Ordinary WiFi can now identify you with near-perfect accuracy

(sciencedaily.com)

22 points | by jonbaer an hour ago ago

37 comments

  • upboundspiral an hour ago

    Unless we get legislation passed that bans this use in public and private spaces prepare for this to be combined with Flock et al to track your movements inside your house (already is being tested by some internet providers), track the moment you exit your house, track you along your route, track you inside all the business you visit.

    Unless we do something, this will be used to covertly break the fourth amendment.

    • moscoe 10 minutes ago

      Sadly, it’s too late. It’s quite clear we’re on track to a totalitarian surveillance state.

      Ring cameras recording your movements around the neighborhood.

      Flock (and other government) cameras recording all vehicle movements.

      Cell towers and WiFi APs recording device ids and movements.

      Recent legislation requiring driver monitoring systems in cars. Plus the fact that any EV can be remotely controlled and disabled.

      And now we have AI systems that can actually aggregate and correlate all this data.

      It’s over. We’re too far down this slippery slope, there’s no turning back now.

    • pessimizer 13 minutes ago

      > already is being tested by some internet providers

      I would say to never use a wireless router given to you by your ISP, and to install Openwrt on the one you do lose, but the government is absolutely chomping at the bit to ban all wireless routers whose firmware can be changed and to force you to use their (soon to be if not already backdoored) ones.

      • iamnothere 2 minutes ago

        I recommend not using wireless at all. Having a good wired home LAN removes a lot of headaches, especially if you like to experiment with alternative OSes.

    • montroser 33 minutes ago

      This would be extremely difficult to detect and enforce.

      • iamnothere 22 minutes ago

        It’s invasive enough that we will need to do something about it, even if perfect enforcement is not possible. 6G wireless already plans to include these features as well. The business model needs to be made unviable or illegal somehow, perhaps under anti-stalking grounds.

        Individuals may use this tech themselves, and businesses may use it on their own premises, which seems fine—the problem is with large scale deployments.

        • upboundspiral 17 minutes ago

          The Supreme court recently already ruled against warrantless mass surveillance along the lines you describe:

          https://www.aclu.org/press-releases/aclu-applauds-important-...

          What we need now is laws that turn this ruling into action and policy.

          • iamnothere 13 minutes ago

            That’s for the government, on fourth amendment grounds. But I also don’t want private companies doing this on a wide scale even for non-governmental use.

            • pessimizer 2 minutes ago

              It's also for government warrants on 4th Amendment grounds. It does not cover the government simply purchasing (or asking nicely for) the information from a willing Google, perhaps also in exchange for the Justice Department settling an antitrust action, or for an unrelated lucrative contract.

              Every liberal actually called you an extreme right-winger for suggesting that that was a problem in the government meeting weekly with every social media company making suggestions about who and what speech to ban. The brownshirts are already well-practiced.

          • pessimizer 7 minutes ago

            There have been virtually no restraints on the Executive Branch for nearly 25 years now. The way we elect Congresspeople now exclusively produces ones who have no interest in the risks that come from actual governance, and exclusively act on the interests of their sponsors.

            SCOTUS has ruled that tipping politicians is legal. Literally, not hyperbolically. Even if the Supreme Court couldn't be bribed like that (although they are eagerly and constantly bribed like that) because they don't have a fear of losing their jobs, Congress is the only court that can try a president for going against court judgements. Doesn't exist anymore.

      • upboundspiral 21 minutes ago

        The spirit of a hacker is not to ask whether it is hard, but whether it is valuable.

        I find protecting civil liberties valuable.

  • thataccount 18 minutes ago

    I came from the era before WiFi. One doesn't HAVE to have WiFi. Everybody keeps thinking they do. Same thing with cell phones. The world existed before all that, and it can exist just fine again without it.

    • kemotep 4 minutes ago

      Well if every business and home and public place has WiFi or Cellular technology with these capabilities it doesn’t really matter if you don’t they will still be able to use it to track you. This is why something has to be done to stop it.

      Radio transmission of data is over 100 years old we aren’t turning the dial back on that, but this one specific application of it to track people is and that’s the problem.

    • bcraven 7 minutes ago

      "Exist" is a low benchmark to hit.

