Apple added a new feature to iOS 8 that makes it harder for retailers to track your location by snooping info broadcast over WiFi, but after digging into the MAC randomization feature, a security researcher has found some bad news: it only works if you’ve got cellular data turned off.
The Mac randomization feature which debuted at WWDC, promises to limit retailers’ abilities to track your iPhone when you go to the mall, by sending a random MAC address, instead of the code can be used to grab your iPhone’s unique device ID and location, but users will have to turn off their cellular data connection to start broadcasting random MAC addresses.
“Something hit me and it is even more ridiculous (damning) than the earlier finding that location services should be OFF for random MAC addresses to show up… Basically, if the phone’s cellular data connection is ON, there is no MAC randomization!”
Bhupinder Misra, a Principal Systems Engineer at Airtight, discovered last week that the randomization only happens when an iPhone is in sleep mode, but as soon as you pull out your phone to check a text, you’re basically launching a signal flare to all the iBeacons and other networks in the area, unless you have GPS and location-data turned off.
Misra’s first tests were conducted without a SIM card in the iPhone 5s, but once he popped one in he discovered the even worse news that you need to switch of data altogether.He also discovered MAC randomization isn’t present on the iPhone 5 or iPad Mini, but hasn’t tested the iPhone 6 or 6 Plus yet.
We’ve reached out to Apple for comment on the feature but haven’t heard back yet. If Misra’s discoveries aren’t just a bug to be patch, it significantly shrinks the percentage of people who won’t be tracked, maybe even down to zero.
Source: AirTightNetworks
Buster Hein is a freelance writer who lives in Phoenix, Arizona. Twitter: @bst3r.
4 responses to “iOS 8’s anti-tracking feature only works if you turn off cellular data”
This may well be one of the most ridiculous things i’ve heard. So basically you need to carry your phone around with it not actually being able to make or receive texts for this great privacy feature to work as well as switch off data and gps? Seriously what idiot at Apple thought that was a good idea because surely they checked this and knew about it. What is going on with this company lately? Bendgate, faulty software with ios, u2 album… What happend to it just works?
You do realize that no matter what Apple does ATT, Verizon, TMobile, and Sprint sell your location data. ALL OF IT! Not just when your in a store but when your at a friend’s house, eating dinner at home, you name it! They gave us a great presentation a few weeks back showing the huge amount of data they had. It was scary!
https://www.wireless.att.com/businesscenter/solutions/mobile-marketing/products/location-information-services.jsp
Enjoy!
“iOS 8’s anti-tracking feature only works if you turn off cellular data”
Same as EVERY smartphone. Same as EVERY version of the iPhone on EVERY iOS.
A signal flare to al the iBeacons? Good thing iBeacons can’t communicate information. Your phone would recognize the BLE signal, but with out an app telling what needs to happen. Nothing happens.
OT: The hole tracking business will be replaced by iBeacons. Not every costumer, but I recon a lot will want this. Cause of the discounts and personal shoppings assistance it gives you. WIFI tracking is sooooo 2013.