Slashdot Mirror


iPhone Tracking Ruckus Ongoing

Trailrunner7 writes "A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge." and theodp noted that the iPhone tracking 'Bug' is actually patent pending... which makes it harder to buy the mistake argument. As if that's not enough fun, South Korea, Italy, Germany and other countries are all looking into it.

31 of 353 comments (clear)

  1. dumb summary again by timster · · Score: 4, Insightful

    The "mistake argument" isn't claiming that the whole location history implementation is a mistake, it's claiming that it's intended to be a cache, not a permanent archive. Nothing in the patent has anything to do with this.

    --
    I have seen the future, and it is inconvenient.
    1. Re:dumb summary again by nedlohs · · Score: 4, Insightful

      Please explain how the following claim would have any utility at all if it is supposed to be just a cache:

      10. The method of claim 9, further comprising: querying the database for at least a portion of the location history data; retrieving network information from the database that is responsive to the query; translating the network information into position coordinates; displaying a map view; and displaying markers on the map view as a timeline according to the position coordinates, the markers indicating the location history of the location aware device for the time span. .

    2. Re:dumb summary again by nedlohs · · Score: 4, Insightful

      But how is there any utility with providing that for a cache that might have been deleted 2 minutes ago?

    3. Re:dumb summary again by stewbacca · · Score: 3, Funny

      I prefer brouhaha when discussing issues of minor interest as if they are issues of national security.

  2. From running the 1984 ad by Beelzebud · · Score: 5, Funny

    to becoming Big Brother, they've come a long way.

  3. Re:OMG big brother... by Anonymous Coward · · Score: 5, Insightful

    The problem comes when you have states like Michigan where the police are allegedly downloading information from a smart phone in a minute or two and then, conceivably, can use that location information against you any way they want. Big problem.

    http://www.digitaltrends.com/mobile/michigan-police-being-questioned-for-extracting-smartphone-data/
     

  4. Re:OMG big brother... by mikael_j · · Score: 4, Interesting

    Hush now, don't ruin a good anti-Apple flamefest. You're not giving the haters a chance to proclaim that they've never used, never owned, never wished to own or even seen an Apple product in real life but they're still horribly outraged and this great assault on their human rights by the evil empire led by the great satan, Steve Jobs.

    Yes, I'm exaggerating but I can't help but be slightly baffled by the hordes of people who seem to think that Apple is somehow more powerful in the world of computing than Microsoft or that they are "more evil" than MS has ever been. Not to mention the fact that about half of them swear they've never used a mac or iDevice in their lives yet they are experts on the subject...

    --
    Greylisting is to SMTP as NAT is to IPv4
  5. Point Less? by ags1 · · Score: 5, Insightful

    Isn't having a cell phone (especially one with apps that can access the GPS location) always track able by someone? Don't get me wrong I don't like the idea of being tracked, but the only way your going to achieve this, is to leave your cell phone at home.

  6. Re:OMG big brother... by cpu6502 · · Score: 5, Funny

    >>>its your phone so where is the problem.

    When the cop pulls you over, and decides to take your phone for further examination, and discovers you've been attending (the horror) Libertarian and Ron Paul "Campaign For Liberty" meetings. Followed by a radio call that he's obtained a "suspected terrorist" and is bringing the suspect back to the station for questioning.

    *
    *Background: The U.S. and a few State governments distribute leaflets that Libertarian and Paul supporters are potential domestic terrorists and/or militia members.

    --
    My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
  7. Maybe not the phone's location. by losthought · · Score: 3, Funny

    Take it as you will but this dude seems to think this data isn't actually a log of where an iPhone user has been. He claims it is actually location data of the cell towers the iPhone has seen. Obviously that kind of data could give rough location data but not with any granularity or meaningful accuracy.

    I do have an iPhone and have looked at my own data with the Tracker app. On the surface I would have to say there is some validity to this guy's claim because the location data on my phone included places I haven't been within 10 or 20 miles of ever. With that said I still installed the untrack app on my phone to dump the tables in the database where this data is stored, but that's mainly because my Tinfoil Hat Wearer's Club membership agreement required me to do so.