      Very few people would be willing to trade in the opulence of today.

  • hollow-moe 25 minutes ago

    Can't wait to see clothes with some thin metal wires knitted with the fabric acting like a Faraday cage or disturbing the signal enough to blur the results

  • iamnothere 16 minutes ago

    Good time to invest in companies that make (extremely expensive) RF shielding paint and fine wire mesh.

  • neom 33 minutes ago
  • Shadowmist 34 minutes ago

    How do I wire this to Home Assistant?

  • mmooss 38 minutes ago

    For those seeking the source:

    > The researchers presented their results at the "ACM Conference on Computer and Communications Security" (CCS) in Taipei.

    This citation at the bottom might be the paper:

    Julian Todt, Felix Morsbach, Thorsten Strufe. BFId: Identity Inference Attacks Utilizing Beamforming Feedback Information. , DOI: 10.1145/3719027.3765062

  • mmooss 41 minutes ago

    > "By observing the propagation of radio waves, we can create an image of the surroundings and of persons who are present,"

    Notice that it doesn't matter if you are using Wifi. If you're in a city, I doubt there are many places that lack Wifi radio waves.

    Thank you to the researchers (seriously) for revealing this to the public rather than selling it to the highest bidder. Though I suspect that, given how obvious it is once you think about it - all these radio waves solve many problems of passive imaging - it's already known to some people.

    • im3w1l 26 minutes ago

      Wifi imaging has been a publicly known technique for years. I think the news is more how good it's gotten.

  • toomuchtodo an hour ago

    Are there any projects or products today available for monitoring heart rate and respiration without needing a smart watch using this technology?

    • khriss 20 minutes ago

      Heart rate, no, but monitoring breathing is possible using mmWave radar(eg 60 GHz Doppler radar nowadays, or the 5.8 GHz band earlier). Resmed S+ was probably the most well known, but it's been discontinued for a while now. If you search around, you can still find such devices.

    • forsalebypwner 24 minutes ago

      Yes actually, but I don't think it's technically allowed/legal in the US in the eyes of the FCC, not sure about other countries. It utilizes 77GHz FMCW, I got one for free but they retail for about $100. The part number is R77ABH1

      Edit: sorry, you said "using this technology" and I missed that - this doesn't uses the same tech

      • toomuchtodo 20 minutes ago

        No worries, I presume it’s only a matter of time with consumer grade wifi and machine learning.

    • dotancohen an hour ago

      No

  • im3w1l 30 minutes ago

    I'm personally bearish on privacy. As the cost of surveillance comes down we will see more and more actors able to conduct surveillance until even bored kids with pocket money and an afternoon can do it. Denying the """good""" guys the capabilities that all the bad guys have will be an absurdity.

    We will simply have to adapt to it.

    • ambicapter 20 minutes ago

      The convenient accelerationist take that lets you do whatever you want, all the time.

    • goda90 28 minutes ago

      How do we adapt?

      • iamnothere 20 minutes ago

        Never do anything that any group of people (or disturbed individual) might take issue with. Never accidentally date or marry an abuser. Never contest the absolute authority of whoever is in power. Simple enough, right?

        • RamRodification a minute ago

          Reminds me of that Michael Scott quote:

          Don't ever, for any reason, do anything, to anyone, for any reason, ever, no matter what, no matter where, or who, or who you are with, or where you are going, or where you've been, ever, for any reason whatsoever.

        • reorder9695 a minute ago

          "Oceania had always been at war with Eastasia."

      • im3w1l 19 minutes ago

        By creating a culture of live and let live. Maybe giving some activities legal protections that didn't use to need them in the past. Non-discrimination rules related to them. And being more careful than ever to not let a government be elected that would abuse all the information it now has on its citizenry. More democratic safeguards.

  • close04 41 minutes ago

    > These signals, known as beamforming feedback information (BFI), are transmitted without encryption, meaning that anyone within range can potentially read them.

    > By analyzing that information, the system can generate images of people from multiple viewpoints. Those images can then be used to determine a person's identity.

    This is the extent of the description of the magic sauce. Why are those images so unique that you can’t trick the algorithm? I can’t think of any EM based identification that can’t be tricked by adding layers of reflectors or absorbers in various points - a mask, special paint, etc.