Apple and Google Introduce Cross-Platform Solution to Combat Unauthorized Tracking
Apple and Google have collaborated to introduce a groundbreaking feature called “Detecting Unwanted Location Trackers” (DULT), aimed at addressing privacy and safety concerns associated with Bluetooth tracking devices like AirTags.
This cross-platform solution alerts users on both iOS and Android if an unidentified tracking device is detected, regardless of the platform it’s paired with. Users receive notifications such as “Tracker traveling with you” on Android and “[Item] Found Moving With You” on iOS, allowing them to view the tracker’s identifier, play a sound to locate it, and access instructions to disable it. This initiative follows reports of malicious use of trackers, particularly in cases of stalking and abuse.
The development of DULT stems from a proposal unveiled a year ago by Apple and Google, incorporating community and industry input to establish industry specifications and best practices for manufacturers. The feature responds to concerns raised in a class-action lawsuit against Apple, alleging AirTags’ misuse as a stalking tool. In parallel, academic researchers have proposed cryptographic schemes like multi-dealer secret sharing (MDSS) to enhance privacy and safety in location tracking systems.
Additionally, Apple has backported a security fix for CVE-2024-23296, a vulnerability in the RTKit real-time operating system, to older versions of iOS, iPadOS, and macOS. This flaw, enabling attackers to bypass kernel memory protections, has been actively exploited in the wild. Patches are available for specific device models and operating system versions, accompanied by updates addressing other security vulnerabilities, including those in AppleAVD and the kernel, to prevent unexpected app termination or arbitrary code execution.
In summary, the joint effort by Apple and Google introduces DULT to combat unauthorized tracking, while Apple addresses security vulnerabilities across its ecosystem, reflecting a commitment to user privacy and safety in the face of emerging threats.