  8. You know what surprises me? by JustAnotherIdiot · · Score: 4, Funny

    That people are surprised by this.

    --
    What do I know, I'm just an idiot, right?
  9. Re:OMG big brother... by arkham6 · · Score: 4, Insightful

    Sorry, but the problem is that apple is not tracking anybody, its that apple is not tracking anybody....yet.

    Also, there is the issue of why the phone is doing this in the first place. Why spend the time programming this 'feature' into a phone unless its going to be used for something.

    Just because apple isnt doing anything evil with this data does not mean they could not later, or someone else could make a trojan to gather this data now that its widely known.

    Apple is getting stomped for this, and rightly so.

  10. Re:OMG big brother... by causality · · Score: 4, Insightful

    Hush now, don't ruin a good anti-Apple flamefest. You're not giving the haters a chance to proclaim that they've never used, never owned, never wished to own or even seen an Apple product in real life but they're still horribly outraged and this great assault on their human rights by the evil empire led by the great satan, Steve Jobs.

    Yes, I'm exaggerating but I can't help but be slightly baffled by the hordes of people who seem to think that Apple is somehow more powerful in the world of computing than Microsoft or that they are "more evil" than MS has ever been. Not to mention the fact that about half of them swear they've never used a mac or iDevice in their lives yet they are experts on the subject...

    These are mundane issues concerning device design and business decisions. It is not some vast unknowable thing that can only be experienced. It can be researched and anyone willing to do that can acquaint themselves with the facts. If you think someone is misinformed tell him where he is factually incorrect.

    I admit I may be misunderstanding you, but what you're doing there seems like dismissal. It's similar to the tactics of the worst "anti-Apple" types and therefore it won't reveal the error of their ways. Right now, you say they probably don't own Apple devices. You say that like the following never occurred to you: maybe they don't own an Apple device because they did some research before spending the money and learned ahead of time that such devices wouldn't suit their needs. I'd consider that person more pro-active and likely more wise than someone who blindly invests in something and ends up dissatisfied when the information was out there the whole time.

    So if someone does own an Apple device and has complaints about it, what then? Are they now hypocrites for buying something they later decided they didn't like? Does worrying so much about their character do anything to address the legitimacy of any complaint they have about the design of the device? I don't believe so.

    --
    It is a miracle that curiosity survives formal education. - Einstein
  11. not essential for a smartphone by 1800maxim · · Score: 4, Insightful

    Reading your comment would make one think that location tracking and location history is part of being a "smart" phone. There's nothing in the smartphone that requires this behaviour.

    The problem with this data is that
    1) A user cannot erase it analogous to clearing cache/cookines on a PC
    2) It is purposely hidden from the user
    3) Law enforcement in states like Michigan can download this information WITHOUT a warrant
    4) Potential for abuse by apps and / or people who will stalk you/spy on you unbeknown to you.

    Not to mention, that this is just wrong. There are certain inalienable rights (or at least they are supposed to be there), and a right to privacy is one of them.

    Any such system should be opt-in ONLY.

    1. Re:not essential for a smartphone by Telvin_3d · · Score: 4, Insightful

      The right to privacy from your own phone? You realize that this is the thing that you use to send you conversations with people over the air through a series of third party servers? If you are afraid of your phone hearing your conversations or your GPS knowing where it is then it is long past time for you to check out of modern society.

      Purposefully hidden from the user? In the same sense that the rest of the system files are busy in the background running the system.

      And yes, these kinds of things are necessary in a smartphone. At least as long as a smartphone is defined as more than a regular phone with a big-ass screen.

  12. Re:feature? by afex · · Score: 3

    all jokes aside, i actually thought this was really cool when i found out....the map of my parsed backup data (made with the windows version called iOStracker or whatever) was really interesting and i had a great time playing around with the data.

    call my a cynic, but i always sort of assumed this was going on.
    heck, i assumed they logged it on the *CELL TOWER* side of things, not on the phone itself, which is arguably better because at least you can destroy it/prevent it this way. maybe I should be happy?

