News for hackers. Stuff that matters.
Re:Find My Device on Android by wolverine876 on Monday April 08, 2024 @02:04PM (#39972217)
> thanks to specialized Pixel hardware, Pixel 8 and 8 Pro owners will also be able to find their devices if they’re powered off or the battery is dead.

This suggests there is separate hardware with its own power and network capabilities, designed for location tracking, designed to be always on. Is there a way to disable it?

Re:Find My Device on Android by flotzam on Monday April 08, 2024 @02:16PM (#39972353)
FWIW, "It won't be supported by GrapheneOS. (...) Bluetooth still has to be configured and enabled by the OS to make it work that way."

https://discuss.grapheneos.org/d/11520-android-find-my-devic...

Re:Find My Device on Android by tivert on Monday April 08, 2024 @03:04PM (#39972702)
The article linked there has a few more details about the implementation:

https://www.androidpolice.com/android-15-powered-off-finding...:

> To solve this problem, Google is working on a “Powered Off Finding” feature that allows a device to store precomputed Bluetooth beacons in the memory of the Bluetooth controller. This means that even when a device is powered off, it can continue broadcasting Bluetooth beacons to nearby devices.

> Unfortunately, Powered Off Finding isn’t the kind of feature that can just be enabled on any device. This is because the device needs to have hardware support for powering the Bluetooth controller when the rest of the components are shut down. Plus, device makers need to put in some extra engineering work to support this feature. For example, they need to support the Bluetooth Finder hardware abstraction layer (HAL) so that the Android OS can enable Powered Off Finding mode and send those precomputed Bluetooth beacons that I mentioned.

I don't know how that could work if the battery is dead, unless they're letting the Bluetooth controller draw on some reserve battery capacity after the phone has powered itself down.

Re:Find My Device on Android by nradov on Monday April 08, 2024 @03:13PM (#39972769)
There is mostly dead and then there is all dead. A battery which is unable to supply enough power to keep the entire phone operating can likely supply enough for just the Bluetooth chip. Of course, the resulting deep discharge may damage the battery chemistry.
Re:Find My Device on Android by nolist_policy on Monday April 08, 2024 @03:19PM (#39972818)
I'm pretty sure phones shut down long before they reach 0%, keeping plenty of charge for the Bluetooth beacon. The battery protection circuit will for sure prevent deep discharging by cutting the power.
Re:Find My Device on Android by lupire on Monday April 08, 2024 @05:49PM (#39974083)
We've discovered the mythical "unlimited". Unlimited Bluetooth power :-)
Re:Find My Device on Android by alephxyz on Monday April 08, 2024 @02:19PM (#39972373)
Putting my tinfoil hat on, this explains why Google was okay adding a toggle to location access for apps on Android. They don't need your device to send them their location anymore, they'd only need you to be in range of an UWB or BLE device.
Re:Find My Device on Android by kelnos on Monday April 08, 2024 @04:03PM (#39973165)
I'm all for assuming bad intent when it comes to Google and, but this doesn't really make sense.

Google owns the OS; if they want your location, they don't need to care about per-app location permissions.

Re:Find My Device on Android by fsflover on Monday April 08, 2024 @04:31PM (#39973394)
> Google owns the OS

Unless you install something else.

Re:Find My Device on Android by DaSHacka on Monday April 08, 2024 @04:38PM (#39973463)
At which point how does what GP said matter? If you install something else, it doesn't matter what toggles exist in stock android....
Re:Find My Device on Android by fsflover on Monday April 08, 2024 @04:53PM (#39973597)
Did I misunderstood that the Bluetooth device could exchange some data on its own when the phone is off?
Re:Find My Device on Android by Aerbil313 on Monday April 08, 2024 @05:18PM (#39973841)
> Google owns the OS

Google is still beholden to consumer privacy laws. I’m sure if you turn off location data in your Google account they won’t track you. The guys in the Room 641A will.

Re:Find My Device on Android by jasonfarnon on Monday April 08, 2024 @07:43PM (#39974847)
"Google has agreed to pay nearly $392 million in a settlement with 40 states over allegations that the company tracked people through their devices after location tracking had been turned off, a coalition of state prosecutors announced on Monday."
Re:Find My Device on Android by hulitu on Wednesday April 10, 2024 @07:40AM (#39989563)
> Google is still beholden to consumer privacy laws.

