Skip to content

Question: weird scanning results #220

Description

@AGaylord6

I keep seeing weird BLE advertisements that are marked as Apple Offline Finding (0x12), but don't match any formats I'm aware of.

Example:

0x12 0x02 0x24 0x03 0x07 0x11 0x06 0xba 0x40 0x33 0xaa 0xd6 0x71 0xde 0x41 0x9d 0x65 0xdf 0x56 0xa9 0xa5 0x3e 0xa0

Data len is marked as 0x02, but actual data payload is 21 bytes. The status byte (0x24 here) for all examples I've seen indicates a Licensed 3rd Party Find My Device. That assumes its following the same OF format though, which isn't likely given the incorrect length field.

The scanner thinks this is a NearbyOfflineFindingDevice and gives this error when it sees them:

ERROR:findmy.scanner.scanner:Invalid OF data length for NearbyOfflineFindingDevice: 21 instead of 2

Other examples. Note the shared segments across the payloads.

0x12  0x02  0xae  0x02  0x07  0x11  0x06  0xcd  0x2a  0xbf  0xb1  0x6e  0xd6  0x92  0x4c  0x51  0x51  0x82  0x7e  0x33  0xf5  0x22  0x46
0x12  0x02  0x2e  0x00  0x07  0x11  0x06  0x58  0x64  0xb5  0x08  0x8c  0x67  0x51  0x3b  0xb6  0x57  0x95  0x71  0x8f  0xe3  0xb2  0xbb

Has anyone witnessed these findmy advertisements or know which device emits them?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions