openhaystack VS ubertooth

> For Find My, since they can even locate switched off phones

They can't. Find My is actually truly end-to-end encrypted, at least the version used for when a device is off (I'm not 100% sure how encrypted the self-reported version is for powered on iPhones with data).

Copy-pasting my summary about how Find My works from another comment in this post:

> The master private key used by the system is generated locally and never leaves your Apple devices in a state that anyone except your devices can read it.

> The master key is used to derive an AirTag specific private key which is provisioned to the AirTag and is in turn combined with an increasing counter which generates a third private key that's never stored anywhere. The ID broadcast is the public key of this third key. It changes every 30 minutes or 1 hour, I forget which.

> Other devices see this key, use it to encrypt their own location, and upload that encrypted blob along with the public key to Find My, and in order for Apple to even know which account the encrypted blob they can't decrypt belongs to I have to actually request the location of my AirTag by locally deriving the keypair it used for a certain point in time.

This has all been proven through [1] where they read the whitepaper (which I can't for the life of me find now but know exist because I've read it, or at least parts) and implemented OpenHaystack which proves Apple aren't lying about anything because if they did then OpenHaystack wouldn't work.

1: https://github.com/seemoo-lab/openhaystack

find my network

Much more nuance than that. You can't just tap into the networks. More information here https://github.com/seemoo-lab/openhaystack

You can actually create your own, using Apple's "find my" network. See OpenHaystack

The 2.4GHz spectrum is shared between Bluetooth and WiFi 802.11b/g. A few years ago, I was doing some work using an Ubertooth-One scanner (https://greatscottgadgets.com/ubertoothone/). It was showing the traffic on different channels.

My wife stuck a burrito to warm up in the microwave a room away (30-40 ft). This was with a brand-name model, so presumably properly shielded, etc.

Nope. The entire spectrum just went white with noise on all channels.

Once the microwave cycle ended, it still took a good 15-30 seconds before the airwaves calmed down and went back to normal traffic.

Clique aqui para saber mais.

I think these are : Proxmark3 HackRF One USB RUBBER DUCKY Flipper Zero WIFI PINEAPPLE PWNAGOTCHI SHARK JACK the usb one looks like Ubertooth One not sure Raspberry pi with a touch screen lock picking kit

Using something like this[0].

[0]: https://greatscottgadgets.com/ubertoothone/

That CC2500 may work for your needs. You might want to check out the Ubertooth One which is built around the CC2400, and can capture 1MHz bandwidth FSK signals.