  13. RDS astroturf for the First Post Win? by IBitOBear · · Score: 4, Insightful

    Dude, the fact that apple doesn't collect that information by default at the present time doesn't help _you_ or any other member of the Reality Distortion Field...

    (1) Any app at any time including IOS updates has that information at its disposal, so iFarmville now knows where you spend most of your time and when you are not home. So maybe does any active advertisement ware and those free-but-buy-stuff games your kid is playing.

    (2) Your phone is PRE-tapped as far as law enforcement is concerned. If I put a GPS anklet on you now "just in case do do something later" would you be fine with that? If I say it also "does iTunes" does it make it retroactively okay?

    (3) I can "give you" an app and that app can now tell me how much time you spend shopping and where you shop down to the department of the store (couple meters).

    (4) God save you if you get divorced or become subject to any legal fishing exiditions.

    Suppose some legal person gets a hard on for the legal pursuit of you. I decide you are a child predator because that helps me get reelected. I take your phone log, makes excerpts of it, and "notice" in front of the Grand Jury and the actual Jury that you spend an awful lot of time near a preschool. Now _you_ never noticed that your coffee stand of choice is right next to some kinder-care place in the same strip mall, or if you did, you didn't care at all. But _there_ _you_ _are_ spending every morning watching the kiddies come and go "according to your phone" and the way someone has chosen to take data and "reimagine" your intent.

    Less Obviously: If I took the iPhone you have in your hot little hands, and computed all the time-distance values "near" roads, how often would you "be speeding"... lets just use that to set your car and health insurance rates shall we? Do you have an app from your insurance company on your phone right now? Will you never have such an app? Are you _sure_?

    The question isn't who is getting the data by default, its a question of where the data _might_ go and what it says about your past to some creative mind somewhere.

    Don't paint me as "all hysterical" though. I have latatude on my Android devices. I know about the _actual_ cache in Android as opposed to the full journal in iPhones. Every day I walk into a number of places where cell phones are forbidden for security reasons. I have been fully briefed about the background cost in lost privacy to having a hot phone in my hands for more than ten years.

    IOS _has_ stepped over a very bright line, but we are boiling frogs here, and the Reality Distortion Field is just letting the iFrogs cook faster.

    --
    Innocent people shouldn't be forced to pay for inferior software development.
    --"Code Complete" Microsoft Press
    1. Re:RDS astroturf for the First Post Win? by BarryJacobsen · · Score: 5, Informative

      I believe you are SERIOUSLY misinformed about exactly what this database is and where it is accessible

      1) Any app as in any DESKTOP application on your mac that you willfully install knowing it may do this and provided your backups aren't encrypted. iFarmville (assuming the i means it's for iOS) CANNOT access this database, ever.
      2) Your phone is not pre-tapped, the database cannot be accessed on the phone without hacking/jailbreaking. Further, law enforcement would have a much easier time getting the location from the cell phone companies which can give them REAL TIME data.
      3) You could give me a desktop app that does this, provided I don't have my backups encrypted. You could give me an iPhone app that does this, but it will tell me that it's tracking me.
      4) This would be no different from someone being hired to follow you, they can draw the same (incorrect) inferences about your habits.

    2. Re:RDS astroturf for the First Post Win? by LoganDzwon · · Score: 3, Informative

      (1) Your just flat wrong. no app can access the cache info. (2) that doesn't even make any sense. The phone doesn't track it's actual position, it only tracks each cell tower's location and the last time it's seen it. It isn't even a running log, if it see the same cell tower again, it updates the time stamp, it does not create a new entry. (3) they have that. it's called loopt. They have it for Android also. How is that relative? (4) I agree, but again completely irrelevant to the discussion at hand. ANY info you can get out of the cache data you can get via the operator of the cell towers. In your case you'd need a court order either way. At lest if you had the iphone you'd have your own data without a court order. Your political example would be have to based on logs from the call company. the iOS logs are neither accurate a enough, nor dated in a such way to be useful for your proposed purpse. You would only be able to see the most recent time that I connected to a cell tower in with-in range of a school, ( average US tower has about a 4 mile diameter.) Again, there is not nearly enough data to compute the rate of travel.

