Latest release of GrapheneOS replaces Qualcomm PSDS (XTRA) servers with a GrapheneOS server caching the data by default:
https://grapheneos.social/@GrapheneOS/110318519898395712
We've also fully removed the unnecessary User-Agent header instead of only removing the serial number from it as we did previously.
GrapheneOS version 2023050500 released: https://grapheneos.org/releases#2023050500. See the linked release notes for a summary of the improvements over the previous release. Forum discussion thread: https://discuss.grapheneos.org/d/4870-grapheneos-version-2023050500-released #grapheneos #privacy #security
Latest release addresses the privacy issue brought to our attention by NitroKey with Qualcomm SoC devices by stopping xtra-daemon from sending the SoC serial number in the HTTPS User-Agent header:
https://grapheneos.social/@GrapheneOS/110284380098624253
We'll be removing the User-Agent header completely later.
GrapheneOS version 2023042900 released: https://grapheneos.org/releases#2023042900. See the linked release notes for a summary of the improvements over the previous release. Forum discussion thread: https://discuss.grapheneos.org/d/4749-grapheneos-version-2023042900-released #grapheneos #privacy #security
Per our request, NitroKey has fixed one of the main issues in https://www.nitrokey.com/news/2023/smartphones-popular-qualcomm-chip-secretly-share-private-information-us-chip-maker. XTRA downloads are done by xtra-daemon in the OS, not firmware. It also does use HTTPS by default, but the OS can override the default URLs via gps.conf and some OSes do override to HTTP URLs.
We've added another PSDS data cache at http://qualcomm.psds.grapheneos.org for devices using Qualcomm GNSS rather than Broadcom GNSS.
We plan to use this to implement our PSDS server toggle for Snapdragon Pixels and future Snapdragon devices we'll end up supporting.
#grapheneos #privacy #security #gnss #agnss #psds #xtra #qualcomm #broadcom
Jean Gautier
GrapheneOS
