658
I am a Tasker enthusiast and when I can automate something simple on my phone I like to. I set a simple task to turn off WiFi when my home network is not detected so my phone doesn't scan and report my location to businesses. However, this functionality is now nonexistent and the developer has to ask people not to one-star their app because it doesn't work. My phone is my phone and killing my ability to use it as such for whatever security theater Google is playing at is why I root my device. Anyone else still rooting for similar reasons?
I was under the impression that BSSID scanning was entirely passive, and that a phone that scans for beacons doesn't actually reveal itself to anyone.
It was in response to the Naomi Brockwell post she did on Twitter about businesses using WiFi, Bluetooth and Location Services to track you in public locations. You can Google it directly "NBTV Advice from Defcon" or this link: https://nbtv.substack.com/p/advice-from-defcon-turn-off-bluetooth
I get how it works with wifi connections, and Bluetooth scanning (since that's a peer to peer protocol that needs to broadcast its availability), and obviously the OS-level location services, but I'm still not seeing how seeing wifi beacons would reveal anything. For one, pretty much every mobile device OS now uses MAC randomization so that your wifi activity on one network can't be correlated with another. And for another, I think the BSSID scanning protocol is listen only for client devices.
Happy to be proven wrong, and to learn more, but the article linked doesn't seem to explain anything on this particular supposed threat.
This is my understanding as well, but also not an expert.