    3. Re:RDS astroturf for the First Post Win? by PCM2 · · Score: 3, Interesting

      Errr... what?

      1) Any app as in any DESKTOP application on your mac that you willfully install knowing it may do this and provided your backups aren't encrypted. iFarmville (assuming the i means it's for iOS) CANNOT access this database, ever.

      How would a desktop application know (quoting GP now) "where you spend most of your time and when you are not home"? Surely you see the difference between "the subject uses his computer at home" and "the subject spends a lot of time at his friend's home while his friend is at work"?

      2) Your phone is not pre-tapped, the database cannot be accessed on the phone without hacking/jailbreaking.

      I don't know what the GP meant by "pre-tapped," except, I suppose, that there might be legal precedent stating law enforcement has a right to request this data. If you're ever arrested, they can get the data off your phone, at which time it's the equivalent of having followed you around (even when they never did).

      3) You could give me a desktop app that does this, provided I don't have my backups encrypted.

      Again, what? How could an app that's sitting on your desktop Mac at home know where you are when you're not at home? Clearly this doesn't seem to be an issue for you, but it certainly is for everybody else.

      4) This would be no different from someone being hired to follow you, they can draw the same (incorrect) inferences about your habits.

      It would be different, and if you don't see that you're blind. A person hired to follow you around actually has to follow you around. That costs time and money. This way, all the attorneys have to do is subpoena the information that they already know is on your phone. Second, an investigator that follows you around has to take the stand and give testimony against you, and your attorney has the right of cross-examination. "Did my client appear to be looking at the children? Which table was he sitting at, and which direction was he facing?" With automatically gathered location data, it merely has to be presented by the prosecuting attorney and, in the jury's eyes, it's up to you to shoot holes in this "factual, computerized data." That's a big, big difference.

      --
      Breakfast served all day!
    4. Re:RDS astroturf for the First Post Win? by BarryJacobsen · · Score: 3, Informative

      How would a desktop application know (quoting GP now) "where you spend most of your time and when you are not home"? Surely you see the difference between "the subject uses his computer at home" and "the subject spends a lot of time at his friend's home while his friend is at work"?

      The database from the phone is stored in the backup of the phone on your desktop, the database on the phone is inaccessible to software on the phone. Hence it requires a desktop application in order to access the database.

      I don't know what the GP meant by "pre-tapped," except, I suppose, that there might be legal precedent stating law enforcement has a right to request this data. If you're ever arrested, they can get the data off your phone, at which time it's the equivalent of having followed you around (even when they never did).

      Or they could ask the cell phone companies for the exact same information that is stored in the phone (as they are keeping that same information on their servers).

      Again, what? How could an app that's sitting on your desktop Mac at home know where you are when you're not at home? Clearly this doesn't seem to be an issue for you, but it certainly is for everybody else.

      See above. The database of locations is not software accessible on the phone, only in the unencrypted backups on a regular computer. It's not an issue for me because I chose to encrypt the backups by clicking the check box.

      It would be different, and if you don't see that you're blind. A person hired to follow you around actually has to follow you around. That costs time and money. This way, all the attorneys have to do is subpoena the information that they already know is on your phone. Second, an investigator that follows you around has to take the stand and give testimony against you, and your attorney has the right of cross-examination. "Did my client appear to be looking at the children? Which table was he sitting at, and which direction was he facing?" With automatically gathered location data, it merely has to be presented by the prosecuting attorney and, in the jury's eyes, it's up to you to shoot holes in this "factual, computerized data." That's a big, big difference.

      You're right, they would have to pay a PI. Or they could put a tracking device on you. Or they could ask the cell phone company for the exact same data that is on the phone. If the government or someone with with sufficient resources wants to track you - they're probably gonna be able to track you.

