dakhnod/FakeTag

Is there an end-to-end description?

klaernie opened this issue · 10 comments

Could you please provide an end to end example how you integrated your mailbox sensor?

I for one would be very happy to get a working mailbox sensor and status updates into my home assistant instance.

Thanks and nice work!

Hi,

I would love to help you with this, sadly there is a bit of infrastructure involved that I am not willing to make public.
Essentially, here is the whole structure:

Mailbox sensor -> some random iphone -> apple cloud -> openhaystack server running on a mac -> code fetching and decrypting reports -> cron-script fetching and decoding the mailbox sensor data -> openhab.

Since all of the components would allow for easily making undetectable trackers I prefer to not just put that information out there.

I am willing to help you with this though, so if you have any questions here I will gladly answer them.

You should start off by getting openhaystack to work with an ESP32 or nRF boards, we can take care of the rest after that.

utya commented

Could you show the line in the code, where you put info from mailbox?

That's done by another piece of code that is not public. Sorry.

There are already papers on creating undetectable find-my network trackers.

https://dl.acm.org/doi/10.1145/3463676.3485616

This has been public for 2 years I do not believe your code would cause any real security vulnerability

If it's all public you shouldn't need my code. I am open to answering questions.

@darthnithin it's not an issue of public knowledge, it's an ethical hacking issue.

Late to the party, but couple questions:

  • How often does your cronjob fetches reports from apples servers?
  • how do you send notifications to your phone once a new report with changed value comes in? I'm not familiar with OpenHab there which you mentioned.

Thanks

@rkreutz By now I am using node-red for all the faketag stuff.
It fetches reports for all airtags once a day and immediately notifies me if the battery is low or the tag is lost.

I am using Telegram for the push notifications, since it's incredibly easy to create bots and send messages to yourself / others.

Thanks. I Was thinking about telegram as well since it's easy to create a bot, thanks for the info