Osman@adamshostack@infosec.exchange were you on WiFi? If so, maybe IP GeoLocation from your cellular or WiFi connection? Either back, in iOS there’s a “Background App Refresh” knob you’ll want to disable.
Adam Shostack :donor: :rebelverified:@osman@hachyderm.io Does background app refresh allow arbitrary net activity? I thought 💭
t went through some apple infra but don’t recall why I think that 🤬
GeneralX ⏳
@adamshostack@infosec.exchange @osman@hachyderm.io
"For apps that support one of the Background Modes capabilities, the system launches or resumes the app in the background to handle events associated with those capabilities. For example, the system might launch or resume the app to respond to a location update or to perform a background fetch."
https://developer.apple.com/documentation/uikit/about-the-background-execution-sequence
Osman@adamshostack@infosec.exchange Nope. Arbitrary execution. :(
And it is enabled by default for any new app you install. this is why some #privacy folks advocate to disable it at iOS level instead of per-app.
Don’t forget to sinkhole your DNS to kill even more weird telemetry. Suggestions: https://www.privacyguides.org/en/dns/