Slashdot Mirror


Nike+ iPod Used For Surveillance

Thib writes "Researchers at the University of Washington have published a report detailing many easy and cheap ways the Nike+ iPod Sport Kit previously discussed on Slashdot can be used to track individuals, even when they are not carrying their iPod. They have even implemented a Google Maps application to display surveillance data in real time." From the article: "'Our research also shows that there exist simple cryptographic techniques that the Nike+iPod Sport Kit designers could have used to improve the privacy-preserving properties of the Nike+iPod kit,' the group reports. 'Our work underscores the need for a broad public discussion about and further research on the privacy-preserving properties of new wireless personal gadgets,' the group reports. 'We stress, however, that there is no evidence that Apple or Nike intended for these devices to be used in any malicious manner. Additionally, neither Apple nor Nike endorsed this study.'"

25 of 66 comments (clear)

  1. how is this different? by idlake · · Score: 3, Insightful

    My cell phone and my laptop broadcast where I am and who I am all day long; what difference does it make if my shoes do the same thing?

    1. Re:how is this different? by vought · · Score: 4, Insightful

      My cell phone and my laptop broadcast where I am and who I am all day long; what difference does it make if my shoes do the same thing?


      Agreed.

      Much ado about barely anything. I met the product manager for the Nike+iPod kits. I can assure you that tracking people without their permission wasn't in the MRD.

      So, based on the FA, you have to be within 30 feet of the person the "bug" is planted on. How is this so effing different than following someone around and watching what they do?

      I'm a pretty big privacy advocate. I got ticked when the company who "wanted to hire me" made me take an invasive personality test But this is a lot of heat and noise over nothing - an attention-seeking hyper concernicus group looking for attention.

    2. Re:how is this different? by Jahz · · Score: 4, Funny

      Watch out for that guy jogging 50 feet behind you with a laptop satchel on his shoulder and a high-gain antennae in his hand!

      --
      There are 10 types of people in the world. Those who understand binary and those who do not.
  2. sensor can detect the presence of a person. wow. by iowannaski · · Score: 4, Funny

    For about the price of a webcam, you can remotely violate only 1 person's privacy - and all you can do is detect their presence.

    Groundbreaking stuff, really.

    Next up on YRO: Intrepid humans use eyeballs to invade privacy from distances of up to 100M!

    --
    i forget
  3. God. Dammit! This is a stupid story by snowwrestler · · Score: 3, Informative
    Researchers at the University of Washington have published a report detailing many easy and cheap ways the Nike+ iPod Sport Kit previously discussed on Slashdot can be used to track individuals, even when they are not carrying their iPod.


    No, but they still have to have that particular pair of shoes on, and you have to be within 60 feet of them!

    The amount of effort it would take to track someone via the transmitter in one of their (presumably many shoes) is ridiculous compared to the amount of effort involved in shall we say more traditional methods of stalking.

    Sure, you could custom-hack a Linux "gumstick" computer to read the shoe tag and transmit it to a computer to see when your girlfriend is home. But really all you'd ever know for sure is when that particular shoe is at home. Maybe a better bet would be to just install a Web-enabled X10 cam with no hacking required. Or you could go really old-school-stalker and just drive by her damn house to see if the lights are on.

    Sure I guess you could drive along behind some girl reading her electronic shoe tag from 60 feet away...on the other hand if you're within 60 feet you can probably SEE her with your own EYES.

    I know iPods and security vulnerabilities are hot topics these days. That doesn't mean every story that crosses the two should get the breathless treatment. This is just blatant fear-mongering in an attempt to generate press. There isn't even any valuable information to be captured, like from an RFID credit card for example.
    --
    Build a man a fire, he's warm for one night. Set him on fire, and he's warm for the rest of his life.
    1. Re:God. Dammit! This is a stupid story by toetagger1 · · Score: 2, Insightful
      The amount of effort it would take to track someone via the transmitter in one of their (presumably many shoes) is ridiculous compared to the amount of effort involved in shall we say more traditional methods of stalking.
      Well, that's if you want to track someone with their Nike shoes. But what prevents you from taking the transmitter, slipping it into someone's backpack, and then track them? Similarly, you may not necessarily need to know where exactly the person currently is, but just want to know when that person comes into a certain area. Imagine you want to break into someone's dorm room, but don't want to get caught in the act, and also need to make sure the person isn't home.

