Thread by @verovaleros

Now at @ekoparty, researcher @Netxing presenting on the misuse of apple airtags with project Amini. #EKO2022 #privacy #vigilancia

Apple airtags are small, low cost, and have three different technologies that allow for very precise location tracking. #EKO2022

Unfortunately #airtags are used for tracking people without their consent; mostly to track women. They can fit in many places, specially fitting well under vehicles.

Many attackers are selling fake airtags without the sound.. and more expensive. #EKO2022

Airtags have three technologies: NFC, bluetooth and ultra wide band. NFC is to register the device,
BLE is to locate through other apple devices, and ultra wide band is to have precise location. #EKO2022

AirTags constantly send advertising packets. What do they send on these packets? Apple device id, the type of apple service, and a public key used to identify the owner of the device. #EKO2022

Project Amini allows to find airtags. Even airtags thay are not enabled. We can use tools to spoof the airtag and make the potential attacker believe the airtag is at a different location. With HCI tools in Linux and with @flipper_zero #EKO2022

Using @flipper_zero to spoof airtags! Crazy. #EKO2022

Although AirTags are the most popular, the problem also applies to other technologies such as Tile and others. #byelection2022