NoGoolag
4.54K subscribers
13.2K photos
6.93K videos
587 files
14.1K links
Download Telegram
FasterGPS (Faster GPS fix) -
You can select a NTP Server matching your region to speed up the process of getting a GPS fix
https://f-droid.org/app/org.fastergps

SatStat (GPS, sensor and network status) - https://f-droid.org/app/com.vonglasow.michael.satstat

📡 t.me/NoGoolag
#gps
UnifiedNLP Backends

MicroG needs some backends to get network Location.

I should take these two paragraphs to clarify that Network location is NOT GPS. MicroG has nothing to do with your GPS. Network Location is that hugely approximated wide-circle that appears before you get a GPS Lock.

If you cannot get a location even on device only location mode, it's not MicroG. It's your app, your ROM, your device, or your cursed house. Change any of these.

So, there are various Location Backends available, whose pros and cons have been detailed in the UNLP readme, along with their FDroid download links if your installer did not include them.

Enable high accuracy location, enable the backends you want in microg unifiednlp section and click on the gears to configure them

Troubleshooting
-If location (NLP) is not working:
--download and install this: https://f-droid.org/app/com.vonglasow.michael.satstat
--Enable High Acccuracy Location and open SatStat. Wait for it to get your location.
--Don't close SatStat, minimize it and open MicroG Settings > Self-Check. All boxes shold be checked.


https://github.com/microg/android_packages_apps_UnifiedNlp/blob/master/README.md


Some links to location backends and their respective documentations.

Mozilla: https://mozilla.github.io/ichnaea/

Local GSM Backend: https://github.com/n76/Local-GSM-Backend

Local WiFi Backend: https://github.com/n76/wifi_backend

OpenBMap: https://github.com/openbmap/radiocells-nlp-android

Déjà Vu: https://github.com/n76/DejaVu

Please note that it is not necessary to install all of them, as most do almost the same.

Standalone installer for UNLP + backends, part of the MinMicroG project

The 'Backends' edition zip in the latest release:
github.com/friendlyneighborhoodshane/minmicrog_releases/releases


#microg #unifiednlp #location #gps #maps #backends #guide #foss
Guide on @nogoolag
Android: IMSI Leaking during GPS Positioning

First of all, the basics:

Assisted GPS (abbreviated as A-GPS) is a system that usually significantly improves the time it takes to fix a satellite-based positioning system (GPS) for the first time - so GPS positioning is accelerated. How does this work? With mobile phones, the approximate location is already known from the radio cell in which your device is registered. This approximate location is then sent via the Secure User Plane Location Protocol (SUPL) to a SUPL server, which uses this information to limit the search range for the satellite signals and thus enables fast GPS positioning. Communication with the SUPL server takes place via TCP/IP or SMS.

Android systems use such a SUPL server to accelerate GPS positioning. However, the problem is that your IMSI number is also transmitted to the SUPL server when you make a request - which would not actually be necessary from a technical point of view.
The problem: The combination of the IMSI number with the radio cell ID enables the operator of a SUPL server to uniquely identify a user as soon as the smartphone locates or limits the location via a SUPL request. The SUPL protocol is therefore actually relatively sensible, but we do not know what the operators of the SUPL servers do with this information.

With my test devices I have now tried to find out when such a SUPL request is sent. Result: Whenever your GPS is activated and an app wants to query the location. It doesn't matter which mode you have chosen:

High accuracy:
Use GPS, WLAN, Bluetooth or mobile networks to determine your location.
Energy-saving mode:
Use WLAN, Bluetooth or mobile networks to determine your position.
Device only:
Use GPS to locate.

This means: Even if you have selected the mode "Device only", a request will be sent via A-GPS or SUPL-Request. The question is now which SUPL server or operator receives the radio cell information together with the IMSI number?

This is quite different - even with LineageOS. You can find out if you open the following file (root assumed) on your Android:

/etc/system/gps.conf
or
/vendor/etc/gps.conf

There you can search for the following entries:

SUPL_HOST=supl.google.com
SUPL_PORT=7275 (may vary)

Previously identified as SUPL_HOST or operator:

supl.google.com: Google
supl.sonyericsson.com: Sony
supl.qxwz.com: SUPL Server in China
supl.nokia.com: Nokia

If your GPS is activated, a SUPL request is sent to the SUPL_HOST - but this does not happen every time. You can force it after a device restart in combination with an app that wants to determine the GPS location. Sometimes it was also necessary to deactivate the WLAN interface.