    5. Re:RDS astroturf for the First Post Win? by guspasho · · Score: 3, Interesting

      1) Ever? All it takes is Apple deciding to offer it as available to app developers. Did you notice the patent pending in the summary? This is there so Apple can make a profit off of it.

      2) Did you not read the stories about the cops in Michigan? They will get this information from you at a routine traffic stop, no warrant or even suspicion required.

      3) iTunes doesn't encrypt backups by default. What percentage do you think turns on encryption?

      4) Except following tens of millions of people for their entire lives can get expensive. This makes it exceptionally cheap and easy, and therefore much easier to abuse, and not just on a case by case basis but en masse.

  14. Re:OMG big brother... by mdarksbane · · Score: 3, Interesting

    Still doesn't really matter, because the phone company has this information on you anyway, and the DOJ has been claiming they can access it without a warrant for years.

    Personally I'm *much* more worried about the personal location history on ATT's servers that I *don't* get a notification if the police sniff, than anything that is sitting on my own device.

  15. Re:OMG big brother... by Americano · · Score: 4, Insightful

    its that apple is not tracking anybody....yet.

    Sounds like a job for the pre-crime division! I find it terribly amusing that we're speculating about Apple's possible nefarious use of this technology at some indeterminate point in the future, in a thread labeled "OMG big brother."

  16. Re:feature? by tripleevenfall · · Score: 3, Informative

    Cell towers always logged which cell you were connected to.

    What cell towers didn't do was log on the device side, a detailed record of your lat/long movements, which can then be tied to businesses, paths of travel, personal interests, spending patterns, and your daily comings and goings.

    These things were also not done on a handset containing a myriad of other personal data it could be linked to, and not on handsets that have other applications which are granted access to this data (which the user isn't aware exists).

    They also didn't back this data up to PCs, most of which are windows PCs, which are insecure by definition.

    In short, they had access to exactly one piece of data, what cell tower you were connected to at a given point in time. This is a fantastically intricate web of personal information.

  17. Re:OMG big brother... by Obfuscant · · Score: 4, Interesting

    The problem comes when you have states like Michigan where the police are allegedly downloading information from a smart phone in a minute or two

    Please stop spreading this nonsense. This isn't "insightful", it is inciteful. There are no allegations, at least no serious ones, that the Michigan State Police are doing any such thing. The only allegation is that they COULD do it because they have a piece of equipment that could do it.

    Not even the ACLU has found anyone who has claimed they are doing it. All it would take it one person to stand up and say "this happened to me" and the ACLU would be all over it. They aren't. They're "investigating" the policies by putting in FOIA requests. The ACLU doesn't need FOIA, they need a victim, and apparently they haven't got even one of those to sue on behalf of.

    The link you provide is just another one of the "they could be" flamebait articles. They "can" do this. That's all it says. Well, no shit. So can a lot of other people who have bought the CellBrite system. It makes no claims that it is happening. It doesn't even pretend to say that there is even one known victim of this "big problem", as you call it. It DOES try to make it an issue of minority rights by telling us, in essence, "think of the minorities this is happening to." Think of the children.

    COULD DO is not the same as IS DOING. Until there is some shred of evidence that it IS being done, stop claiming it is.

  18. Re:It's a GPS! by medv4380 · · Score: 4, Insightful

    NO it's not GPS. If this was GPS then the results would be far more accurate. If I want my smart phone to know where I am so that it can suggest a store or pretend to be my in car navigator then I will turn on the GPS. If I want it tracking my movement using WiFi data then I will turn on the WiFi locator so that it can do that instead. They are doing something that you cant actually turn OFF by tracking you using the Cell towers. It's a feature that is unnecessary since it has GPS that i can turn on if I need it. If someone needs to legally watch me and track me using my phone then Law Enforcement can go get the paperwork and they can get better information from the Cell companies and even track me in real time. This makes no sense as to why it even exists. Except maybe to allow someone to spy on me by getting a hold of that file.