To ignore them or what ? None of the FAANG respect the privacy laws (GDPR for example). They just pay lobby money and insignificant fines from time to time and no government cares about it.

Re:Find My Device on Android by jiberius on Monday April 08, 2024 @02:35PM (#39972495)
iOS-style runtime permissions (for things like location access) were introduced in Android 6.0, which was released back in 2015. That's quite the long play.
Re:Find My Device on Android by explore on Monday April 08, 2024 @04:08PM (#39973202)
Does anyone know if the baseband chip communication with the tower is disabled in airplane mode?
Re:Find My Device on Android by non415556 on Monday April 08, 2024 @10:11PM (#39975708)
I've measured with an external, unconnected RF monitor. The cell phone shows clear activity when not in airplane mode, and then zero activity when in airplane mode.

There's my anecdata...

Re:Find My Device on Android by mazsa on Tuesday April 09, 2024 @05:21AM (#39977652)
I was told: "I suspect that in airplane mode it would only communicate at the specific request of the system (and perhaps in spread spectrum mode), so [before baseband is activated from outside] it would not be worth measuring." What do you think?
Re:Find My Device on Android by gruez on Tuesday April 09, 2024 @04:59PM (#39984186)
Isn't that... totally expected? After all, it's the system that told the modem/baseband to enter airplane mode in the first place. Of course it can also tell it to exit airplane mode.
Re:Find My Device on Android by mazsa on Tuesday April 09, 2024 @05:25PM (#39984454)
You are right, bad translation. She was trying to explain that the problem is that, independently of you and against your will, the remote telecommunications system is able to activate the broadband chip of your mobile phone while it is in airplane mode, where you expect the baseband system to be deactivated.
Re:Find My Device on Android by encom on Monday April 08, 2024 @02:09PM (#39972268)
I was considering a Pixel 8a when it's released, now I'm not so sure. Not really keen on a mobile botnet.
Re:Find My Device on Android by nolist_policy on Monday April 08, 2024 @03:26PM (#39972855)
IMHO if you cary around anything that contains a cellular modem you're fair game anyways.
Re:Find My Device on Android by fsflover on Monday April 08, 2024 @04:36PM (#39973448)
On my phone, the modem can be killed with a hardware kill switch.
Re:Find My Device on Android by nolist_policy on Monday April 08, 2024 @04:48PM (#39973544)
Which one? I have a Pinephone and it is a great device. It's just not a good phone.
Re:Find My Device on Android by fsflover on Monday April 08, 2024 @04:52PM (#39973587)
Librem 5.
Re:Find My Device on Android by TheSkyHasEyes on Monday April 08, 2024 @03:29PM (#39972886)
The if here is some phones can be turned off and not transmit anything, at all.
Re:Find My Device on Android by nolist_policy on Monday April 08, 2024 @03:34PM (#39972928)
Modems are usually directly connected to the battery rail, because (so the saying goes) they have high peak power consumption.
Re:Find My Device on Android by Aerbil313 on Monday April 08, 2024 @05:47PM (#39974067)
I once built a cell phone from scratch. They do have high peak power consumption, and I did connect it to the battery rail directly, along with some capacitors to handle the surges.
Re:Find My Device on Android by bigiain on Monday April 08, 2024 @08:11PM (#39975058)
I have a Pinephone, which has hardware switches to turn off potential privacy destroying features.

But it's even more secure than that - them made it so it's such a poor phone that I never managed to get it into use as a daily driver phone for more than a day or two at a time! The most private device is one you never bother carrying!

Re:Find My Device on Android by alwayslikethis on Tuesday April 09, 2024 @06:15AM (#39977919)
If you need to worry about cellular tracking, you should either carry your phone in a faraday bag or carry a dumb phone whose battery can be taken out.
Re:Find My Device on Android by arcastroe on Monday April 08, 2024 @10:08PM (#39975698)
Does this have any implications for "Airplane mode". Or the requirement to turn off your cell phone during takeoff.
Re:Find My Device on Android by smeej on Tuesday April 09, 2024 @06:06AM (#39977873)
You already don't have to turn your phone's Bluetooth off during takeoff, so, no, it shouldn't.