XPost: alt.comp.os.windows-10, alt.comp.microsoft.windows, alt.c   
   mp.os.windows-11   
   From: marianjones@helpfulpeople.com   
      
   R.Wieser wrote:   
   > In short, you need to access *other* publicly available databases to *try   
   > to* link a BSSID to a specific person.   
      
   Essentially...   
   1. Every home in the USA is tied to an owner in a public database   
   2. Every BSSID in every home in the USA is in the Apple public database   
      
      BSSID <-> GPS <-> Address <-> Owner   
      
   Only an extremely unimaginative person wouldn't be able to connect the dots   
   (which is why the researchers said that the Apple implementation is flawed)   
      
   Remember, Apple's WPS is DIFFERENT than how Google/Mozilla do their WPS.   
   That DIFFERENCE is what the security researchers pointed out so forcefully.   
      
   Apple makes that task of correlating every name to every location trivial   
   because there are absolutely no controls on the Apple WPS database.   
      
   None.   
   You can download the entire Apple database using basic commands.   
      
   Basically, you get every BSSID:LOCATION pair in the world.   
   (Actually every BSSID:LOCATION in Apple's WPS but that's close to all.)   
      
   The problem is two fold:   
   1. Apple's WPS implementation has no controls.   
   2. Apple won't let you opt out.   
      
   That's what I've been saying for weeks now, so if people don't get it after   
   having read the papers and run the scripts, then they'll never ever get it.   
      
   Google's WPS has controls; Apple's WPS does not.   
   Mozilla's WPS allows you to opt out with certainty; Apple's WPS does not.   
      
   This isn't speculation.   
   It's fact.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)