WaveDigger: Dig into wireless signals to discover their physical locations

1 day ago (github.com)

Looks like an open version of SkyHook from way back in 2003: https://en.wikipedia.org/wiki/Skyhook_Wireless

For a while they had a paid program, I had a Windows Mobile app I could run with an external GPS dongle that would record wifi APs and location, upload to skyhook, who would occasionally cut me a check for my trouble. I made tens of dollars!

  • Ohhh, there was money to be made with war driving? I just got points on a German bb forum.

I started rotating my BSSID weekly after I learned Apple and Google abused it to track the location of people and devices.

Permanent hardware or software IDs, such as the Windows GUID or machine-id on Linux (systemd) are inevitably abused for surveillance sooner or later.

  • You mean, they used it so people trying to use their maps apps didn't have to wait several minutes for a cold GPS fix?

  • You have all the good intentions, but since no one else does this around your location, I don't think you're achieving anything.

Interesting, wondering why Apple doesn't restrict the queries to its server using a certificate that would be pinned on the devices, etc, so at least you would need a legit iPhone/Mac to be able to do a query?

  • Are you imagining some certificate unique to each device? What would prevent someone copying it?