Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Privacy

Apple, Google Propose Standard to Combat Misuse of Location-Tracking Devices

Apple and Google propose new industry specification for Bluetooth location-tracking devices, to prevent unwanted tracking.

Apple Google location tracking standard

Apple and Google this week submitted a draft industry specification aimed at preventing unwanted location tracking.

The initiative targets accessories with built-in location-tracking capabilities that use Bluetooth Low Energy (LE) as the transport protocol and which are small enough to be difficult to discover – such as Apple’s AirTag product.

The document proposes a set of best practices and protocols that manufacturers of such accessories should follow to ensure that their devices are compatible with unwanted tracking detection and alerts on mobile devices.

The initiative, the tech giants say, is meant to protect the privacy of individuals from unwanted tracking for nefarious purposes, including harassment and theft.

“Formalizing a set of best practices for manufacturers will allow for scalable compatibility with unwanted tracking detection technologies on various smartphone platforms and improve privacy and security for individuals,” the draft document reads.

Additionally, the initiative proposes that individuals are alerted when a location tracker that has been separated from the owner’s device is traveling with them and that they are provided with means to identify and disable the tracker.

Per the proposed requirements, the location-tracking accessories shall advertise using Bluetooth LE, must support at least one non-owner unencrypted connection, and shall log internally when its location was shared with the owner.

“The first-of-its-kind specification will allow Bluetooth location-tracking devices to be compatible with unauthorized tracking detection and alerts across Android and iOS platforms. Samsung, Tile, Chipolo, Eufy Security, and Pebblebee have expressed support for the draft specification,” the tech giants say.

Advertisement. Scroll to continue reading.

Before submitting the proposed specification to the Internet Engineering Task Force (IETF), Apple and Google requested input from manufacturers and safety and advocacy groups.

The two companies encourage all interested parties to review the draft proposal and provide feedback over the next three months. A production implementation of the specification, which will be supported by both Android and iOS, is expected to be released by the end of the year.

Related: 40 States Settle Google Location-Tracking Charges for $392M

Related: Flaws in Apple Location Tracking System Could Lead to User Identification

Related: Researchers Devise New Type of Bluetooth LE Relay Attacks

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

Cybercrime

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of...

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Privacy

Many in the United States see TikTok, the highly popular video-sharing app owned by Beijing-based ByteDance, as a threat to national security.The following is...

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...