“They will further improve the product”: the security issues of AirTags under the magnifying glass

AirTags launched in 2021 have faced heavy criticism due to their potential for malicious use. Faced with these concerns, the technology giant has reviewed its protocols.

• Also read: AirTags are everywhere: The meteoric rise of geolocation devices

“It’s one of the risks that we are followed despite ourselves, in our car or in a coat pocket,” says Steve Waterhouse, cybersecurity expert.

Steve Waterhouse, cybersecurity expert

Photo Agence QMI, Amanda Moisan

Many consumers have reported cases of malicious use of geolocation devices, from tracking vulnerable people to stealing personal data.

“Everyone is connected, so potential vulnerabilities are everywhere,” says Ygal Bendavid, professor at the School of Management Sciences (ESG) at the University of Quebec in Montreal (UQAM) and director of the Internet of Things Laboratory. .

When they were marketed, no measures were put in place to counter malicious use.

Enhanced security

In 2022, amid growing privacy concerns, Apple rolled out an alert system aimed at detecting unauthorized AirTags.

More specifically, if an AirTag has been placed in your pocket or bag without you being aware of it, a warning will appear on your phone.

When the product was launched, the alert time could take from 8 hours to 24 hours.

Today, the technology has been updated and can alert a user more quickly.

“Normally, it is detected after 15 minutes maximum,” says Mr. Bendavid.


Ygal Bendavid, professor at the School of Management Sciences at the University of Quebec in Montreal and director of the Internet of Things Laboratory.

Courtesy photo

Remember that without a device nearby (iPhone, iPad, Mac), the AirTag is inoperable.

“AirTags work with Bluetooth. The function must be activated, otherwise the alert will not work. The owner of the AirTag should not be near his device either,” says Mr. Bendavid.

We tested it

The QMI Agency tested the security option during a non-consensual tracking scenario, by handing a device to a colleague.

The latter actually received a notification of the presence of an unknown AirTag, more than 3h30 after having had an unknown AirTag in her presence.

Based on our testing and user consultations, it appears that the alert is triggered within a few minutes to a few hours.

“Large companies are very aware that there are people who use them with bad intentions. They will make the product even better,” says Mr. Waterhouse.

Note that our colleague’s mother was also alerted to the presence of the device.

Several models

Several models of geolocation devices are available on the market, other than that of Apple. For comparison, the AirTag works with the Find My app on smartphones. Its price is $39 per unit.

Here are three other devices that are also popular with consumers:

Before the release of the AirTag, Tile had already appeared. The difference: Tile only works with users who have the app. The price of the original product is $34.99.

Samsung’s Galaxy SmartTag has a similar concept, with a mobile app. You can get one for $39.99.

Chipolo is also known in the industry. His device costs $25.


source site-64