Hacker News new | ask | show | jobs
by movablesed 1881 days ago
AirDrop also shares your full name (seemingly the one associated with your Apple ID, not what you have set for yourself in your contacts), both by displaying it in the sharing interface on the involved devices and by attaching it as an extended attribute to uploaded files.

The latter is more serious imo, because those attributes live on your file system basically for ever, and they're preserved when transferring to another compatible file system or even when archived in a zip file. The meta-data can ride along with the files to completely unrelated systems even years after the fact. So if you AirDrop some files to your computer and then zip them up, anyone you send that zip to (a journalist, a public file-hosting site, w/e) will have your full legal name to go with them.

Even sharing your name through the interface seems questionable -- the fact that you and another person have each other's phone numbers is not necessarily an indication that you want to share your real names with each other. (Though i guess someone could usually find it out anyway if they already had your phone number.)

I reported this to Apple, but i don't think they care. Seems like it's by design.

3 comments

Wow, you're right!

1. Airdrop an item to your Mac.

2. Run 'mdls [file]' to see associated metadata

3. Copy the file, run 'mdls [file]' again - open it locally or even in a macOS VM - you'll see that your name and phone name is copied with the file!

https://eforensicsmag.com/airdrop-forensics-by-kinga-kieczko...

This is a privacy nightmare.
Isn't that name editable on your Apple ID page? That name is also not part of your financial data on the iPhone (which usually involves your real name).