We’re rewarding the question askers & reputations are being recalculated! Read more.
6 edited tags
| link
    Tweeted twitter.com/#!/StackSecurity/status/63019285198548992
5 link to actual researcher article....
source | link

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly Radar and their application at petewarden/iPhoneTracker @ GitHub, and Fox News: http://www.myfoxny.com/dpp/news/apple-iphones-track-your-location-british-experts-warn-ncx-20110421Apple iPhones Track Your Location, British Experts Warn
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. httpMarco Ramilli's Blog://marcoramilli.blogspot.com/2011/04/iphone-tracker.html iPhone Tracker   (thanks @atdre for the link) on the one hand, or https://alexlevinson.wordpress.com/2011/04/21/3-major-issues-with-the-latest-iphone-tracking-discovery/ Major Issues with the Latest iPhone Tracking “Discovery” | Alex Levinson (which notes the similar predecessor file, h-cells.plist) on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at petewarden/iPhoneTracker @ GitHub, and Fox News: http://www.myfoxny.com/dpp/news/apple-iphones-track-your-location-british-experts-warn-ncx-20110421
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. http://marcoramilli.blogspot.com/2011/04/iphone-tracker.html (thanks @atdre for the link) on the one hand, or https://alexlevinson.wordpress.com/2011/04/21/3-major-issues-with-the-latest-iphone-tracking-discovery/ (which notes the similar predecessor file, h-cells.plist) on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly Radar and their application at petewarden/iPhoneTracker @ GitHub, and Fox News: Apple iPhones Track Your Location, British Experts Warn
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. Marco Ramilli's Blog: iPhone Tracker   (thanks @atdre for the link) on the one hand, or 3 Major Issues with the Latest iPhone Tracking “Discovery” | Alex Levinson (which notes the similar predecessor file, h-cells.plist) on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

4 h-cells.plist
source | link

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at petewarden/iPhoneTracker @ GitHub, and Fox News: http://www.myfoxny.com/dpp/news/apple-iphones-track-your-location-british-experts-warn-ncx-20110421
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. http://marcoramilli.blogspot.com/2011/04/iphone-tracker.html (thanks @atdre for the link) on the one hand, or https://alexlevinson.wordpress.com/2011/04/21/3-major-issues-with-the-latest-iphone-tracking-discovery/ (which notes the similar predecessor file, h-cells.plist) on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. http://www.myfoxny.com/dpp/news/apple-iphones-track-your-location-british-experts-warn-ncx-20110421
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. http://marcoramilli.blogspot.com/2011/04/iphone-tracker.html (thanks @atdre for the link) on the one hand, or https://alexlevinson.wordpress.com/2011/04/21/3-major-issues-with-the-latest-iphone-tracking-discovery/ on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at petewarden/iPhoneTracker @ GitHub, and Fox News: http://www.myfoxny.com/dpp/news/apple-iphones-track-your-location-british-experts-warn-ncx-20110421
To summarize, there was a recent "discovery" that iPhones track your location via cell tower tracking, and store months of that data in a single file, "consolidated.db". Thus, a hardcopy record of your phone's every movement (while the phone is on). The data is typically also backed up by iTunes to your computer.

See e.g. http://marcoramilli.blogspot.com/2011/04/iphone-tracker.html (thanks @atdre for the link) on the one hand, or https://alexlevinson.wordpress.com/2011/04/21/3-major-issues-with-the-latest-iphone-tracking-discovery/ (which notes the similar predecessor file, h-cells.plist) on the other.


My two part questions here, without speculating on what is actually done with that data (unless you have hard information):

  1. What is the extent of risk here? What is the worst impact, and what does this mean? Basically I'm looking for a threat model / risk profile on this data.
  2. (Assuming the risk is high enough... ) How can one go about protecting themselves (short of dropping the iPhone altogether)? e.g. protecting that file, preventing the logging, deleting it, setting it to not send, etc.

Note that privacy exposures of location tracking information for other phones is also on-topic here.

3 consolidated.db
source | link
2 f.e.?? :)
source | link
1
source | link