Surveilling the Masses with Wi-Fi Positioning Systems

This Black Hat conference talk explores how Wi-Fi Positioning Systems used by mobile operating systems for geolocation pose significant privacy risks. Discover how Apple's system specifically creates a global privacy threat affecting hundreds of millions of people. Learn how iOS devices transmit hardware identifiers to Apple when geolocating, and how this process can be exploited by adversaries to recreate Apple's Wi-Fi geolocation database without prior knowledge. Examine how repeated queries to this system can track Wi-Fi router movements over time, revealing sensitive information like home relocations, family vacations, and even movements related to natural disasters such as the 2023 Maui wildfires. More concerning, see evidence of troop and refugee movements in conflict zones like Ukraine and Gaza. The 28-minute presentation by Erik Rye, Researcher at the University of Maryland, concludes with responsible disclosure efforts and recommendations for enhancing privacy protections in Wi-Fi Positioning Systems.