RLKingSoftware wrote:
There is no reasonable expectation of privacy with a broadcast SSID […]
I strongly disagree with this. The collection of SSIDs that the user’s device associates with is a fairly accurate fingerprint of that user. Moreover, that fingerprint is persistent, correlatable between apps, and can’t be reset by the user. Those are all Bad Things™ from a privacy perspective.
I totally agree that there’s a balance to be struck between privacy and utility here, but arguing that there’s no privacy case to answer is naïve.
SolarCat wrote:
(which is why all of my personal networks don't broadcadt their SSID)
Which is kid sister security IMO because all APs broadcast their BSSID, which is much more identifying (typically it’s the MAC address of the AP). Notably,
CNCopyCurrentNetworkInfo
also gives you the BSSID )-:
maverick808b wrote:
I just don't get it, how can a user's exact location 24/7 from GPS be permitted, yet broadcast SSIDs and BSSIDs are somehow considered totally off limits!?
It’s because that access is granted by explicit user consent and that consent can be easily revoked via the user interface.
I want to reiterate that I think the behaviour exhibited by the current iOS 9 beta is unacceptable, and I’m hopeful that things will improve before GM. Alas, I can’t go into specifics at this time.
Share and Enjoy
—
Quinn "The Eskimo!"
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
let myEmail = "eskimo" + "1" + "@apple.com"