      On the other hand, this could have some good uses too! You could unlock your car if the sensor is in range, and lock it if it isn't, for instance.
      --
      who | grep -i blond | date cd ~; unzip; touch; strip; finger; mount; gasp; yes; uptime; umount; sleep
    2. Re:God. Dammit! This is a stupid story by iowannaski · · Score: 2, Insightful

      Well, that's if you want to track someone with their Nike shoes. But what prevents you from taking the transmitter, slipping it into someone's backpack, and then track them? Intelligence, hopefully. If I was going to slip something into someone's backpack for the purposes of tracking them - well, it wouldn't be one of these things.
      --
      i forget
  4. Isn't this = to any frequency emitting device? by plasmacutter · · Score: 2, Insightful

    I hate to burst the paranoia bubble.. but this can only be used if they turn it on to work out..

    if any big brother organization wanted to track you they could triangulate your cell phone signal, use credit card records...

    I honestly think it's a bit late and a bit hyppocritical to start complaining about an ipod interface.

    --
    VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
    1. Re:Isn't this = to any frequency emitting device? by BandwidthHog · · Score: 2, Interesting
      most cell phones have GPS capabilities for 911 purposes
      Sort of. IIRC, it's based on nearby cell phone towers rather than satelites.

      By that logic a fax machine is a web server, since somebody can call and request a page be sent to them.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  5. welcome to 1984? by zappepcs · · Score: 2, Insightful

    This is but one of many (100s or 1000s) ways in which people will be able to spy, track, and otherwise invade the (previously held) privacy of common citizens. The problem is not simply that there are groups and people more than willing to take advantage of such technologies to accomplish rather nefarious goals, but more importantly, most average citizens will not care, nor believe it possible. This is mostly due to a lack of understanding of the technologies and related enabling technologies. Worse, even understanding or knowledge is available, the "it won't affect me" syndrome will continue to make it a growing threat.

    There really don't need to be large groups of 'men in black' if most of the populace simply hands over their rights and privacy.

    Those who don't know what tor is should. There are methods for remaining rather anonymous in the world at large. This story is simply the warning sign to let you (yes you, joe public) know that if big brother is not already spying, he will be soon. The patriot act and the DMCA have enabled the nefarious among us to do so. .... Whether a gun is used for bad things or not, when you purchase one, you must be aware that it can be. Unfortunately, buying gadgets is a process that is not even touched by such training or awareness... sad sad sad

  6. Original... by jginspace · · Score: 5, Informative

    From University of Washington. And a good writeup from Wired.

  7. Sensationalist Headlines at CNN by AslanTheMentat · · Score: 5, Insightful

    Geez... with the way this is being "headlined" on CNN's site, one has to wonder how much M$ had to shell out for this little op.ed.'ish piece to boost dismal Zune sales (kidding)...
    I mean, really though: "iPod flaw helps stalkers track your every move", and "Tracked through your iPod - Some researchers say that your iPod could double as a tracking device."... Neither mention Nike's role in this issue, and both make it sound like an iPod is diddling your sister or something...

    This also seems to imply someone wants to stalk your sweaty, running ass to begin with... I mean, seriously, if someone wanted to track you, there has to be a better way than sprinkling "Gumstix" PCs in the damn bushes to listen to your ugly ass sneakers.

  8. Yes, there are lots of ways to track people by snowwrestler · · Score: 4, Insightful

    I have no objection to an article detailing some of the tricks people can use to track other people. The over-hyped connection to Nike and Apple is the ridiculous part. It's not like the only place in the world to get an electronic transmitter or RFID is from this one particular product that just happens to marry two of the best-known brands in the world. And it's not like an electronic tag is the only way to figure out when someone is in their dorm room.

    I bet Apple didn't bother encrypting the transmission because all it does is transmit an ID and data stream. The data is totally unimportant unless you happen to care about someone's training program. And here's the crucial part--the ID is also totally unimportant because when people go jogging, they almost always go jogging in a public place. And when you're jogging in public you're already broadcasting your ID at least 60 feet, via the light that is reflected off your recognizable face.

    --
    Build a man a fire, he's warm for one night. Set him on fire, and he's warm for the rest of his life.
  9. This just in from Seattle... by Divebus · · Score: 3, Insightful

    Wouldn't it be easier to just hide behind a tree? Just in time to try and pump some Zune sales. To get real about it, the "news" report from KING TV (http://www.king5.com/) in Seattle didn't say it was the iPod tracking you, and neither did the "researchers" but the morons at CNN did. What about the data squirting Zunes?

    --

    Most of the stuff on /. won't survive first contact with facts.
  10. Pretty cool, actually by Divebus · · Score: 3, Funny

    That's a nifty little gizmo they've got there, but I can track iPods just as easily by looking for white earphones.

    --

    Most of the stuff on /. won't survive first contact with facts.
  11. Neither Apple nor Nike endorsed this study. by CODiNE · · Score: 2, Insightful

    Ahhhh, but the question is... "Who DID?"

