AirTags vs. privacy and security

[jchuzi]

Everyone concerned with privacy and safety should be aware of this: Are Apple AirTags Being Used to Track People and Steal Cars?

[kimmer]

This is very scary!

[jchuzi]

Here's a followup article: The AirTag stalking problem is only partially Apple's problem, it's mostly law enforcement's

[jchuzi]

Here's an interesting article: Apple's AirTag uncovers a secret German intelligence agency. And, if that's not enough, Army wife uses AirTags to track shady movers

[Xairbusdriver]

PCS "movers" are contractors who are the low bidders. Competent companies (and their workers) are too expensive. "Bid low and confuse the 'customer'!"

She is a whistleblower and deserves to be rewarded for doing so. She brought this huge vulnerability to their attention before the Bad Guys thought of it.

Or she'll be charged with 'hacking of Government property' and called a criminal like the journalist in MO.

• arsTECHNICA
• The Verge

[Xairbusdriver]

"Missouri" (actually the Cole County Prosecutor’s Office) has declined to prosecute the newspaper journalist who reported that the state website exposed personal information of more than 100,000 teachers. (See links in Post #4 above) Actually, a "few" more records were "exposed" and for quite a few years.

Mallory McGowin, the chief communications officer for the state’s Department of Elementary and Secondary Education (DESE). McGowin told police the website weakness actually exposed 576,000 teacher Social Security numbers, and the data would have been publicly exposed for a decade.

The State Police determined that the security for the web site had been assigned to the Office of Administration’s Information Technology Services Division (ITSD), which the governor’s office controls directly, back in 2009. I have not yet seen any mention of an apology from the Governor nor anyone in his administration. Nor have I heard of any training programs for the ITSD. They may be waiting for the selection of new management...

Source: Krebs on Security