iSpy: Apple is Secretly Recording Your Location History

iSpy something red. iSpy something blue. iSpy Apple and they’re spying on you. Two security researchers, Alasdair Allan and Pete Warden, announced yesterday in an article on O’Reilly Radar that your iPhone or 3G iPad has been secretly ?recording the position of your device into a hidden file. Ever since iOS 4 arrived [in June of 2010], your device has been storing a long list of locations and time stamps. We’re not sure why Apple is gathering this data, but it’s clearly intentional, as the database is being restored across backups, and even device migrations.? Both Allan and Warden have come up with an application that maps the information that your Apple device is tracking about your location history.

What is alarming about this news is that the hidden file is both unencrypted and unprotected, and thus can be accessed by anyone who is in contact with any of the machines that you’ve used to sync your device to – which is a direct breach of user’s privacy and a threat to your security. While the availability of the data may not be an immediate cause for concern, Pete Warden says that it could potentially be used by “a jealous spouse, or a private detective ? with access to your phone or computer to get detailed information about where you’ve been.” Although mobile networks already record the location of cell phones, this information is only available to certain organisations through mandate of a court order. However, the system that the Apple iPhone and iPad 3G are using appear to record the data whether or not the user agrees or even acknowledges that it is being created.

Apple has declined to comment about the hidden file at this time, but to safeguard your information it is suggested that you encrypt your backups by clicking on your device within iTunes, then checking “Encrypt iPhone Backup” under the “Options” tab.

 

 

Photo by Alasdair Allan via O’Reilly Radar

1 comment for “iSpy: Apple is Secretly Recording Your Location History

Comments are closed.