When British programmers Alasdair Allan and Pete Warden took the stage at the Where 2.0 conference to unveil their work on iPhone location tracking, it was clear they had some big news on their hands. The duo outlined what they called "the discovery that your iPhone and 3G iPad [are] regularly recording the position of your device into a hidden file." Their findings started a firestorm of media coverage.
But as the details came to light, one researcher was left scratching his head—because he'd already made the same discovery last year.
Alex Levinson, 21, works at the Rochester Institute of Technology in western New York, and he has been studying forensic computing and working with Katana Forensics, which makes tools for interrogating iOS devices.
In a post on his blog, he explains that the existence of the location database—which tracks the cellphone towers your phone has connected to—has been public in security circles for some time.While it's not widely known, that's not the same as not being known at all.In fact, he has written and presented several papers on the subject and even contributed a chapter on the location data in a book that covers forensic analysis of the iPhone.
(One blogger reviewing the book in January mentioned the cell-tower data and says, "more and more you realize how much information Apple's mobile devices could contain and how valuable this could be for your investigation.")
IGNORING THE OBVIOUS
In his post, Levinson takes issue with the claim of "discovery." In fact, he told me by e-mail that Allan and Warden had apparently missed a whole area of existing research conducted by forensic analysts.
"It was a shock to me when this came out labeled as a 'discovery,'" he explains. "I watched thevideo, and they don't appear to be interested in the forensic side of this, which is honestly where the research lies."
Part of it seems to be a failure of researchers across different disciplines to plug into each others' work. As Levinson put it, "They basically built a bridge without turning to the civil engineers—I'm not the only one familiar with this stuff."
No comments:
Post a Comment