Apple AirTags, Now Jailbroken, Could Become Even Bigger Privacy Nightmare
Apple has made a lot of noise about its commitment to privacy, hoping to draw a distinction between it and Google, which thrives on your data. The new Apple AirTag is not the first smart tracker, but it’s so good at what it does that it could actually be a privacy nightmare. This is an even greater concern now that a security researcher has shown that it’s possible to “jailbreak” an AirTag and change how the firmware works.
The AirTag is a low-power item tracker akin to a Tile or Chipolo. The idea is you attach an AirTag to something important, and you can find its approximate location from your phone. The AirTag can also use other iDevices like Bluetooth beacons, allowing you to track your tag even when it’s not nearby.
A German security researcher who goes by stacksmashing has shown that the nRF52 microcontroller inside the AirTag is programmable. It’s not easy to do, and stacksmashing bricked two of the $100 trackers before succeeding. But it’s possible to dump the firmware from the AirTag and upload a modified version.
Stacksmashing demonstrated the hack by changing the URL broadcast from the tag in Lost mode. Usually, an AirTag in Lost mode should beam an Apple tracker page via NFC. Thus, anyone who finds your lost tag will be able to follow that link and contact you. However, tapping an iPhone to stacksmashing’s modified tag sends the user to a different URL. So, it might be possible to use hacked AirTags to trick people into visiting malicious domains. The notification does show the URL, but people will be apt to trust AirTags. It could be a modern version of leaving boobytrapped flash drives laying around.
Built a quick demo: AirTag with modified NFC URL 😎
(Cables only used for power) pic.twitter.com/DrMIK49Tu0
— stacksmashing (@ghidraninja) May 8, 2021
Even without hacking, AirTags have some privacy advocates worried that Apple might have invented the ideal tool for stalkers. AirTags in Lost mode are supposed to produce a notification on iPhones when they’ve been in close proximity for a few hours, but Android users don’t get any such notification. The tag should also start beeping after several days to further reduce the likelihood someone will use it to follow around a person instead of a thing. However, the ability to modify the firmware could mean it’s possible to disable both of those security features. At that point, you’d have the perfect tool to spy on someone.
Apple has control over how AirTags interact with its network, so there might be some way to disable modified tags on the server side. The company has yet to respond to the latest developments.
Continue reading
Turns Out People Really Are Using Apple AirTags to Track and Steal Cars
Alleged criminals are sticking the tiny tracking devices on vehicles with the hopes of finding them later, and absconding with them.
People Are Selling AirTags with Disabled Speakers that Are Totally Not for Stalking
AirTags have already been used to steal cars and follow people without their knowledge, and now you can find AirTags with disabled speakers for sale online. That would make it even easier to stalk someone with Apple's hardware.
Apple to Update AirTags to Help Ward Off Stalking, Car Theft
Apple might have been caught off-guard by the novel ways in which people have been hacking its AirTags, but the company is now starting to fight back.