Idea: Some way for Android phones to participate in "Find My" beacon uploads

seemoo-lab / openhaystack

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

https://owlink.org

GNU Affero General Public License v3.0

8.03k stars 428 forks source link

Idea: Some way for Android phones to participate in "Find My" beacon uploads #154

Open luke-jr opened 1 year ago

luke-jr commented 1 year ago

Very few Apple devices in my area. It would be nice if I could opt-in my Android device(s) to submit "Find My" beacons to Apple's network.

Bonus feature ideas:

an option to submit only my own, or any/all seen
geofencing to only submit when I'm not at/near home
perhaps make GPS coordinates "fuzzy" so as to avoid too precise positioning of my phone

luke-jr commented 1 year ago

(Actually, for the "only submit my own" mode, it could just submit the beacons directly to a non-Apple server...)

mrx23dot commented 1 year ago

After reverse engineering the apple tag report protocol it should be possible, the question is it authenticated or anonym.

biemster commented 1 year ago

To my understanding reporting beacons need 1) A signed in iDevice. This is also required for obtaining one's own reports, which is not yet reversed enough to do on non-Apple hardware (because of Anisette data and search-party-token) 2) A signing key from the hardware key store in iDevices, which is connected to the signed in session. To my best knowledge there is no active research how to generate valid ones of those.

There is a bit of research into 1) in for example AltStore (and #63), and 2) is not useful without having full 1), so there seems to be a long road ahead for this.