Greg SlepakJan 31
@GrapheneOS Are Pixel devices running GOS vulnerable to this GNSS baseband processor tracking?
https://an.dywa.ng/carrier-gnss.html
Mobile carriers can get your GPS location

In iOS 26.3, Apple introduced a new privacy feature which limits “precise location” data made available to cellular networks via cell towers. The feature is only available to devices with Apple’s in-house modem introduced in 2025. The announcement1 says https://support.apple.com/en-us/126101 ↩

an.dy wa.ng
Show threadGrapheneOSJan 31
@taoeffect No, but this article isn't accurate in general.
Show threadjkscFeb 4
@GrapheneOS @taoeffect
What specifically is inaccurate? How does GrapheneOS mitigate this?
Show threadGrapheneOSFeb 4
@jksc @taoeffect We're not talking about GrapheneOS specifically. The article is inaccurate about how this works in general including for iOS. This is an example of someone being aware of certain things existing and then making a whole bunch of assumptions about it which they're communicating as fact. It's the responsibility of the person making these claims to provide evidence. The article is open about the fact that they're not familiar with how it actually works in practice and are assuming.
Show threadGrapheneOSFeb 4

@jksc @taoeffect

> A major caveat is that I don’t know if RRLP and LPP are the exact techniques, and the only techniques, used by DEA, Shin Bet, and possibly others to collect GNSS data; there could be other protocols or backdoors we’re not privy to.

You should not be basing your understanding on an article written by someone making assumptions about how things work without knowing how things are actually implemented. They're claiming the changes made by Apple aren't useful without evidence.

Show threadjkscFeb 4

@GrapheneOS @taoeffect To be clear, you have answered "No" to the question "Are Pixel devices running GOS vulnerable to this GNSS baseband processor tracking?"

How does the operating system mitigate Control Plane LCS for all modems running on Pixel devices? Is this even publicly documented anywhere?

I'm fine with the article cited being inaccurate, but it's unclear on what you're basing your answer that GOS Pixels "are not vulnerable".

Show threadGrapheneOSFeb 4

@jksc @taoeffect

> To be clear, you have answered "No" to the question "Are Pixel devices running GOS vulnerable to this GNSS baseband processor tracking?"

Correct.

> How does the operating system mitigate Control Plane LCS for all modems running on Pixel devices? Is this even publicly documented anywhere?

Location detection based on the cellular connection itself can only be avoided with airplane mode. Apple hasn't changed that for iPhones, they're only trying to reduce the precision.

Show threadGrapheneOSFeb 4

@jksc @taoeffect

> I'm fine with the article cited being inaccurate, but it's unclear on what you're basing your answer that GOS Pixels "are not vulnerable".

The cellular radio has no direct connection to GNSS on Pixels and doesn't control it. It's the operating system implementing support for providing supplementary location data to the cellular radio for E911 support. Many regions including Europe don't use E911 in the first place but rather a different standard not implemented by AOSP.

Show threadAndromxda 🇺🇦🇵🇸🇹🇼
@GrapheneOS Will GrapheneOS implement ETSI TS 103 625 support?
Feb 5 at 6:03amWeb