Rumors and accusations of spying flew across the web as hackers found "proof" that Apple's iPhone was sending your phones unique IMEI identifier to Apple when you used the Weather or Stock widgets.
But as always, the truth isn't quite so clear.
First, the rumor.
Found embedded in each of the widgets was a string like "http://iphone-wu.apple.com/dgw?imei=%&apptype=finance", where imei=% was automatically taken to mean that Apple was including your IMEI number in every request.
Worse, supposedly the numbers were being sent in the clear, as the request wasn't being encrypted.
However, a German security firm [German] actually looked at the data being sent across the network, and found out that things were not quite as they appeared. Weather actually sent different data for the IMEI than Stocks, and neither one appeared to be the phone's actual IMEI number.
Reactions across the net ranged from outrage that Apple would do such a thing, to resignation that in today's age such things are inevitable, and in some even a "who cares" attitude prevailed. "What do I care if Apple knows I want the weather in Denver?" Said one. "They know I live there anyway."
Apple has yet to respond to the accusations.
But personally, just once I'd like to see an organization get out in front and admit, "This is what we're collecting, and why." Act. Not react.
More on this as information becomes available.
[via TUAW and heise online]
[UPDATED]
See the data for yourself at Dailey News.
Also, according to further testing by Rene, these IDs are identical in all iPhones he has tried. No unique numbers for each individual. Case closed.
Comments