Wearable devices may reveal personal privacy

Recently, researchers have found that , Some fitness wearable devices can not only track users' own fitness activities , It could be someone else “ track ”, Some supporting applications of these wearable devices will disclose the user's login information to varying degrees, and the transmission method of activity tracking information is very unsafe , Even allow users to submit false activity tracking information , The supporting application can collect data from the fitness tracking device , And upload to the central server , Users can analyze their own performance , And compare it with other users , There are surveys that show that , Only Apple Watch Using Bluetooth LE A feature of the standard can generate constantly changing MAC Address , Prevent users from being tracked , and Basis Peak、Fitbit Charge HR、Garmin Vivosmart、Jawbone Up 2、Mio Fuse、Withings Pulse O2 And Xiaomi bracelet may be tracked even if Bluetooth is not turned on .

 

Some technicians have confirmed , adopt “ Man-in-the-middle attack ” The method can intercept the data transmitted between the transmission application and the server , To view the passed HTTPS Protocol transmitted data , You can even encrypt its data , By intercepting data , The researchers found that Garmin Applications are only used during registration and login HTTPS agreement , Other data is transmitted in clear code , So the third party can read the data 、 Write 、 Delete operation , Beyond seas , Fitness trackers are not considered medical devices , Therefore, we have avoided the strictest provisions of American privacy laws , But this situation is not feasible in EU countries , According to EU data protection law , The data they generate is considered personal information , Should be protected , Personally, I think this is the private information that needs to be protected , I don't know when this risk will be noticed in China .