Bluetooth Stalking: How Apple and Google are Fighting Back

The rise in tracking devices such as the Apple AirTag has helped thousands around the world to track lost luggage, figure out where car keys have been placed, and even identify if airport staff have stolen gifts from abroad. However, the rise in Bluetooth stalking is raising concerns about personal safety, so Google and Apple have announced a partnership that will look to prevent this. What challenges does Bluetooth stalking present, what will the partnership do, and what challenges does this present to engineers?

 Developed by Apple, the AirTag is a tracking device. 

What challenges does Bluetooth stalking present?

Over the past few years, the introduction of asset trackers such as the Apple AirTag has presented consumers with numerous benefits. While many of these devices are commonly attached to everyday household items such as keys and wallets, they have also played a key role in tracking luggage. One area in particular where such asset trackers have been massively beneficial is discouraging theft from airport staff who have been caught multiple times by authorities thanks to owners placing tracking devices discretely in their luggage.

However, as with all new discoveries and engineering developments, there will always be those who find criminal applications. In the case of asset trackers, the prime use for such devices is stalking, and there have been numerous instances of victims finding asset trackers on their person, in their bag, or on their car. 

A stark example of this technology's use can be found in a New York Times article. A traveller had placed an Apple AirTag in her bag and was able to assist the Okaloosa County Sheriff’s Office in Florida to identify an airport worker who had stolen over $16,000 in goods from passenger luggage. The perpetrator, Giovanni De Luca, was a 19-year-old baggage handler at Destin-Fort Walton Beach Airport. The woman’s bag, which contained clothes, makeup, and other items worth $1,648, never arrived at her destination. Two weeks later, she received a notification that her AirTag was active on a street in Mary Esther, a town near the airport. Investigators matched the location to De Luca's address, leading to his arrest. 

For those who fail to find these tracking devices, it is possible for criminals to find out where victims live, where they keep their vehicles, and even identify when their valuables have been left alone (thus providing the opportune moment to burgle). 

But it also turns out that criminals don’t always need to place a tacker on victims they want to stalk; even standard Bluetooth devices can be used for stalking. While the range of Bluetooth may be limited, any device that is actively using Bluetooth will leave a very specific signature that any receiver can pick up. Thus, it is possible for criminals to identify a number of Bluetooth devices owned by a user and then determine the direction of that device to track the user.

Apple and Google to team up in Solving the Bluetooth stalking challenge

Recognising the challenges faced with Bluetooth stalking, Apple and Google have recently announced a partnership that will aim to develop industry-standard methods for asset-tracking manufacturers so that Bluetooth stalking can be minimised.

One major challenge Bluetooth tracking faces is that as different manufacturers have their own designs and protocols, trying to allow devices from other manufacturers to detect the presence of trackers can be complex. For example, Apple users are alerted to AirTags that are near them but not owned by them, whereas Android users have historically been unable to see these AirTags. However, recent software changes have allowed Android devices to see these AirTags now, but this software update had to be developed by Apple.

As such, Apple and Google are working together to create a series of industry standards that will lay out best practices when developing asset trackers, including measures to prevent devices from being used for stalking. The proposal has also received backing from multiple tech companies, including Samsung, Tile, and Chipolo, and a draft of the proposal has been submitted to the Internet Engineering Task Force.

“We built AirTag and the Find My network with a set of proactive features to discourage unwanted tracking — a first in the industry — and we continue to make improvements to help ensure the technology is being used as intended. This new industry specification builds upon the AirTag protections, and through collaboration with Google results in a critical step forward to help combat unwanted tracking across iOS and Android.” - Ron Huang, Apple’s vice president of sensing and connectivity.

The gravity of the issue is underscored by experts in the field. As Adam Dodge, CEO of digital safety education company EndTAB and a member of the World Economic Forum’s Digital Justice Advisory Committee, articulated in an interview with CNBC, “The problem with Bluetooth trackers … is there’s no way to prevent a victim from being stalked by one of these devices because they don’t control it. They don’t have any access to it. … Whether it’s a creep at the bar or an angry ex-partner, this is a new avenue that they can use to non-consensually track somebody without their knowledge.”

This chilling insight reveals the extent to which privacy can be compromised by these seemingly innocuous devices. It reinforces the critical need for industry leaders like Apple and Google to tackle this problem head-on. That's precisely why the new partnership between these tech giants, aimed at establishing industry-standard methods to minimize Bluetooth stalking, is such a pivotal development in the realm of digital safety.

What challenges does this present to engineers?

Until recently, engineers designing new products would primarily be focused on functionality, reliability, and safety. However, as technology continues to be integrated into everyday life, engineers are faced with a whole new range of considerations, including privacy and ethics. For example, the introduction of AI has allowed all kinds of new applications to be developed, but as AI learns from data sets provided by engineers, it is possible for them to inherit biases. This is especially problematic for AIs used in employment and diagnostics, where discrimination is unethical and illegal.

In the case of tracking devices, engineers need to consider the implication of their designs and how they can best integrate methods to protect those being tracked. At the same time, engineers also need to consider the data being gathered and whether that data can put users at risk. This is becoming increasingly important in the field of IoT, where devices fitted with microphones and cameras can be used for spying, hence the need for strong security practices.