⚠️Update Android A-GPS⚠️

A-GPS sends your IMSI and exact location to the supl server that is selected. On android, the supl.google.com server is standard selected when your Sim provider does not preconfigured its own supl server on android. This is the case in most non US countries. So your IMSI and location will be sent to google.

Do not use supl.vodafone.com, thanks to @ yova777 we know that it redirects to supl.google.com.

The method of changing / disabeling your supl server is different for each device.

You need to find a file like:
-system/etc/gps.conf
-vendor/etc/gps.conf
-vendor/etc/gnss/agps_profiles_conf2.xml
- or files alike where you can edit the supl server

You can use this command to find it, modify xyz:
find / | grep xyz

- or you can try this module, but you should modify it, or it just points to Vodafone/Google by default:
https://github.com/PlqnK/magisk-supl-replacer

You can also use 'localhost' but this will take several minutes if AGPS is requested.

✌

PS
This method is not proven to be working yet!

Thanks @ sennaofficial

This is how some roms deal with it (thanks @ Rimana_a):

GrapheneOS
-Implement toggle for changing between carrier and Google SUPL server.
https://github.com/GrapheneOS/os-issue-tracker/issues/914
-Implement toggle for restricting device identifiers sent to SUPL server
https://github.com/GrapheneOS/os-issue-tracker/issues/915

DivestOS removes imsi

CalyxOS use system provided or network provided supl server. (xtracloud on Qualcomm phones). I couldn't find what fallback server is used.

Both Lineage OS and /e/ have Google's set as fallback.

#agps #gps #location #android

⚠️Update AGPS mediatek devices⚠️

The following method is now proven to work (on the note 8 pro).

1. Download QuickEdit and grant root access.
2. Go to /vendor/etc/gnss/agps_profiles_conf2.XML
3. Edit all the supl.google.com servers as shown in the pictures below. Do no edit or remove ANYTHING else, if you do so the file will be ignored by the GPS app.
4. If you set a server that does not work, it will ping a mediatek server.
5. Reboot and enjoy.

I have included a instruction video on how to do so.

PS
Do not use the vodafone server as in the video!

All servers can be used:

#location #agps #gps

https://t.me/NoGoolag/64
https://t.me/NoGoolag/11136
https://t.me/NoGoolag/11293

⚠️Update AGPS mediatek devices⚠️

The following method is now proven to work (on the note 8 pro).

1. Download QuickEdit, or any root text editor, and grant root access.
2. Go to /vendor/etc/gnss/agps_profiles_conf2.XML
3. Edit all the supl.google.com servers as shown in the pictures below. Do no edit or remove ANYTHING else like the name or port, if you do so the file will be ignored by the GPS app.
4. If you set a server that does not work, it will ping a mediatek server.
5. If you have set your NTP_SERVER to pool.ntp.org your new supl server might not work.
6. Reboot and enjoy

If you still want to use the supl.google.com server you can remove your IMSI from the message by disabling this option (set imsi_enable=false)

I have included a instruction video on how to do so.

PS
Do not use the vodafone server as in the video! This redirects to supl.google.com

https://t.me/NoGoolag/64
Qualcomm https://t.me/NoGoolag/11136
Mediatek https://t.me/NoGoolag/11308

#location #agps #gps #mediatek

Blocking xtrapath1.izatcloud.net, xtrapath2.izatcloud.net & xtrapath3.izatcloud.net is great for privacy, #Qualcomm gathers a huge amount of user data.

https://github.com/jerryn70/GoodbyeAds/issues/160

Issue
Requests from these domains are needed for people that use their #GPS. I had many GPS issues and didn't find how to get rid of these... After noticing that these domains were making requests each 5 min, I found why I experienced these issues : A-GPS data was not updated at all.

What data is really collected ? Qualcomm official's website answers:
XTRA uploads the following data types: a randomly generated unique ID, the chipset name and serial number, XTRA software version, the mobile country code and network code (allowing identification of country and wireless operator), the type of operating system and version, device make and model, the time since the last boot of the application processor and modem, and a list of our software on the device

They just forgot to mention that this data is sent with no encryption (except in the xtra3grc.bin format, hope that they're exclusively using that now...). Of course it should be blocked. But it's necessary to allow one of those 3 domains in order to make the GPS work properly.

So I whitelisted one of those domains for 5 min and once the request was done I blacklisted it again, GPS is now working as intended. But I know the issue will come back in about 7 days. (I think that I'm still moderately protected from Qualcomm's threat of privacy, because after less than 3 hours these domains were making requests again.)

I tested with Google maps, Waze, TomTom and Mappy, every time all of these apps were unable to refresh my position in real time, and after more than 3-4 months it was just not working at all.

Solution
Like for graph.facebook.com, add a notice to warn users about these GPS issues.

Sources :
https://wwws.nightwatchcybersecurity.com/tag/gps/
https://www.qualcomm.com/site/privacy/services
Also see https://en.wikipedia.org/wiki/Assisted_GPS

#agps #location #android