Beware of find-my-phone, Wi-Fi, and Bluetooth, NSA tells mobile users

Like a lot of families, we have ‘Find My iPhone’ turned on so when the inevitable happens and someone leaves their device(s) on a bus/taxi/train we can all see where it is and wipe if irretrievable. Location Services come with risks though. Time to create your own threat model and decide if it’s worth leaving them set to ‘on’…:

The National Security Agency is recommending that some government workers and people generally concerned about privacy turn off find-my-phone, Wi-Fi, and Bluetooth whenever those services are not needed, as well as limit location data usage by apps.

“Location data can be extremely valuable and must be protected,” an advisory published on Tuesday stated. “It can reveal details about the number of users in a location, user and supply movements, daily routines (user and organizational), and can expose otherwise unknown associations between users and locations.”

NSA officials acknowledged that geolocation functions are enabled by design and are essential to mobile communications. The officials also admit that the recommended safeguards are impractical for most users. Mapping, location tracking of lost or stolen phones, automatically connecting to Wi-Fi networks, and fitness trackers and apps are just a few of the things that require fine-grained locations to work at all.


Original article here