失物招领：阻止蓝牙查找器泄露私人信息
Lost and Found: Stopping Bluetooth Finders from Leaking Private Information
摘要：
蓝牙查找器是一种小型电池供电设备，可以连接到包，钥匙链或自行车等重要物品上。查找器与用户的手机保持蓝牙连接，并且在连接丢失时立即通知用户。我们提供了第一个全面的安全和隐私分析，目前的商业蓝牙查找。我们的分析揭示了这些产品中涉及移动应用程序和云中相应后端服务的几个重大安全漏洞。我们还表明，所有分析的基于云的产品泄露的私人数据都超过了各自云服务所需的数据。总的来说，蓝牙查找器有很大的市场，但现有的产品都没有隐私友好型。我们通过设计和实施PrivateFind来缩小这一差距，确保用户的位置永远不会泄露给第三方。它被设计为在与现有查找器类似的硬件上运行，允许供应商使用PrivateFind更新他们的系统。
英文摘要：
A Bluetooth finder is a small battery-powered device that can be attached to important items such as bags, keychains, or bikes. The finder maintains a Bluetooth connection with the user's phone, and the user is notified immediately on connection loss. We provide the first comprehensive security and privacy analysis of current commercial Bluetooth finders. Our analysis reveals several significant security vulnerabilities in those products concerning mobile applications and the corresponding backend services in the cloud. We also show that all analyzed cloud-based products leak more private data than required for their respective cloud services. Overall, there is a big market for Bluetooth finders, but none of the existing products is privacy-friendly. We close this gap by designing and implementing PrivateFind, which ensures locations of the user are never leaked to third parties. It is designed to run on similar hardware as existing finders, allowing vendors to update their systems using PrivateFind.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