  19. The patent works against the tracking argument by NameIsDavid · · Score: 4, Insightful

    As many have stated for days now to no avail, the iPhone consolidated.db log does not store and user location data. Even the patent indicates this. To understand this better, consider how both iOS and Android devices estimate user location when GPS is not available. They triangulate based on position relative to cell towers and wi-fi APs, which, in turn, requires the phone to know the location of these reference points. Since towers and APs don't transmit their own coordinates, phones need access to a position database. There are two ways this access can happen. The phone can either access the info over the internet, with all attendant delays, or it can maintain a local database and go off-phone only when there is no hit in this cache. But how can one keep this local database from becoming too large? Limit it to those cell towers that the user has connected with in the past, since those are the ones the user is more likely to be near in the future. This leads to a file on the phone containing location coordinates of towers and APs to which the phone has connected. Not user location data ... reference point data. And not in linear time, but only the most recent encounter with each reference point. In other words, the consolidated.db file. The Apple patent claims exactly this.

  20. Re:OMG big brother... by causality · · Score: 4, Insightful

    Oh, I have no problem with discussions about this and related topics. I'm just fed up with the slobbering hordes of "anti-fanboys" who show up every time Apple is mentioned (there is a similar but smaller reaction for Google, Microsoft and most other high-profile tech companies, Apple seems to be the main target for the "cool to hate" crowd and has been so for a while now).

    These commenters rarely contribute to the discussion, don't bother reading up on the issues at hand and instead tend to just resort to fear-mongering, misinterpretations and of course outright name-calling.

    This is an issue that should be discussed but the vast majority of comments I've seen so far have been along the lines of "APPLE SI TEH EVül!!1 STAEV JOBS IS SUING IS SATTEILT IN ORBIT TO TARKC UR POSISHION!!! ANY1 STIL USING CRAPPLE IPHONIE IS AN IDIOTS OR A FAGET 4 STAVE JOBS CAWK!!11one" (really, when venturing outside of "geek circles" and onto the internet at large that isn't very far from a very large number of comments I've seen although most have worse punctuation and don't use all-caps, the caps-lock is pretty much implied from the tone of the posts though)

    It's possible that I am about to bring up a distinction that means something only to me. Having said that ...

    Let's assume for argument's sake that you have characterized the anti-fanbois with complete accuracy. Here's my question: why do you consider it something you need to straighten out? Does not Apple have a marketing department, PR people, official spokespersons, the ability to launch marketing campaigns, etc.?

    Just about the only time I don't feel that way is when Linux is the subject. You could call that a bias, I suppose, but it's quite unique for a bias because I have an objective reason. There is no single corporation that owns Linux. There's no marketing department anyplace that represents all of Linux. Maybe Red Hat has marketers that represent Red Had Linux but they don't own Linux itself any more than I do. Most of what they'd be marketing is along the lines of paid support. In the absence of one central representative entity, it is mostly the relatively decentralized community of uses and enthusiasts who perform most of the advocation and support.

    I am humbled by the comparison between how much I have benefitted from using Linux and GPL software, when that is compared to how much I have personally helped out. But I do help out. I try to answer forums, though most of the time I am helping people I know personally to understand and master this OS. I can actually get personally involved, pitch in, contribute some effort. I can be an actual part of the Linux community, however small. Therefore I do have some kind of stake in it, in a way that I don't have a personal stake in the success of Microsoft or Apple.

    Why does someone who presumably is not an employee of Apple feel so strongly about others who badmouth Apple or its products? That's what is difficult for me to understand.

    --
    It is a miracle that curiosity survives formal education. - Einstein
  21. Re:feature? by CharlyFoxtrot · · Score: 4, Informative

    What cell towers didn't do was log on the device side, a detailed record of your lat/long movements, which can then be tied to businesses, paths of travel, personal interests, spending patterns, and your daily comings and goings.

    They do on their side though. For an example see here. (Thanks to FrykD for pointing this out to me in another slashdot discussion.)
    God knows how they are protecting this data or who has access to it, at least I can take steps to protect my data.

    --
    If all else fails, immortality can always be assured by spectacular error.