Pokemon Go, Security, and Obsolescence

Re:Pokemon Go, Security, and Obsolescence by lini on Sunday October 16, 2016 @02:52AM (#12717364)

The problem is that you don't need root for GPS spoofing. Botters also don't care about SafetyNet (used to detect root before the game starts), since they reverse engineer the API and make REST calls directly. Furthermore, there are ways around the root check - mostly involving hiding the su binary and some additional tweaks.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by deanclatworthy on Sunday October 16, 2016 @03:18AM (#12717449)

Furthermore, you can buy GPS spoofing devices anwyay which you can just carry around with you in your pocket.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by kalleboo on Sunday October 16, 2016 @03:56AM (#12717550)

Is that really something that's available? Nothing turned up on a cursory web search, aside from a story about students building their own with $3,000 dollars worth of equipment (and it sure didn't fit in a pocket)

edit: And Wikipedia says "GPS spoofing attacks had been predicted and discussed in the GPS community previously, but no known example of a malicious spoofing attack has yet been confirmed"

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by deanclatworthy on Sunday October 16, 2016 @04:13AM (#12717584)

They're highly illegal under US laws but from my reading around this topic, as someone who is currently building a gps-dependent app, is it's feasible.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by mrswag on Sunday October 16, 2016 @06:27AM (#12717938)

It's cheaper than that. A HackRF and some sort of better clock and you're done.

http://www.rtl-sdr.com/cheating-at-pokemon-go-with-a-hackrf-...

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by Natanael_L on Sunday October 16, 2016 @05:17AM (#12717758)

Don't carry it around, though! Put the thing in a Faraday's cage, and use a cable through the mesh to get your Internet connection.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by trakout on Sunday October 16, 2016 @12:04PM (#12719217)

Furthermore, you don't need a device at all if you want to bot. The unofficial API (and client-side signing) was figured out a while back.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by bsder on Sunday October 16, 2016 @04:55PM (#12720889)

Got a link for that? I'd like to go read about it. Primarily as what NOT to do ... :)

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by swiley on Sunday October 16, 2016 @03:54AM (#12717542)

Man, you can probably crash some planes with those.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by lucb1e on Sunday October 16, 2016 @08:32AM (#12718312)

Only if you carry the plane in your pocket too or set a way too high output power while sitting inside one, if even then.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by foota on Sunday October 16, 2016 @03:34AM (#12717495)

To be fair, that's probably highly illegal if caught by the fcc.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by seszett on Sunday October 16, 2016 @04:15AM (#12717594)

The FCC only has business in the US though.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by lucb1e on Sunday October 16, 2016 @08:36AM (#12718332)

Almost every country has something like that. The Dutch Agentschap Telecom will hunt you down for transmitting a fake GPS signal too.

The thing is, nobody cares if you send a signal too weak to go beyond a meter of your pocket. That's why it's totally legal to send FM on registered frequencies as long as your output is under a certain amount. Same with WiFi even.

I heard about someone looking into GPS spoofing once in the context of catching drones, even nearby ones (e.g. fly near to it). It takes a lot of energy to do that and was basically not practical outside of military settings.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by roywiggins on Sunday October 16, 2016 @09:58AM (#12718596)

This is not always true - FM transmitters were not legal in the UK, regardless of power, until 2011 or so. Can't imagine anyone was actually prosecuted for using one, though.

[ Parent | on HN ]

Re:Pokemon Go, Security, and Obsolescence by lucb1e on Sunday October 16, 2016 @12:01PM (#12719203)

If there is no chance of getting caught anyway, there is only moral law. Since you're not disturbing anyone with an FM transmitter in your car that transmits only as far as you car radio, it passes moral law.

Interesting to learn that it wasn't legal in the UK though. I wouldn't know of the legality in the Netherlands, but I know they're in use and nobody's complaining.

[ Parent | on HN ]