Skip to Main content Skip to Navigation
Journal articles

Discontinued Privacy: Personal Data Leaks in Apple Bluetooth-Low-Energy Continuity Protocols

Guillaume Celosia 1 Mathieu Cunche 1
1 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
Inria Grenoble - Rhône-Alpes, CITI - CITI Centre of Innovation in Telecommunications and Integration of services
Abstract : Apple Continuity protocols are the underlying network component of Apple Continuity services which allow seamless nearby applications such as activity and file transfer, device pairing and sharing a network connection. Those protocols rely on Bluetooth Low Energy (BLE) to exchange information between devices: Apple Continuity messages are embedded in the pay-load of BLE advertisement packets that are periodically broadcasted by devices. Recently, Martin et al. identified [1] a number of privacy issues associated with Apple Continuity protocols; we show that this was just the tip of the iceberg and that Apple Continuity protocols leak a wide range of personal information. In this work, we present a thorough reverse engineering of Apple Continuity protocols that we use to uncover a collection of privacy leaks. We introduce new artifacts, including identifiers, counters and battery levels, that can be used for passive tracking, and describe a novel active tracking attack based on Handoff messages. Beyond tracking issues, we shed light on severe privacy flaws. First, in addition to the trivial exposure of device characteristics and status, we found that HomeKit accessories betray human activities in a smarthome. Then, we demonstrate that AirDrop and Nearby Action protocols can be leveraged by passive observers to recover e-mail addresses and phone numbers of users. Finally, we exploit passive observations on the advertising traffic to infer Siri voice commands of a user.
Document type :
Journal articles
Complete list of metadatas

Cited literature [57 references]  Display  Hide  Download

https://hal.inria.fr/hal-02394619
Contributor : Mathieu Cunche <>
Submitted on : Wednesday, December 4, 2019 - 7:00:31 PM
Last modification on : Wednesday, July 8, 2020 - 12:43:31 PM
Document(s) archivé(s) le : Thursday, March 5, 2020 - 7:55:18 PM

File

popets-2020-0003.pdf
Files produced by the author(s)

Identifiers

Citation

Guillaume Celosia, Mathieu Cunche. Discontinued Privacy: Personal Data Leaks in Apple Bluetooth-Low-Energy Continuity Protocols. Proceedings on Privacy Enhancing Technologies, De Gruyter Open, 2020, 2020, pp.26 - 46. ⟨10.2478/popets-2020-0003⟩. ⟨hal-02394619⟩

Share

Metrics

Record views

336

Files downloads

771