Guides

I’m back with my AI enabled self! This evening I’m jumping into some interesting things about WIFI probes! Now back in the day you could deploy a pineapple etc. can you would hear phones calling out all the time for SSIDs to connect to, you could fingerprint phones (and infer people) from them!

But that’s not really the case anymore! If we camp with a pineapple or other setup, it’s not really the same anymore! (unless someone has a hidden SSID… they are terrible for PERSEC/OPSEC!!)

Want to know why? Well it’s down to how phones are programmed to poll (probe) for SSIDs… I’ve tested this in a car park miles away with a range of kit! (not dodgy at all right!)

To help me answer this I turned to my currently favourite LLM: GROK

iPhone Wi-Fi Scanning: Prompt and Response

iPhone Wi-Fi Scanning: Prompt and Response

User Prompt

why does my iPhone 16 pro max IOS 18.x not poll (probe) for wifi all the time like iPhones used to in 2017? now they seem to use GPS to know where a wifi hotspot was and only search when you are near it

Response

Your observation about the iPhone 16 Pro Max running iOS 18.x not polling for Wi-Fi as aggressively as older iPhones did around 2017 is accurate and reflects changes Apple has made to optimize battery life, enhance privacy, and improve location-based services. Here’s a detailed explanation of why this behavior has changed and how iPhones now handle Wi-Fi scanning:

1. Evolution of Location Services and Wi-Fi Polling

  • Pre-2017 Behavior (e.g., iOS 10 and earlier): Older iPhones, such as those from 2017, frequently polled for Wi-Fi networks to assist with location services and connectivity. Wi-Fi scanning was a key component of Assisted GPS (A-GPS), which used nearby Wi-Fi networks and cell towers to improve location accuracy, especially in areas with weak GPS signals. This constant polling consumed battery life and could raise privacy concerns, as the device was regularly broadcasting probes to discover networks.
  • Post-2017 Changes (iOS 11 and beyond): Apple began refining how iPhones handle Wi-Fi scanning to balance functionality, battery efficiency, and privacy. With advancements in hardware (e.g., more efficient chips like the A-series) and software (e.g., Core Location improvements), iPhones started relying more on GPS and other sensors to determine when to scan for Wi-Fi networks. By iOS 18.x, the system has become smarter about when to probe for Wi-Fi, using location-based triggers and machine learning to predict when you’re near a known Wi-Fi hotspot.

2. How iOS 18.x Uses GPS for Wi-Fi Scanning

  • Geofencing and Significant Locations: Modern iPhones, including the iPhone 16 Pro Max, use GPS and other location data to create geofences around known Wi-Fi hotspots (e.g., your home, workplace, or frequently visited locations). The device stores these locations in an encrypted, on-device database called Significant Locations (Settings > Privacy & Security > Location Services > System Services > Significant Locations). When your iPhone detects you’re near one of these locations via GPS, it activates Wi-Fi scanning to connect to the network, reducing unnecessary polling elsewhere.
  • Crowdsourced Wi-Fi Database: Apple maintains a crowdsourced database of Wi-Fi hotspots and cell towers, which iPhones contribute to anonymously when Location Services is enabled. This database allows the iPhone to know the approximate locations of Wi-Fi networks without constantly scanning. When your device is near a known hotspot (determined by GPS), it selectively scans for that network, saving battery life.
  • Precise Location and Contextual Awareness: iOS 18.x uses Precise Location data (if enabled) to determine when you’re in an area where Wi-Fi is likely available. Combined with motion sensors and machine learning, the iPhone can infer whether you’re stationary (e.g., at home) or moving (e.g., driving), further optimizing when to scan for Wi-Fi.

3. Battery and Privacy Optimizations

  • Battery Efficiency: Constant Wi-Fi polling, as was common in 2017, drained battery life because the Wi-Fi radio had to stay active. By using GPS to trigger Wi-Fi scans only when necessary, Apple reduces power consumption. GPS, while also power-intensive, is more efficient in modern chips (e.g., the A18 Pro in the iPhone 16 Pro Max) and is often used intermittently for quick location fixes.
  • Privacy Enhancements: Frequent Wi-Fi polling could expose your device to tracking by nearby networks, as probe requests include identifiable information like your device’s MAC address. Starting with iOS 14, Apple introduced MAC address randomization for Wi-Fi scans to enhance privacy. By reducing the frequency of scans and tying them to GPS-based triggers, iOS 18.x further minimizes the risk of tracking. Additionally, the Improve Location Accuracy toggle (introduced in iOS 18.4) allows users to opt out of contributing to Apple’s crowdsourced Wi-Fi database, giving more control over privacy.

