this post was submitted on 04 Apr 2024
96 points (100.0% liked)

Technology

68244 readers
3774 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago (1 children)

Bluetooth could probably use public key crypto, like the new passkey authentication websites are moving toward. Basically, you'd pair once (which gets you the public key), and then the broadcast "id" would change every time it turns on based on that internal private key.

And yeah, I'm not a fan of devices broadcasting their type. That could make me a target for theft if someone scans for what devices I have. I haven't read through the spec, but hopefully that info is only broadcast when pairing (and I'm fine with that since it's opt-in).

One big one is that if you can pair to the device, you can get its secret, and from then on, you can uniquely identify to it

Not necessarily, they don't need to be able to generate ids, just verify them.

Even if it's required for some reason, it could generate a new keypair every time you pair it, and Bluetooth devices could store some number of keys (say 3) for paired devices.

It permits obtaining a location fix rapidly, and permits doing so when GPS reception isn't functioning, like indoors.

How often do you need that though? The only times I feel like I really need location are:

  • using a mapping service - need accuracy within a few meters - GPS is fine
  • looking for a lost item - I probably know where it is within a few meters (in my house, car, or workplace) - could use RFID and triangulate
  • looking for someone - a few meters or an address is fine - I can just call them, or they can go outside for better GPS signal
  • stolen item - I'm not going to go pick it up, and I doubt the police would either; insurance is a better option here

So I really don't see a reason why I'd need hyper-accurate location info.

I generally disable location access in apps I use, I keep Bluetooth off unless I'm actively using a Bluetooth device, and I never get those tracking tags because I don't want to be tracked. I haven't had a problem where I wished I did things differently, so I'm honestly unsure what actual problem it's solving, and the potential for abuse is way too high (e.g. more private data slurped up for advertising, like ads for a shop you recently visited).