News for hackers. Stuff that matters.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by paulie_a on Wednesday June 20, 2018 @01:18AM (#17352767)
Does anyone know of a way to simply fake location data? I genuinely don't care if it is technically illegal. Data collection has jumped the shark at this point
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by tommyallen on Wednesday June 20, 2018 @02:17AM (#17353002)
Have your calls forwarded to a service you can answer from your computer. Securely strap your phone to the back of an outdoor cat. Be sure to set a strong passcode so the cat can't use the phone. To keep the phone charged, invent a charger that can convert the kinetic energy of the cat's attempts at walking away from the phone. Use the money earned from your invention to buy more phones.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by TheSpiceIsLife on Wednesday June 20, 2018 @06:44AM (#17354085)
You could harvest the energy to charge the phone from a perpetually rotating cat by strapping a piece of buttered toast to its back.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by delinka on Wednesday June 20, 2018 @01:42PM (#17357661)
I believe this method is patented and isn’t due to expire for another 12 years.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by mirimir on Wednesday June 20, 2018 @02:23AM (#17353031)
I doubt that there's any way to fake location based on cell towers. That's all done in the baseband radio, which is not readily user accessible. And even if you could mess with it, it's probably very illegal. It's certainly illegal to spoof mobile subscriber identity (IMSI) because that allows theft of service.

It's much easier to disable GPS location capability. But even that's not very reliable, because there are multiple software levels, most of which aren't user controllable.

The best option that I know is turning devices off, and keeping them in Faraday bags, except when in use. So you get to pick which locations get reported. You're less reachable, but that's a necessary tradeoff. For long-term storage in Faraday bags, it's important to remove the battery, because otherwise the device may drain it, trying to ping towers, even though "turned off".

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by TeMPOraL on Wednesday June 20, 2018 @04:16AM (#17353483)
> I doubt that there's any way to fake location based on cell towers. That's all done in the baseband radio, which is not readily user accessible. And even if you could mess with it, it's probably very illegal.

Also, it would probably cause your phone to simply stop working as a phone - cell towers need this location data for their fundamental operations as a cellular system.

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by mirimir on Wednesday June 20, 2018 @06:12AM (#17353956)
Yes, good point. So if you care about cell towers, you can just nuke the radio, and use only VoIP via WiFi. But even that's iffy, I think, given difficulty controlling apps. And finally, even if all that works, you don't really have a "phone" anymore.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by throwaway66666 on Wednesday June 20, 2018 @05:54AM (#17353879)
Is having your phone on airplane mode the same as it being turned off? (still trying to ping towers regardless?)

Also, if a phone has no antenna/no data connectivity/no GPS, but has wifi functionality. What is tracking situation there? I assume one could forward calls to the phone through wifi or is that a terrible idea?

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by mirimir on Wednesday June 20, 2018 @06:07AM (#17353933)
About airplane mode, I'm not sure.

About the wifi-only phone, I recall an old guide from Mike Perry about configuring Android devices to use only wifi.[0] But Copperhead is gone, so ???

0) https://blog.torproject.org/mission-improbable-hardening-and...

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by TheSpiceIsLife on Wednesday June 20, 2018 @06:47AM (#17354102)
Wifi only won't help because other peoples phones have precisely geotagged the location of wifi hotspots, and your phone is likely reporting wifi signal strength to the mothership.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by mirimir on Wednesday June 20, 2018 @02:41PM (#17358357)
Ah, yes. So basically, you can't use your main phone anywhere and for anything that you don't want linked to you. You need one or more secondary phones, purchased as anonymously as possible. Each of those must only be used in specific locations for specific purposes, and otherwise stored in a Faraday bag or box. Perhaps only once, as a "burner phone". In other words, phone use must be compartmentalized. If it matters to you, anyway.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by waldfee on Wednesday June 20, 2018 @03:24AM (#17353299)
For this case you are out of luck since the network provider tracks you through their cell towers.

For spoofing data for apps, if you are on android and have a rooted device there is xposed with xprivacy

https://forum.xda-developers.com/showthread.php?t=3034811

https://github.com/M66B/XPrivacyLua

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by bestnameever on Wednesday June 20, 2018 @06:13AM (#17353959)
This may have changed with android P but AFAIK you don't need root to spoof location data.

https://play.google.com/store/apps/details?id=com.lexa.fakeg...

I personally have used this app to fool certain retail apps to check in-store prices of items.

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by waldfee on Wednesday June 20, 2018 @06:18AM (#17353977)
i think these solutions use the debug api, not sure.

xprivacy allows for spoofing all kinds of data like phonebook, calendar, even allows to not expose the clipboard.

if only gps data is relevant, this non rooted solution is of course easier to set up.

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by homero on Wednesday June 20, 2018 @04:24AM (#17353521)
Root won't help, the modem has its own OS.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by waldfee on Wednesday June 20, 2018 @04:30AM (#17353541)
Of course it won't. even if you could it would not matter because the cell towers know where you are.

My mentioning of xprivacy was only to further knowledge that you can at least spoof data for the software side (apps installed on the device)

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by slowburning on Wednesday June 20, 2018 @09:30AM (#17355136)
You can fix your GPS coordinates on certain phones. See this presentation for more information https://www.youtube.com/watch?v=F1VttfQFTWE

He talks about being able to fix your GPS coordinates to static values. Also being able to fix your list of cell phone towers so you never end up on someone's femtocell. There's also a really cool cell proxy setup for fully anonymous calling via a proxy cellphone

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by reaperducer on Wednesday June 20, 2018 @11:39AM (#17356390)
Good information, but useless for what we're talking about here.

The location data that the cell phone companies are selling is gathered by the cell towers for the fundamental operation of the system. It doesn't come from GPS.

Rule of thumb: If you're emitting a signal (wifi, cell, bluetooth, smoke, etc...) you can be tracked. How accurately only depends on the number of receivers.

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by Yizahi on Wednesday June 20, 2018 @02:10AM (#17352980)
As far as I know some custom ROMs support GPS spoofing, either with fake data or blocking it. But instead you usually get worse camera drivers and some security features may stop working.

All of this doesn't matter for network providers since they will always have your location data, by design of GSM network.

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by narrator on Wednesday June 20, 2018 @07:55AM (#17354479)
The best way to avoid location tracking is to have your primary number be google voice that forwards to your cellphone and never give out your primary number for any reason. If whoever is stalking you doesn't know your real number, they can't pull your location data.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by cascom on Wednesday June 20, 2018 @09:08AM (#17354983)
1. I’m not sure most people’s primary concern is stalking - though this would seem to be a solution

2. From a privacy perspective adding google into the loop seems counter productive

3. The cell phone company can still sell you location data to data brokers based on your name, address, social etc....

Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by narrator on Thursday June 21, 2018 @11:57AM (#17366288)
The person I know who had this problem was getting stalked and fixed it via the Google voice trick. Sure the government might know where you are, but what does a person with a private detective level of sophistication have access to? I guess one way to find out would be to hire a red team to see if they could find the person using data brokers.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by izacus on Wednesday June 20, 2018 @08:26AM (#17354684)
The cell phone operator knows exactly to which base station your phone is connected to. You can't spoof that because then your cellular network stops working.
Re:Verizon, AT&T and Sprint to Limit Sales of Cellphone Loca... by robk on Wednesday June 20, 2018 @07:43AM (#17354414)
To anonymize at least buy a burner Sim and run a voip client on your handset over 4g