. But also, extremely expensive for Microsoft right? They don’t gain anything by stuffing their products with useless annoying features that eat expensive cloud compute like a kid eats candy. That only happens because their management people truly believe, honest to god, that this is a sound business strategy, which would only be the case if they are completely misunderstanding what GPT4 is and could be and actually think that future improvements would be so great that there is a path to mass monetization somehow.