Hidden file reveals iPhone tracking and recording your movements
By whom and for what reason is undetermined, but data scientists Alasdair Allan and Pete Warden have discovered a tracking file within devices that operate on iOS 4. Allan and Warden revealed their findings yesterday at the Where 2.0 location conference in Santa Clara, CA.
Do you have an Apple device? How much would a tracking log concern you? Let us know.
The file is called consolidated.db, and is completely unencrypted and unprotected. The file can be accessed on the device itself and it also appears on any computer with which the device has been synched. Apparently, the tracking began with the iOS 4 update.
The file contains latitude and longitude coordinates along with timestamps, which is basically all you need to track someone's movements along any given time-frame. According to Allan, there can be up to tens of thousands of data points in any one consolidated.db file which could track movements back to around one year ago.
Their research found no evidence to suggest that this information is leaving the devices, but one security researcher thinks the information is leaving your devices – and being sent straight to Apple. Why would Apple want all of this location information? One reason could be for the creation of their own location database. With information being sent every day from the millions of iPhones currently in use, Apple might have found an easy, cost-efficient way to expand its own global location database.
According to this theory, Apple may send information about your location twice a day. How can they do this? It is possible that the opt-in procedure for Apple's geo-tracking is buried innocuously within the initial iTunes installation, which iPhone users require for proper synching of their devices.
Then again, if this is all starting to sound too conspiracy theory for you, lets not forget that Apple is already keeping track of where you are – but with a certain sheen of anonymity. It's right in their privacy statement:
To provide location-based services on Apple products, Apple and our partners and licensees may collect, use, and share precise location data, including the real-time geographic location of your Apple computer or device. This location data is collected anonymously in a form that does not personally identify you and is used by Apple and our partners and licensees to provide and improve location-based products and services. For example, we may share geographic location with application providers when you opt in to their location services.
This statement on location data collecting doesn't mention the transfer of this data directly to Apple or third-parties though. Carefully read, it really only says that location data is logged in order to help applications like maps services, Foursquare or Twitter.
But…uh…privacy, anyone? Whether this location data is being harvested by Apple for unknown purposes or it simply sits, unencrypted, on your devices and computers waiting to be accessed – there is some basis for concern. Folks worried about privacy need not even own an Apple product to worry, though. It's not like geo-tracking logs aren't already kept on everyone – all the time. Mobile providers have this data, but its protected and requires court orders to access. It would seem the scary thing about this particular find, for some, would be the relative ease with which the data is accessible.
The sky is hardly falling, however, says forensic data researcher Alex Levinson is an article published today. He outlines three issues the may make this find by Allan and Warden a non-story.
First, he says that Apple is definitely not collecting this data:
Apple is not harvesting this data from your device. This is data on the device that you as the customer purchased and unless they can show concrete evidence supporting this claim – network traffic analysis of connections to Apple servers – I rebut this claim in full. Through my research in this field and all traffic analysis I have performed, not once have I seen this data traverse a network.
Are you concerned about your personal location records that exist? Are they harmless? Tell us what you think.
|Advertising||Newsletters||Corporate Info||Site Map||Support|
|© 2011 WebProNews. An email newsletter. |
, Inc. 2549 Richmond Rd. Lexington KY, 40509
|The WebProNews network includes WebProWorld, Jayde and Twellow.|
|Unsubscribe from WebProNews. |
To unsubscribe from WebProNews or any other iEntry publication, simply send an email request to: firstname.lastname@example.org