undefined | Better HN

0 pointspranau4y ago0 comments

Can you please explain how Apple’s Find My is anonymous while Sidewalk is not? As far as I understand, Find My collects device location information through other iPhones and then upload them to Apple’s cloud where it can be viewed by you. Apple states that this is done in a privacy preserving way by using rotating identifiers. In the case of Amazon, they state that all the device information being relayed through your device is encrypted and capped at 80kbps.

I am not sure I understand why one is a concern while the other isn’t.

0 comments

jiofih4y ago

Sidewalk is carrying all kinds of data from other users. You have absolutely no idea what. It’s a loosely defined system that Amazon controls remotely at their will. The encryption stops you from snooping like any other TLS traffic, but Amazon itself is the receiver on the other end. And it piggybacks on your own internet connection - 80Kbps is a huge amount of data.

Find My identifiers have a single purpose, are useless to anything but the owners device, cannot be used by Apple for tracking, ads or whatever, and id be surprised if the entire payload after a day out is > 8KB total. These look completely different to me.

smoldesu4y ago

> You have absolutely no idea what. It’s a loosely defined system that Amazon controls remotely at their will.

s/Amazon/Apple and you've got yourself the Airtag protocol. Obviously Airtags use less bandwidth, but both are proprietary and about equally as evil in my eyes.

wyager4y ago

We know exactly what goes in an airtag message. It’s very limited. https://positive.security/blog/send-my

1 more reply

jiofih4y ago

You are entitled to your feelings of course, but the design of the two systems could not be more different.

j / k navigate · click thread line to collapse

0 pointspranau4y ago0 comments

I am not sure I understand why one is a concern while the other isn’t.

0 comments

jiofih4y ago

smoldesu4y ago

> You have absolutely no idea what. It’s a loosely defined system that Amazon controls remotely at their will.

s/Amazon/Apple and you've got yourself the Airtag protocol. Obviously Airtags use less bandwidth, but both are proprietary and about equally as evil in my eyes.

wyager4y ago

We know exactly what goes in an airtag message. It’s very limited. https://positive.security/blog/send-my

1 more reply

jiofih4y ago

You are entitled to your feelings of course, but the design of the two systems could not be more different.

j / k navigate · click thread line to collapse