Tile Trackers Have Design flaws That Enable Stalking

Researchers at the Georgia institute of Technology have uncovered serious design flaws in Tile location trackers. These weaknesses could allow someone to stalk the device’s owner.

Wired reported that Akshaya Kumar, Anna Raymaker, and Michael Specter from Georgia Tech identified issues with both the Tile devices themselves and how they connect to Life360, Tile’s parent company.

The researchers found that each Tile tag broadcasts an unencrypted MAC address and a unique ID. Anyone with a Bluetooth device or radio-frequency antenna nearby can pick up this signal. This allows them to track the tag – and, consequently, the tag’s owner – as they move. Essentially,your location isn’t private.

This isn’t a theoretical risk.A resolute stalker with technical skills could exploit these vulnerabilities to monitor someone’s whereabouts. the lack of encryption makes it surprisingly easy to intercept and decode the tracking signals. It’s a meaningful privacy concern for anyone using Tile to track belongings or, more worryingly, for personal safety.

Life360, which acquired Tile in 2021, has faced criticism before regarding its data privacy practices. This new research adds another layer of concern. While Tile offers features intended to prevent misuse, like alerting users to unknown trackers, these safeguards aren’t foolproof.The researchers demonstrated how easily these alerts can be bypassed.

The team recommends that Tile implement stronger encryption and authentication measures to protect user privacy. They also suggest improving the unwanted tracking alerts to make them more reliable and harder to circumvent. Until these changes are made, users should be aware of the potential risks and take steps to protect themselves.