Now you have to ask yourself if a quick GPS position determination via SUPL is important to you or maybe your privacy. If it's your privacy, you'll need to make the following changes to gps.conf and then restart your device:

SUPL_HOST=localhost
SUPL_PORT=7275

⚠️Note: It is not sufficient to comment out the lines. Then a fallback becomes active. Where the fallback information came from I could not find out yet.

With tcpdump you can check directly on the device if SUPL requests are still being sent:

tcpdump -i any -s0 port 7275

Unfortunately, one question remains unanswered: Does the proprietary baseband possibly send a SUPL request on its own and bypasses the Android operating system? In any case, this is indicated by the following article:
How SUPL Reveals My Identity And Location To Google When I Use GPS. If you can help to answer this question, please feel free to contact me via email or use the forum thread.

With a "toy" like the HackRF One, mobile phone traffic on this level could certainly be recorded.

Source and more info
https://www.kuketz-blog.de/android-imsi-leaking-bei-gps-positionsbestimmung/

📡 @NoGoolag
#android #IMSI #leaking #GPS #positioning #guide #kuketz
China’s BeiDou set to show the way as Xi Jinping commissions rival to America’s GPS

📌 Completion of 30-satellite constellation marks a key milestone in country’s efforts to become a space power, vice-chairman of Central Military Commission says
📌 BeiDou’s developers say system has three times the accuracy of GPS

China on Friday officially commissioned its BeiDou satellite navigation system, which it hopes will rival the United States’ Global Positioning System (GPS).
Chinese President Xi Jinping made the announcement at a ceremony in the Great Hall of the People in Beijing, attended by the country’s top military and government leaders.
General Zhang Youxia, vice-chairman of the Central Military Commission, praised BeiDou’s developers for hitting their target six months ahead of schedule despite the Covid-19 pandemic.

https://www.scmp.com/news/china/science/article/3095593/chinas-beidou-set-show-way-xi-jinping-commissions-rival-americas

#asia #china #GPS
⚠️Update Android A-GPS⚠️

A-GPS sends your IMSI and exact location to the supl server that is selected. On android, the supl.google.com server is standard selected when your Sim provider does not preconfigured its own supl server on android. This is the case in most non US countries. So your IMSI and location will be sent to google.

Do not use supl.vodafone.com, thanks to @ yova777 we know that it redirects to supl.google.com.

The method of changing / disabeling your supl server is different for each device.

You need to find a file like:
-system/etc/gps.conf
-vendor/etc/gps.conf
-vendor/etc/gnss/agps_profiles_conf2.xml
- or files alike where you can edit the supl server

You can use this command to find it, modify xyz:
find / | grep xyz

- or you can try this module, but you should modify it, or it just points to Vodafone/Google by default:
https://github.com/PlqnK/magisk-supl-replacer

You can also use 'localhost' but this will take several minutes if AGPS is requested.



PS
This method is not proven to be working yet!

Thanks @ sennaofficial

This is how some roms deal with it (thanks @ Rimana_a):

GrapheneOS
-Implement toggle for changing between carrier and Google SUPL server.
https://github.com/GrapheneOS/os-issue-tracker/issues/914
-Implement toggle for restricting device identifiers sent to SUPL server
https://github.com/GrapheneOS/os-issue-tracker/issues/915

DivestOS removes imsi

CalyxOS use system provided or network provided supl server. (xtracloud on Qualcomm phones). I couldn't find what fallback server is used.

Both Lineage OS and /e/ have Google's set as fallback.

#agps #gps #location #android
This media is not supported in your browser
VIEW IN TELEGRAM
⚠️Update AGPS mediatek devices⚠️

The following method is now proven to work (on the note 8 pro).

1. Download QuickEdit and grant root access.
2. Go to /vendor/etc/gnss/agps_profiles_conf2.XML
3. Edit all the supl.google.com servers as shown in the pictures below. Do no edit or remove ANYTHING else, if you do so the file will be ignored by the GPS app.
4. If you set a server that does not work, it will ping a mediatek server.
5. Reboot and enjoy.

