Google joins Bluetooth snoop pals with iBeacon rival tech Eddystone

Apple isn't the only one that wants to track your smartphone


Google has jumped on the Bluetooth Low Energy (BLE) beacon bandwagon with a set of open standards and software interfaces to give Apple's iBeacon a run for its money.

Apple rolled out iBeacon in 2013, and has been pushing it as a way for companies to do things like tracking potential customers' movements as they wander around retail stores.

Google sees lots of other uses for the Bluetooth-based tech, and to that end it has developed a new BLE beacon format that's cross-platform and available for anyone to use under the open source Apache 2.0 license.

Dubbed Eddystone – no doubt named after the famed Eddystone Point lighthouse on the northeast coast of Tasmania, Australia – the spec defines an extensible "frame format" that beacons can use to communicate with the world.

Google says Eddystone isn't a radical departure from the way some vendors have been implementing BLE beacons already. In fact, it says some of its partners have already built Eddystone-compliant beacons, and existing beacons can be upgraded to support the new format with a firmware update.

The idea is really to create a common format that supports versioning and is open enough to allow it to be easily extended with new features as vendors come up with them. To keep vendors from wandering too far afield, however, Google plans to introduce an Eddystone certification program in the near future.

Fair enough, so what about security? Security researchers have raised lots of red flags about BLE beacon security in the past. In particular, they say, most vendors' attempts to mask the uniquely identifiable properties of smartphones, such as MAC addresses, are ineffective – meaning it's easy for snoops to track individuals long-term.

The Chocolate Factory claims it's got that licked, via a security features called Ephemeral Identifiers (EIDs). While these sound an awful lot like the MAC address randomization used by other systems, Google says only authorized clients will be able to decode EIDs.

"EIDs will enable you to securely do things like find your luggage once you get off the plane or find your lost keys," Google's dev team said in a blog post. "We'll publish the technical specs of this design soon."

To accompany Eddystone, has also published a new Proximity Beacon API that allows developers to associate beacons with resources in the cloud, making it easier to batch-update a beacon fleet with the latest information without re-provisioning them by hand.

Nearer, my GOOG, to thee

The new beacon format is only one portion of what Google has in mind. Beacons aren't much good unless other devices can chat with them, and so the coders in Mountain View have also come up with a new API to make it easier to write apps that find and communicate with nearby devices.

Naturally enough, it's called the Nearby API, and it lets Android and iOS devices establish proximity to each other, discover each other's available services, and exchange messages with each other and with BLE beacons.

The tech sounds superficially similar to the Wi-Fi Alliance's Wi-Fi Aware program, which uses Wi-Fi hardware to establish proximity and trade short messages between devices, although in practice it uses a somewhat different approach.

"Nearby uses a combination of Bluetooth, Wi-Fi, and inaudible sound (using the device's speaker and microphone) to establish proximity," Google product manager Akshay Kannnan explained in a blog post.

As for privacy, the user must give explicit permission for apps to access the Nearby API, and Google doesn't necessarily store any personally identifying information if they do.

"Nearby doesn't use or require a Google Account. The first time an app calls Nearby, users get a permission dialog to grant that app access," Kannan said.

The online ad giant says it has already incorporated Nearby into a number of products, including Chromecast and games, and with the launch of Google Play Services 7.8, the API will become generally available to all Android and iOS developers. (For what it's worth, your humble Reg hack's Moto X running Android 5.1 is currently on Google Play Services 7.5.74.)

There is one tiny catch, though. Google Play Services 7.8 will only be available on Android 2.3 "Gingerbread" and above,  meaning the approximately 0.3 per cent of Android devices that are still running lesser versions will be left out. ®

Similar topics

Broader topics


Other stories you might like

  • Google has more reasons why it doesn't like antitrust law that affects Google
    It'll ruin Gmail, claims web ads giant

    Google has a fresh list of reasons why it opposes tech antitrust legislation making its way through Congress but, like others who've expressed discontent, the ad giant's complaints leave out mention of portions of the proposed law that address said gripes.

    The law bill in question is S.2992, the Senate version of the American Innovation and Choice Online Act (AICOA), which is closer than ever to getting votes in the House and Senate, which could see it advanced to President Biden's desk.

    AICOA prohibits tech companies above a certain size from favoring their own products and services over their competitors. It applies to businesses considered "critical trading partners," meaning the company controls access to a platform through which business users reach their customers. Google, Apple, Amazon, and Meta in one way or another seemingly fall under the scope of this US legislation. 

    Continue reading
  • Brave Search leaves beta, offers Goggles for filtering, personalizing results
    Freedom or echo chamber?

    Brave Software, maker of a privacy-oriented browser, on Wednesday said its surging search service has exited beta testing while its Goggles search personalization system has entered beta testing.

    Brave Search, which debuted a year ago, has received 2.5 billion search queries since then, apparently, and based on current monthly totals is expected to handle twice as many over the next year. The search service is available in the Brave browser and in other browsers by visiting search.brave.com.

    "Since launching one year ago, Brave Search has prioritized independence and innovation in order to give users the privacy they deserve," wrote Josep Pujol, chief of search at Brave. "The web is changing, and our incredible growth shows that there is demand for a new player that puts users first."

    Continue reading
  • Abortion rights: US senators seek ban on sale of health location data
    With Supreme Court set to overturn Roe v Wade, privacy is key

    A group of senators wants to make it illegal for data brokers to sell sensitive location and health information of individuals' medical treatment.

    A bill filed this week by five senators, led by Senator Elizabeth Warren (D-MA), comes in anticipation the Supreme Court's upcoming ruling that could overturn the 49-year-old Roe v. Wade ruling legalizing access to abortion for women in the US.

    The worry is that if the Supreme Court strikes down Roe v. Wade – as is anticipated following the leak in May of a majority draft ruling authored by Justice Samuel Alito – such sensitive data can be used against women.

    Continue reading
  • Brave roasts DuckDuckGo over Bing privacy exception
    Search biz hits back at 'misleading' claims, saga lifts lid on Microsoft's web tracking advice

    Brave CEO Brendan Eich took aim at rival DuckDuckGo on Wednesday by challenging the web search engine's efforts to brush off revelations that its Android, iOS, and macOS browsers gave, to a degree, Microsoft Bing and LinkedIn trackers a pass versus other trackers.

    Eich drew attention to one of DuckDuckGo's defenses for exempting Microsoft's Bing and LinkedIn domains, a condition of its search contract with Microsoft: that its browsers blocked third-party cookies anyway.

    "For non-search tracker blocking (e.g. in our browser), we block most third-party trackers," explained DuckDuckGo CEO Gabriel Weinberg last month. "Unfortunately our Microsoft search syndication agreement prevents us from doing more to Microsoft-owned properties. However, we have been continually pushing and expect to be doing more soon."

    Continue reading
  • I was fired for blowing the whistle on cult's status in Google unit, says contractor
    The internet giant, a doomsday religious sect, and a lawsuit in Silicon Valley

    A former Google video producer has sued the internet giant alleging he was unfairly fired for blowing the whistle on a religious sect that had all but taken over his business unit. 

    The lawsuit demands a jury trial and financial restitution for "religious discrimination, wrongful termination, retaliation and related causes of action." It alleges Peter Lubbers, director of the Google Developer Studio (GDS) film group in which 34-year-old plaintiff Kevin Lloyd worked, is not only a member of The Fellowship of Friends, the exec was influential in growing the studio into a team that, in essence, funneled money back to the fellowship.

    In his complaint [PDF], filed in a California Superior Court in Silicon Valley, Lloyd lays down a case that he was fired for expressing concerns over the fellowship's influence at Google, specifically in the GDS. When these concerns were reported to a manager, Lloyd was told to drop the issue or risk losing his job, it is claimed. 

    Continue reading
  • It's a crime to use Google Analytics, watchdog tells Italian website
    Because data flows into the United States, not because of that user interface

    Updated Another kicking has been leveled at American tech giants by EU regulators as Italy's data protection authority ruled against transfers of data to the US using Google Analytics.

    The ruling by the Garante was made yesterday as regulators took a close look at a website operator who was using Google Analytics. The regulators found that the site collected all manner of information.

    So far, so normal. Google Analytics is commonly used by websites to analyze traffic. Others exist, but Google's is very much the big beast. It also performs its analysis in the USA, which is what EU regulators have taken exception to. The place is, after all, "a country without an adequate level of data protection," according to the regulator.

    Continue reading
  • End of the road for biz living off free G Suite legacy edition
    Firms accustomed to freebies miffed that web giant's largess doesn't last

    After offering free G Suite apps for more than a decade, Google next week plans to discontinue its legacy service – which hasn't been offered to new customers since 2012 – and force business users to transition to a paid subscription for the service's successor, Google Workspace.

    "For businesses, the G Suite legacy free edition will no longer be available after June 27, 2022," Google explains in its support document. "Your account will be automatically transitioned to a paid Google Workspace subscription where we continue to deliver new capabilities to help businesses transform the way they work."

    Small business owners who have relied on the G Suite legacy free edition aren't thrilled that they will have to pay for Workspace or migrate to a rival like Microsoft, which happens to be actively encouraging defectors. As noted by The New York Times on Monday, the approaching deadline has elicited complaints from small firms that bet on Google's cloud productivity apps in the 2006-2012 period and have enjoyed the lack of billing since then.

    Continue reading

Biting the hand that feeds IT © 1998–2022