Vulnerability in Tile Trackers Could Put Users at Risk of Stalking

Vulnerability in Tile Trackers Could Put Users at Risk of Stalking

Vulnerability in Tile Trackers Could Put Users at Risk of Stalking

A recent report by Wired indicates that the widely-used Bluetooth trackers from Tile contain a significant security vulnerability — one that could enable malicious individuals and stalkers to discreetly monitor unaware users. The problem, as noted by a group of researchers, pertains to how the Tile tag transmits its MAC address and the distinct ID utilized for network registration.

In contrast to other firms, which substitute the MAC address with a rotating identifier, Tile broadcasts its device’s MAC address openly, making it considerably simpler to follow. Furthermore, while each Tile tag’s unique identifier changes every 15 minutes, the visibility of the MAC address allows for easy transmission of data necessary to effectively track the device even after the ID has shifted. Additionally, the researchers reported that they shared their findings with Life360 — which acquired Tile in 2021 – in November 2024. Nevertheless, in February of the current year, the company allegedly stopped all communication with the researchers.

This is alarming, as the problem could potentially worsen, leaving users vulnerable to a security risk without any awareness of its existence. Given the actions that companies like Apple have taken to prevent their Bluetooth trackers from being exploited for harmful purposes, it is troubling to see Life360 sever contact with the researchers who uncovered such a significant vulnerability without offering any resolution regarding whether the issue has been addressed.

Bogged down by features