I have included a instruction video on how to do so.

PS
Do not use the vodafone server as in the video!

All servers can be used:

#location #agps #gps

https://t.me/NoGoolag/64
https://t.me/NoGoolag/11136
https://t.me/NoGoolag/11293
⚠️Update AGPS mediatek devices⚠️

The following method is now proven to work (on the note 8 pro).

1. Download QuickEdit, or any root text editor, and grant root access.
2. Go to /vendor/etc/gnss/agps_profiles_conf2.XML
3. Edit all the supl.google.com servers as shown in the pictures below. Do no edit or remove ANYTHING else like the name or port, if you do so the file will be ignored by the GPS app.
4. If you set a server that does not work, it will ping a mediatek server.
5. If you have set your NTP_SERVER to pool.ntp.org your new supl server might not work.
6. Reboot and enjoy

If you still want to use the supl.google.com server you can remove your IMSI from the message by disabling this option (set imsi_enable=false)

I have included a instruction video on how to do so.

PS
Do not use the vodafone server as in the video! This redirects to supl.google.com

https://t.me/NoGoolag/64
Qualcomm https://t.me/NoGoolag/11136
Mediatek https://t.me/NoGoolag/11308

#location #agps #gps #mediatek
Blocking xtrapath1.izatcloud.netxtrapath2.izatcloud.net & xtrapath3.izatcloud.net is great for privacy, #Qualcomm gathers a huge amount of user data.

https://github.com/jerryn70/GoodbyeAds/issues/160

Issue
Requests from these domains are needed for people that use their #GPS. I had many GPS issues and didn't find how to get rid of these... After noticing that these domains were making requests each 5 min, I found why I experienced these issues : A-GPS data was not updated at all.

What data is really collected ? Qualcomm official's website answers:
XTRA uploads the following data types: a randomly generated unique ID, the chipset name and serial number, XTRA software version, the mobile country code and network code (allowing identification of country and wireless operator), the type of operating system and version, device make and model, the time since the last boot of the application processor and modem, and a list of our software on the device

They just forgot to mention that this data is sent with no encryption (except in the xtra3grc.bin format, hope that they're exclusively using that now...). Of course it should be blocked. But it's necessary to allow one of those 3 domains in order to make the GPS work properly.

So I whitelisted one of those domains for 5 min and once the request was done I blacklisted it again, GPS is now working as intended. But I know the issue will come back in about 7 days. (I think that I'm still moderately protected from Qualcomm's threat of privacy, because after less than 3 hours these domains were making requests again.)

I tested with Google maps, Waze, TomTom and Mappy, every time all of these apps were unable to refresh my position in real time, and after more than 3-4 months it was just not working at all.

Solution
Like for graph.facebook.com, add a notice to warn users about these GPS issues.

Sources :
https://wwws.nightwatchcybersecurity.com/tag/gps/
https://www.qualcomm.com/site/privacy/services
Also see https://en.wikipedia.org/wiki/Assisted_GPS

#agps #location #android
Israel’s using widespread GPS tampering to deter Hezbollah’s missiles - POLITICO –

Israel is scrambling GPS signals over most of its northern airspace to protect itself from Hezbollah missile strikes — potentially endangering Israeli civilians and commercial aircraft in the process.

A group of researchers at the University of Texas at Austin who have tracked #GPS signals in the region for years noticed a strange pattern emerging after the #Hamas militant group’s surprise attack on Oct. 7: Planes flying near the #Mediterranean sea briefly disappeared from sight over many parts of #Israel.

#Lebanon #Syria #Palestine #Hezbollah
Hackers are taking over planes’ #GPS — experts are lost on how to fix it

There have been over 50 recent reports of frightening cyberattacks that have altered planes’ in-flight GPS, leading to what experts described as “critical navigation failures” onboard the aircraft.

https://nypost.com/2023/11/20/lifestyle/hackers-are-taking-over-planes-gps-experts-are-lost-on-how-to-fix-it/
Forwarded from BallMemes
Media is too big
VIEW IN TELEGRAM
#GPS & #Maps on real earth - #WitsIt GetsIt & #Jeranism
Clipped By #RobotPolisher🔥🔥🔥