XPost: misc.phone.mobile.iphone, alt.internet.wireless   
   From: mariond@facts.com   
      
   Marion wrote:   
   >    However, most people are rude so billions of other people's   
   >    devices will still collect and upload nearby router fingerprints   
   >    (because rude people are everywhere), so neither platform gives   
   >    full protection from rude people uploading Wi-Fi fingerprints.   
      
   Notwithstanding most iOS/Android owners are stupid and rude (not me, but   
   most are) if we ignore that observation of the fact most people are stupid,   
   then in purely technical terms, to combat those people (who will destroy   
   your privacy), this applies for the access point of your home router...   
      
   1. Autoconnect behavior   
      
      A. iOS   
         1. Autoconnect: Enabled by default for saved networks.   
         2. Control: No per-network autoconnect toggle; you must "Forget   
            This Network" or disable Wi-Fi entirely.   
      
      B. Android   
         1. Autoconnect: Enabled by default for saved networks.   
         2. Control: Per-network "Auto-connect" toggle available; trivial   
            to disable without forgetting the network.   
      
      Note that again and again, Android is far more private than iOS.   
      
   2. Evil twins (same SSID/security)   
      
      A. iOS   
         1. Exposure: Will attempt to connect if SSID/security match and   
            autoconnect is on.   
         2. Control: No granular per-network autoconnect toggle; defense   
            requires forgetting the network or disabling Wi-Fi.   
      
      B. Android   
         1. Exposure: Same base risk if SSID/security match.   
         2. Control: Disable autoconnect per SSID; developer options for   
            stronger MAC randomization reduce device traceability.   
      
      Note that again and again, Android is far more private than iOS.   
      
   3. Wi-Fi scanning, saving, uploading (router fingerprints/BSSIDs)   
      
      A. iOS   
         1. Scan: Occurs when Location Services is on.   
         2. Save: BSSIDs cached locally.   
         3. Upload: Sent to Apple when Location Services is on.   
         4. Control: No toggle to stop scanning/upload short of disabling   
            Location Services globally.   
      
      B. Android   
         1. Scan: Controlled by "Wi-Fi scanning" in Location settings.   
         2. Save: BSSIDs cached locally.   
         3. Upload: Controlled by "Location Accuracy."   
         4. Control: User can disable Wi-Fi scanning and/or Location   
            Accuracy to avoid upload while keeping other features.   
      
      Note that again and again, Android is far more private than iOS.   
      
   4. MAC address privacy   
      
      A. iOS   
         1. Private Wi-Fi Address: Per-SSID randomized MAC.   
         2. Control: No per-connection randomization.   
      
      B. Android   
         1. Per-SSID randomization: Supported.   
         2. Per-connection randomization: Available in developer options;   
            stronger device identity protection.   
      
      Note that again and again, Android is far more private than iOS.   
      
   5. Hidden SSID and _nomap   
      
      A. Hidden SSID   
         1. Scan: Passive SSID discovery is eliminated; detection relies on   
            active probes or association. BSSID remains visible.   
         2. Upload: Can still be uploaded when discovered; hiding does not   
            prevent upload.   
      
      B. _nomap   
         1. Effect: Does not stop scanning/saving/upload; it signals do-not-   
            index in location databases. Indexing is affected, not capture.   
      
   I note that this post crosses into the domain of your router setup.   
   Most people don't know what I know so their router is in the database.   
      
   Mine isn't in the database.   
   See my prior comments about only stupid people being in the database.   
      
   Also, most people rudely upload everyone else into the database.   
   I don't.   
      
   Again, see my prior comments about stupid people destroy your privacy.   
   Unless you're intelligent about protecting it.   
   --   
   The difference between intelligent & stupid people is in what they do.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)