{"id":"https://openalex.org/W4287884184","doi":"https://doi.org/10.1109/spw54247.2022.9833881","title":"AirTag of the Clones: Shenanigans with Liberated Item Finders","display_name":"AirTag of the Clones: Shenanigans with Liberated Item Finders","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4287884184","doi":"https://doi.org/10.1109/spw54247.2022.9833881"},"language":"en","primary_location":{"id":"doi:10.1109/spw54247.2022.9833881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw54247.2022.9833881","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011832419","display_name":"Thomas Roth","orcid":"https://orcid.org/0000-0001-8309-4134"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Thomas Roth","raw_affiliation_strings":["Leveldown Security"],"affiliations":[{"raw_affiliation_string":"Leveldown Security","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020977410","display_name":"Fabian Freyer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fabian Freyer","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042405070","display_name":"Matthias Hollick","orcid":"https://orcid.org/0000-0002-9163-5989"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Matthias Hollick","raw_affiliation_strings":["TU Darmstadt,SEEMOO"],"affiliations":[{"raw_affiliation_string":"TU Darmstadt,SEEMOO","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016475244","display_name":"Jiska Classen","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jiska Classen","raw_affiliation_strings":["TU Darmstadt,SEEMOO"],"affiliations":[{"raw_affiliation_string":"TU Darmstadt,SEEMOO","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5011832419"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9984,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.86811024,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"301","last_page":"311"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12801","display_name":"Bluetooth and Wireless Communication Technologies","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12801","display_name":"Bluetooth and Wireless Communication Technologies","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.97079998254776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11896","display_name":"Opportunistic and Delay-Tolerant Networks","score":0.9666000008583069,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9933555126190186},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7001655697822571},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.6732547879219055},{"id":"https://openalex.org/keywords/chip","display_name":"Chip","score":0.5582126975059509},{"id":"https://openalex.org/keywords/microcode","display_name":"Microcode","score":0.5445135235786438},{"id":"https://openalex.org/keywords/bluetooth","display_name":"Bluetooth","score":0.4539463520050049},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.4492748975753784},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.4327627718448639},{"id":"https://openalex.org/keywords/cloning","display_name":"Cloning (programming)","score":0.425756573677063},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.38233309984207153},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.19998839497566223},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.14491990208625793}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9933555126190186},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7001655697822571},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6732547879219055},{"id":"https://openalex.org/C165005293","wikidata":"https://www.wikidata.org/wiki/Q1074500","display_name":"Chip","level":2,"score":0.5582126975059509},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.5445135235786438},{"id":"https://openalex.org/C546215728","wikidata":"https://www.wikidata.org/wiki/Q39531","display_name":"Bluetooth","level":3,"score":0.4539463520050049},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.4492748975753784},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.4327627718448639},{"id":"https://openalex.org/C121050878","wikidata":"https://www.wikidata.org/wiki/Q5135020","display_name":"Cloning (programming)","level":2,"score":0.425756573677063},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.38233309984207153},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.19998839497566223},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.14491990208625793},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/spw54247.2022.9833881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw54247.2022.9833881","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320311687","display_name":"Ministry of Education","ror":"https://ror.org/03m01yf64"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1965693364","https://openalex.org/W2928007274","https://openalex.org/W3043128441","https://openalex.org/W3048190588","https://openalex.org/W3081908344","https://openalex.org/W3082009274","https://openalex.org/W3159047493","https://openalex.org/W3172029334","https://openalex.org/W3174446091","https://openalex.org/W3176385359","https://openalex.org/W4226082747","https://openalex.org/W4228997631","https://openalex.org/W4288080211","https://openalex.org/W4400654159","https://openalex.org/W6760648925","https://openalex.org/W6780211247","https://openalex.org/W6781930830","https://openalex.org/W6782280799","https://openalex.org/W6782385920","https://openalex.org/W6804174699","https://openalex.org/W6931730108"],"related_works":["https://openalex.org/W1966431236","https://openalex.org/W608147619","https://openalex.org/W1984676852","https://openalex.org/W1997369499","https://openalex.org/W2026551898","https://openalex.org/W4252104358","https://openalex.org/W2062160093","https://openalex.org/W2025981307","https://openalex.org/W3022618462","https://openalex.org/W1998626163"],"abstract_inverted_index":{"AirTags":[0],"are":[1],"the":[2,66,79,90,98,114,141],"first":[3],"standalone":[4],"devices":[5],"that":[6,76],"support":[7],"Apple\u2019s":[8,25,53],"Find":[9],"My":[10],"network.":[11],"Besides":[12],"being":[13],"a":[14,35,85],"low-cost":[15],"item":[16],"finder,":[17],"they":[18],"provide":[19],"an":[20],"exciting":[21],"research":[22],"platform":[23],"into":[24],"ecosystem":[26],"security":[27],"and":[28,44,69,73,95,107,119,139,143],"privacy":[29],"aspects.":[30],"Each":[31],"AirTag":[32,67,81,133],"device":[33],"contains":[34],"Nordic":[36],"nRF52832":[37],"chip":[38,55],"for":[39,56],"Bluetooth":[40],"Low":[41],"Energy":[42],"(BLE)":[43],"Near":[45],"Field":[46],"Communication":[47],"(NFC)":[48],"connectivity,":[49],"as":[50,52],"well":[51],"U1":[54,144],"Ultra-wideband":[57],"(UWB)":[58],"fine":[59],"ranging.":[60],"In":[61],"this":[62],"paper,":[63],"we":[64,93,112],"analyze":[65,113],"hardware":[68],"firmware":[70,103,128],"in":[71],"detail":[72],"present":[74],"attacks":[75],"also":[77],"affect":[78],"whole":[80],"ecosystem.":[82],"After":[83],"performing":[84],"voltage":[86],"glitching":[87],"attack":[88],"on":[89,131],"nRF":[91,142],"chip,":[92],"extract":[94],"reverse":[96],"engineer":[97],"main":[99],"firmware.":[100,145],"We":[101],"add":[102],"functionality,":[104],"change":[105],"capabilities,":[106],"demonstrate":[108],"cloning":[109],"AirTags.":[110],"Moreover,":[111],"protocol":[115],"used":[116],"between":[117],"iPhones":[118],"AirTags,":[120],"unlocking":[121],"undocumented":[122],"commands.":[123],"These":[124],"commands":[125],"enable":[126],"limited":[127],"instrumentation":[129],"over-the-air":[130],"unmodified":[132],"hardware,":[134],"including":[135],"playing":[136],"sound":[137],"sequences":[138],"downgrading":[140]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":8}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2025-10-10T00:00:00"}