Drone-powered device uses WiFi to see through walls
Researchers at the University of Waterloo say they have developed a drone-powered device that can use WiFi networks to see through walls. The device – nicknamed Wi-Peep – can fly near a building and then use the inhabitants’ WiFi network to identify and locate all WiFi-enabled devices inside in a matter of seconds.
The Wi-Peep exploits a loophole the researchers call “polite WiFi.” Even if a network is password protected, smart devices will automatically respond to contact attempts from any device within range. The Wi-Peep sends several messages to a device as it flies and then measures the response time on each, enabling it to identify the device’s location to within a meter.
“The Wi-Peep devices are like lights in the visible spectrum, and the walls are like glass,” says Dr. Ali Abedi, an adjunct professor of computer science at Waterloo. “Using similar technology, one could track the movements of security guards inside a bank by following the location of their phones or smartwatches. Likewise, a thief could identify the location and type of smart devices in a home, including security cameras, laptops, and smart TVs, to find a good candidate for a break-in. In addition, the device’s operation via drone means that it can be used quickly and remotely without much chance of the user being detected.”
While WiFi security vulnerability has been explored before, it was typically with bulky, expensive devices. The Wi-Peep is notable, say the researchers, because of its accessibility and ease of transportation. The researchers built it using a store-bought drone and $20 of easily purchased hardware.
“As soon as the Polite WiFi loophole was discovered,” says Abedi, “we realized this kind of attack was possible.”
The researchers built the Wi-Peep to test their theory and quickly realized that anyone with the right expertise could easily create a similar device.
“On a fundamental level, we need to fix the Polite WiFi loophole so that our devices do not respond to strangers,” says Abedi. “We hope our work will inform the design of next-generation protocols.”
In the meantime, say the researchers, WiFi chip manufacturers should introduce an artificial, randomized variation in device response time, which will make calculations like the ones the Wi-Peep uses wildly inaccurate.
For more, see “Non-cooperative wi-fi localization & its privacy implications.”
If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :
