Groups > comp.mobile.android > #151977

Re: How to test if your access point BSSID is in the highly insecure Apple WPS database

From	"Carlos E.R." <robin_listas@es.invalid>
Newsgroups	misc.phone.mobile.iphone, alt.comp.os.windows-10, comp.mobile.android, alt.internet.wireless
Subject	Re: How to test if your access point BSSID is in the highly insecure Apple WPS database
Date	2025-12-16 23:16 +0100
Message-ID	<4a291mxgfc.ln2@Telcontar.valinor> (permalink)
References	(10 earlier) <10hanci$v4t$1@nnrp.usenet.blueworldhosting.com> <35qr0mx4du.ln2@Telcontar.valinor> <10hgqgh$2r785$1@dont-email.me> <tjh31mx25a.ln2@Telcontar.valinor> <10hni5k$1h8n$1@nnrp.usenet.blueworldhosting.com>

Cross-posted to 4 groups.

Show all headers | View raw

On 2025-12-15 00:44, Marian wrote:
> Carlos E.R. wrote:
>>> And when querying wifi networks almost none are changed from the ISP
>>> default.
>>
>> Around my house I see three customized of mine, one random (computer 
>> generated long random string), 3 "TP-Link..." one "ARRIS". So 
>> everybody else except the random one is using factory defaults. Or 
>> provider defaults.
>>
>> Using WiFi Analizer (Android) upstairs I see a few more, also 
>> generated by the ISP.
> 
> 
> Hi Carlos,
> 
> If you want, you can give me a BSSID of one of the homes near you, and
> thanks to Chris who asked me to do it, I can output the nearest 400
> BSSID:GPS pairs in that area.

That would reveal my location to the world :-)

> If desired, I can "snowball" it even further, to get the nearest 400 to the
> outside ring, which will instantly extend to thousands within seconds.
> 
> If you're OK with that, I'll post those thousands so that Chris (and others
> who may not have understood what the researchers reported) will see that.
> 
> All I need to do is run the now-modified Apple BSSID locator code:
> <https://github.com/darkosancanin/apple_bssid_locator>
> where the main change I made to the apple_bssid_locator.py was
> FROM: apple_wloc.return_single_result = 1 (which means return only one)
> TO:   apple_wloc.return_single_result = 0 (which means unlimited returns)
> 
> In practice, "unlimited" really means Apple throttles returns at 400.
> All this I learned from reading the research that was posted about this.
> 
> With the changes I documented, anyone in the world can reproduce what the
> security researchers said could be done, which I thank Chris for making me
> do it (because it took about a half hour for me to figure out that change).
> 
> Now when I run this command using the modified apple_bssid_locator.py code
> python apple_bssid_locator.py 11:22:33:AA:BB:CC --all
> I get up to 400 BSSID:GPS pairs per query.
> 
> If ANYONE wants to give me a BSSID of their neighbor, just post it.
> I will run the query for them and report the results here for all to see.
> 
> As the researchers stated, it's trivial to "snowball" that query with
> automation to the point in two weeks the researchers had billions of
> GPS:BSSID pairs, which then they could use to track "households".
> 
> It's so easy to do, it's scary.
> Just have someone give me a BSSID and I'll prove it to all right now.

I don't doubt it.

-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 05:08 -0700
  Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-05 12:17 +0000
    Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 06:28 -0700
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Jolly Roger <jollyroger@pobox.com> - 2025-12-05 17:42 +0000
        Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 17:16 -0700
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-06 02:02 +0100
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Alan <nuh-uh@nope.com> - 2025-12-05 17:25 -0800
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 18:53 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-06 13:02 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-06 10:13 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 21:43 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Andy Burns <usenet@andyburns.uk> - 2025-12-08 01:17 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-08 07:04 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-10 00:19 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-18 14:37 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-28 10:54 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-06 14:43 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-06 10:13 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-06 18:02 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-06 12:06 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Alan <nuh-uh@nope.com> - 2025-12-06 15:07 -0800
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Frank Slootweg <this@ddress.is.invalid> - 2025-12-06 13:32 +0000
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-06 14:50 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-08 21:19 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-10 00:26 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-09 19:54 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-11 22:37 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-11 19:13 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-12 10:24 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-12 10:24 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-14 21:00 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-14 16:44 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-16 23:16 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-17 00:29 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Frank Slootweg <this@ddress.is.invalid> - 2025-12-08 13:02 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-08 09:04 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-10 00:31 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-09 20:05 -0700
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-06 13:36 +0000
        Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-06 10:13 -0700
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-06 20:51 +0000
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-06 22:38 +0000
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-06 23:53 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-07 10:23 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 09:29 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-07 11:05 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-07 14:02 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-07 22:36 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 20:14 -0700
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 21:53 +0100
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 20:27 -0700
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 20:37 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Andy Burns <usenet@andyburns.uk> - 2025-12-08 09:16 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-08 06:46 -0700
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 22:05 +0100
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-08 06:50 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-10 00:37 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-09 19:24 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Frank Slootweg <this@ddress.is.invalid> - 2025-12-10 19:10 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-10 19:30 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-10 14:30 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-11 07:20 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-11 19:21 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Andy Burns <usenet@andyburns.uk> - 2025-12-10 19:37 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-10 14:35 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Frank Slootweg <this@ddress.is.invalid> - 2025-12-11 14:40 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-10 14:31 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-11 22:45 +0100
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-17 02:41 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-17 02:50 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-17 03:27 -0700
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Andy Burns <usenet@andyburns.uk> - 2025-12-06 18:07 +0000
        Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-06 20:51 +0000
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 01:04 -0700
  Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Alan <nuh-uh@nope.com> - 2025-12-05 10:39 -0800
  Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Alan <nuh-uh@nope.com> - 2025-12-05 11:11 -0800
    Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Jolly Roger <jollyroger@pobox.com> - 2025-12-05 19:59 +0000
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-06 00:08 +0000
        Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 17:24 -0700
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-12-06 22:51 +0000
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-07 01:25 -0700
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 22:11 +0100
          Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 22:24 +0100
            Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Andy Burns <usenet@andyburns.uk> - 2025-12-08 01:34 +0000
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Chris <ithinkiam@gmail.com> - 2025-12-08 08:13 +0000
              Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-28 17:14 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Alan <nuh-uh@nope.com> - 2025-12-28 20:55 -0800
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Tyrone <none@none.none> - 2025-12-29 15:12 +0000
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-29 15:04 -0700
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Hank Rogers <Hank@nospam.invalid> - 2025-12-29 17:52 -0600
                Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Hank Rogers <Hank@nospam.invalid> - 2025-12-29 18:45 -0600
    Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-05 21:17 +0100
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Jolly Roger <jollyroger@pobox.com> - 2025-12-05 22:17 +0000
        Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 17:04 -0700
      Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-07 21:13 +0100
  Re: How to test if your access point BSSID is in the highly insecure Apple WPS database Marian <marianjones@helpfulpeople.com> - 2025-12-05 17:55 -0700
    Re: How to test if your access point BSSID is in the highly insecure Apple WPS database "Carlos E.R." <robin_listas@es.invalid> - 2025-12-06 13:01 +0100

csiph-web