4. Wi-Fi 7 and Hardware Improvements

  • The iPhone 16 Pro Max supports Wi-Fi 7, which offers faster and more efficient connectivity compared to the Wi-Fi standards used in 2017 (e.g., Wi-Fi 5). Wi-Fi 7 includes features like Multi-Link Operation (MLO), which allows devices to use multiple frequency bands simultaneously, potentially reducing the need for constant scanning. The improved efficiency of the Wi-Fi chip in the iPhone 16 Pro Max, combined with iOS 18.x’s intelligent scanning, means the device can connect to networks more quickly when it does scan.
  • The A18 Pro chip also integrates advanced machine learning capabilities, enabling the iPhone to better predict when to scan for Wi-Fi based on your habits and location.

5. Changes in iOS Settings and User Control

  • Location Services Settings: iOS 18.x gives users granular control over location permissions for apps and system services. For Wi-Fi scanning to occur selectively, Location Services must be enabled, and apps or system services (e.g., Wi-Fi Networking) need permission to access your location. If you disable Precise Location or turn off Location Services, the iPhone may fall back to less efficient Wi-Fi polling or rely solely on manual connections.
  • System Services: Under Settings > Privacy & Security > Location Services > System Services, options like Wi-Fi Networking and Suggestions & Search influence how your iPhone uses location data to manage Wi-Fi connections. Disabling these may cause the device to scan for Wi-Fi more aggressively or not connect automatically to known networks.

6. Comparison to 2017 Behavior

  • In 2017, iPhones (e.g., iPhone 7 or 8 running iOS 10 or 11) lacked the advanced machine learning and precise geofencing capabilities of today. Wi-Fi polling was more frequent because the system relied heavily on real-time network discovery to assist with A-GPS and maintain connectivity. This led to higher battery drain and more frequent probe requests.
  • GPS hardware and software in 2017 were less efficient, so Wi-Fi and cell tower data were critical for location accuracy, especially indoors or in urban areas. Today, GPS in the iPhone 16 Pro Max is more accurate and power-efficient, reducing the need for constant Wi-Fi assistance.

7. Potential Downsides and User Experience

  • Delayed Connections: By relying on GPS to trigger Wi-Fi scans, your iPhone may take slightly longer to connect to a known network if the GPS fix is slow or if you’re in an area with poor satellite visibility (e.g., indoors). This can feel less responsive compared to the always-on polling of 2017.
  • Environmental Factors: If GPS signals are blocked (e.g., in a concrete building), the iPhone may not scan for Wi-Fi as expected, leading to connectivity issues. You can mitigate this by manually enabling Wi-Fi or ensuring Location Services is on.
  • User Perception: The shift to GPS-triggered scanning might make it seem like the iPhone is “not polling” for Wi-Fi, but in reality, it’s polling more selectively based on location data.

8. How to Adjust Wi-Fi Behavior

If you prefer more aggressive Wi-Fi scanning or notice issues with the current behavior, you can try these settings:

  • Enable Wi-Fi Networking: Go to Settings > Privacy & Security > Location Services > System Services and ensure Wi-Fi Networking is turned on. This allows the iPhone to use location data to manage Wi-Fi connections.
  • Turn On Improve Location Accuracy: In iOS 18.4 and later, go to Settings > Privacy & Security > Location Services > System Services > Improve Location Accuracy and enable it. This enhances the crowdsourced Wi-Fi database, which can improve the iPhone’s ability to find networks.
  • Reset Network Settings: If Wi-Fi connections are inconsistent, go to Settings > General > Transfer or Reset iPhone > Reset > Reset Network Settings. This clears Wi-Fi and location data, forcing the iPhone to relearn networks (note: you’ll need to re-enter Wi-Fi passwords).
  • Manually Enable Wi-Fi: If you want the iPhone to scan for Wi-Fi more frequently, keep Wi-Fi turned on (Settings > Wi-Fi) and avoid relying solely on automatic connections.
  • Disable Low Power Mode: Low Power Mode can limit background processes, including GPS and Wi-Fi scanning, so ensure it’s off (Settings > Battery) if connectivity is a priority.

9. Conclusion

The iPhone 16 Pro Max running iOS 18.x doesn’t poll for Wi-Fi constantly like iPhones did in 2017 because Apple has shifted to a location-based, context-aware approach to Wi-Fi scanning. By using GPS, Significant Locations, and a crowdsourced Wi-Fi database, the iPhone selectively scans for networks when you’re near known hotspots, saving battery life and enhancing privacy. Hardware improvements (e.g., Wi-Fi 7, A18 Pro chip) and software optimizations (e.g., machine learning, MAC address randomization) further support this efficient behavior. While this can sometimes lead to delayed connections, you can adjust settings like Location Services or Wi-Fi Networking to fine-tune the experience.

If you’re experiencing specific issues with Wi-Fi connectivity or GPS accuracy, let me know, and I can provide targeted troubleshooting steps!

So once again, you might have heard something in the year 2012 about PERSEC/OPSEC of Cyber Security… but it might not hold true anymore! (that doesn’t mean other things aren’t a threat/risk/challenge!)

Have you done any testing with this yourself? Give it a go!