XPost: comp.mobile.android, alt.comp.os.windows-10   
   From: confused@nospam.net   
      
   Roger  wrote:   
      
   > On Mon, 11 Nov 2024 16:19:28 -0000 (UTC), Andrews   
   >  wrote:   
   >   
   >>4. Instead of relying on signal strength measurements, Wi-Fi RTT   
   >>   with FTM measures the time-of-flight (ToF) between an RF packet   
   >>   sent from your phone to several nearby APs. While Wi-Fi RTT with   
   >>   FTM worked over both the standard 2.4 & 5GHz bands, it was never   
   >>   widely deployed in the field, so you¢ve probably never used it   
   >   
   > This may be a silly question but why would a phone be sending   
   > anything to APs that it doesn't know and therefore cannot use?   
   > --   
   > Roger   
      
   https://par.nsf.gov/servlets/purl/10314806   
   7 Conclusion In this paper we performed the first privacy analysis of Wi-Fi   
   Fine Timing Measurement (FTM) as defined in IEEE802.11mc. We identified   
   numerous weaknesses allowing a passive observer to recover the distance   
   measured by any client, and consequently perform localization. Furthermore,   
   we identified flaws in Wi-Fi FTM MAC address randomization, presented   
   techniques to fingerprint stations with firmware-specific granularity, and   
   identified practical scalability limitations. Altogether, these findings   
   allow an adversary to localize and track individual clients. With the need   
   for a privacy-preserving positioning system, we presented and evaluated a   
   hyperbolic localization system with meter-level accuracy. Our design hides   
   the presence of a client, leverages existing Wi-Fi FTM infrastructure,   
   requires no hardware changes, and improves overall scalability. Finally, we   
   discussed countermeasures and privacy recommendations for Wi-Fi FTM and   
   Wi-Fi Next Generation Positioning.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)