Security expert Bruce Schneier has highlighted privacy concerns around Nike+iPod Sport Kit, a technology which allows the user to track time, distance, pace, and calories burned while performing sport.
In a blog post entitled "Tracking People by their Sneakers", published on Tuesday, Schneier drew attention to research conducted at the University of Washington that demonstrated a surveillance system that automatically tracks people through the Nike+iPod Sport Kit.
"Basically, the kit contains a transmitter that you stick in your sneakers and a receiver you attach to your iPod. This allows you to track things like time, distance, pace, and calories burned. Pretty clever," said Schneier. "However, it turns out that the transmitter in your sneaker can be read up to 60 feet away."
Because the RFID transmitter broadcasts a unique ID, people can be tracked by it, according to the researchers who built a surveillance device — which cost about $250 (£120) — and integrated the surveillance system with Google Maps.
"Details are in the paper," said Schneier. "Very scary."
Schneier said that this was "a great demonstration for anyone who is sceptical that RFID chips can be used to track people".
The chips have no personal identifying information, yet can still be used to track people, said Schneier, who argued that as long as the chips have unique IDs, those IDs can be used for surveillance. The unique identifier can be scanned and linked to a user's physical identity.
"To me, the real significance of this work is how easy it was," said Schneier.
"Unless we enact some sort of broad law requiring companies to add security into these sorts of systems, companies will continue to produce devices that erode our privacy through new technologies. Not on purpose, not because they're evil — just because it's easier to ignore the externality than to worry about it," Schneier added.
RFID tags are increasingly popular in the retail sector, where companies use them to track shipments and keep a close check on stock levels. But campaigners such as CASPIAN have warned in the past that the privacy of consumers could be compromised if they don't destroy these tags after buying items in the shops.
Talkback
The UK Government are busy constructing a nationwide network of Automated Number Plate Recognition (ANPR) cameras, reportedly for busting tax fraud. There has been no vote in Parliament, no public consultation; in fact they don't really want us to know about them. The ID card bill went through on the nod, with a built in RFID. In the near future they will be starting to introduce a replacement for the tax disk in the form of a radio transmitter sending out a unique code. They are already testing location based road tax with built in GPS to really work out where you are.
If trackable trackers are such a problem, this stuff should be making us break out into a cold sweat. So we, the tax payers, are paying to shatter our own privacy for no gain to us.