Security & privacy in the Tile tracking system: the first (public) security analysis of its protocol. 🐾🗺️🎯👨🏻‍💻🛠️

Security researchers Akshaya Kumar, Anna Raymaker, and Michael Specter from the Georgia Institute of Technology released the first public comprehensive security analysis of Tile’s Bluetooth tracking system.

The Tile Protocol is a Bluetooth-based communication system used by Tile tracking devices to locate lost items within a 30–100 meter (100–300 foot) range by connecting to a smartphone app. When out of range, it leverages a “crowd GPS” network of other Tile users to update locations and has been integrated into Amazon’s Sidewalk network.

Apparently, Tile generates exactly 8,640 rotating Bluetooth identifiers per device - one every 15 minutes for 90 days - and then reuses the exact same set again. So if someone records all your Tile’s signals over three months, they can recognize and track your device indefinitely.

Hell of a research - full of details and insights into the second-biggest tracking system in the world. Enjoy the read!

More details:

Security and Privacy Analysis of Tile’s Location Tracking Protocol [PDF]: https://arxiv.org/abs/2510.00350

Subscribe now

原始链接: https://it4sec.substack.com/p/security-and-privacy-in-the-tile
侵权请联系站方: [email protected]

相关推荐

换一批