Guide to the TechWeb Network


The InformationWeek -- Blogs
Over The Air

Mobility Breifing Center -- Sponsored by Windows Mobile
Topics:   Mobile

  • Email this page E-mail this page
  • |  Print this page Print this page
  • |   Bookmark and Share

How To Convince An iPhone It's In Ethiopia


Posted by Richard Martin, Apr 16, 2008 06:15 PM

Among the cool iPhone features touted by Apple is its "self-localization" ability: Turn it on, and it tells you where you are! Turns out, though, it's a simple matter to phool an iPhone.

The iPhone determines its physical location by calculating the relation to a nearby Wi-Fi access point. Using the Wi-Fi Positioning System (WPS) from Skyhook Wireless for its popular Maps application, the device simply detects a nearby hotspot and sends that information to the Skyhook servers. Based on the physical location information returned by Skyhook, the iPhone then computes its location.

Apparently having some extra time on their hands, a team of researchers under Professor Srdjan Capkun of the ETH Zurich/Swiss Federal Institute of Technology figured out that with a laptop, a Wi-Fi transmitter, and a database of hotspots, they could convince an iPhone that it's pretty much anywhere. They got an iPhone in Zurich to calculate its location as New York City.

"First, access points from a known remote location were impersonated," says a release from the institute. "Second, signals sent by access points in the vicinity were eliminated by jamming."

Sounds pretty easy. "Given the relative simplicity of the performed attacks," noted Capkun, "it is clear that the use of WLAN-based public localization systems, such as Skyhook's WPS, should be restricted in security and safety-critical applications."

That settles it. Next time I'm caught in an avalanche, I won't be whipping out my iPhone.

« The Unconference For When Oil Costs $120 Per Barrel | Main | Digium's Open Source Voice Solution »



Tomorrow's CIO: Do you have what it takes?
Find out at the 2008 InformationWeek 500 Conference
Sept. 14-16, St. Regis Resort, Monarch Beach, Calif.


Sign up now for the weekly InformationWeek Blog Newsletter.


This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.