    --
    Cwm, fjord-bank glyphs vext quiz
  12. Advertising potential by Animats · · Score: 3, Insightful
    I'm waiting for the advertising sign in popular running areas:

    Your 1km time today: 6:31
    Last week: 6:28
    You need Red Bull!

  13. No surprise. by MaWeiTao · · Score: 2, Insightful

    It's not like this is any surprise. The more integrated and sophisticated our devices are the easier it becomes to track and observe everything we do. It's not like there's some kind of ulterior motive to all this. It's just the consequence of all this connectivity.

    If you're that paranoid and don't want to risk being tracked it's simple. Don't buy electronic devices, particularly those that transmit any kind of signal. Even then there are ways to observe people, but at least it's significantly more difficult.

    The problem becomes when people are forced to carry devices that report some organization, be it the government or some corporation. We aren't there yet, but I wont be surprised if when it comes people either don't notice it happening or they openly embrace it.

    1. Re:No surprise. by YrWrstNtmr · · Score: 2, Insightful

      The problem becomes when people are forced to carry devices that report some organization, be it the government or some corporation. We aren't there yet, but I wont be surprised if when it comes people either don't notice it happening or they openly embrace it.

      Not there yet?

      Company provided cellphone or pager.
      GPS schoolbus/delivery driver/trucker.
      RFID cards for building access.
      Company car with OnStar.
      The ever present cameras.

      Now your shoes. When is it too much? I think 'too much' happened a while ago. We were just too busy to notice.

    2. Re:No surprise. by pv2b · · Score: 2, Interesting

      I don't know how it works in the US, but in Sweden, pagers are most often actually receive-only devices. Every single time somebody in Sweden is paged, that page is sent to every single pager tower transmitter in the country, and broadcast out a few times.

      The way the pager knows if it has missed any pages is because there's a rolling sequence number on the pages, and if one is missed, it knows a page has been missed.

      This leads me to think that people who are paranoid of being tracked through cell phones should just go get themselves a one-way pager, and turn on their cell phone only to make a call or return a page -- or just return the call using some other phone that happens to be around.

      Incidentally, I wonder how two-way pagers work. Do they keep themselves associated to a certain tower, or do they receive the same way one-way pagers do, activating a transmitter only to send pages?

      If you want to get really technical, I guess it's possible to track you by checking for the stray RF from your pager's radio receiver, but it's bound to be very impractical -- even much less practical than using the emissions from a Nike+iPod device to track you -- given the very low level of emissions.

  14. It has an off switch. by sakusha · · Score: 4, Insightful

    The Nike+ sensor module has a little switch on the underside, you can switch it off if you don't want to broadcast the sensor data.

    I personally only use my sensor on my running shoes, which I only wear while running. Good running shoes are too expensive to wear just walking around town, they wear out too quickly. So if anyone wants to track me while I run 5 one mile laps, in the exact same course, 4 times a week, hey, help yourself to my sensor data.

  15. UW news release, inline video, and PDF of research by kendor · · Score: 3, Interesting

    The University of Washington's news and information office put together a release that includes an embedded video and a PDF of the research paper: http://uwnews.washington.edu/ni/article.asp?articl eID=28494

    The inline video, made by the researchers, is well-crafted and rather entertaining.

    Disclosure: I work on behalf of the UW and the technical side of its news operations.

  16. The Multi-Talented Nike by mqduck · · Score: 2, Funny

    Nike can also be used to help you beat up Persians.

    --
    Property is theft.
  17. You can track location using cellphone signals. by kerouacsgp · · Score: 2, Informative

    So what? Location tracking is already possible using cell phone signals. Is there more people on the street with Nike+ipod thingamagit strapped to their feet or are there more people having a cellphone? This is blown way out of poportion

  18. Nike+Apple didn't pay for this FUD? by DECS · · Score: 2, Funny

    I find it hard to believe that Nike+Apple didn't pay for this research.

    Shoe tracking surveillance is a serious threat to runners everywhere. The spooks will know how many times your shoes hit the ground without actaully having to run around behind you counting. Clearly, this is an attempt by Apple and Nike to track perhaps thousands of individuals who are a) athletes b) unaware that Nike+ is a wireless system and c) concerned that other people will have access to the information they upload to the web.

    What's next from Apple, a way to publically advertise personal details through web pages (say, iWeb)? How many people will unwittingly publish their social security number, mother's maden name, and perhaps their secret affinity for a specific type of cheese, creating clear and obvious vulnerabilities from the phishing scammers and spooks out to poison them. THE WEB IS PUBLICLY AVAILABLE PEOPLE!!!

    Don't say you haven't been warned. When the machines rise, the first to go will be hot chicks wearing tight Nike clothes and cheese eaters. Oh the humanity.

    iPod vs Zune: Microsoft's Slippery Astroturf
    Bill Gates for President? No Thanks.