Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

The truth about those claims of Qualcomm chips secretly snooping on you
The Register ^

Posted on 04/27/2023 4:33:37 AM PDT by FarCenter

Snapdragon giant and others insist alleged data gathering is overblown

ANALYSIS Cellphones using Qualcomm chipsets may transmit data sometimes classified as personal information, specifically IP addresses, back to Qualcomm. But where such transmission is occurring, it's not secret and it has been going on for years.

That doesn't mean, however, there's no privacy risk in Qualcomm-based phones or in devices with rival chip sets for individuals like journalists or human rights advocates with sophisticated adversaries. Such scenarios, however, are unusual and not much of a worry for most mobile phone users.

Recently, hardware security firm Nitrokey published an advisory claiming that "smartphones with Qualcomm chips secretly send personal data to Qualcomm" and do so "without user consent, unencrypted, and even when using a Google-free Android distribution."

Post author "Paul Privacy" found that a Sony Xperia XA2 smartphone with a Qualcomm Snapdragon 630 processor, running /e/OS, a version of Android stripped of Google services, started communicating with Izat Cloud over unprotected HTTP.

The post goes on to claim that Izat is part of Qualcomm's XTRA service. As Qualcomm explains on the izatcloud.net website, "the Qualcomm Location XTRA Service generates and provides accurate satellite positions for extended periods of time to a mobile device."

It's basically a way to make GPS more precise and reliable while reducing use of energy-intensive radio hardware. The Izat servers provide information about satellite positions, which Qualcomm-powered phones download over HTTP. Doing so reveals to the servers the public IP addresses of the phones plus, according to NitroKey, some device metadata. That's really what this all boils down to.

"Qualcomm’s proprietary firmware is not only downloading some files to our phone to help establish the GPS location faster, but also uploads our personal data, such as the devices’ unique ID, our country code (Germany in this case), our cellphone operator code (allowing identification of country and mobile operator), our operating system and version and a list of software on the device," as Nitrokey put it, arguing this supplied metadata amounts to a unique per-person signature that harms privacy and occurs even when GPS is turned off.

A Qualcomm spokesperson disputed the research. "The article is riddled with inaccuracies and appears to be motivated by the author’s desire to sell his product," a company spokesperson told The Register in an email. "Qualcomm only collects personal information when permitted by applicable law."


TOPICS: News/Current Events
KEYWORDS:

1 posted on 04/27/2023 4:33:37 AM PDT by FarCenter
[ Post Reply | Private Reply | View Replies]

To: FarCenter

Here’s the truth about all RF producing devices, you cannot trust them. The only thing you could do is put them in a fair day bag, you may want to even double or triple bag them. Even if you remove the batteries from a device, there are many times backup batteries and capacitors on the board and stuff that continue to emit RF signals that can be tracked either locally or via the Internet. If you don’t need it on just put it in an RF bag.


2 posted on 04/27/2023 4:39:25 AM PDT by dila813
[ Post Reply | Private Reply | To 1 | View Replies]

To: FarCenter

Location services may be expected to determine the computing device IP addresses on both the local network and the wide area network . . . or attempt to get “close enough” to such IP addresses.

If you want privacy, then disable Location Servvices and remove the Map applications. (Will probably save some battery life.)


3 posted on 04/27/2023 4:49:03 AM PDT by linMcHlp
[ Post Reply | Private Reply | To 1 | View Replies]

To: FarCenter

Google Maps is an amazing crowd sourced program that we almost can’t live without these days. The accuracy of the system depends on everyone’s phone reporting back personal location data regardless if they’re using the app or not. This is the basic argument for chips like these. But it comes at a price of your privacy.

And with the adoption of social media, we threw that out long ago…


4 posted on 04/27/2023 5:06:04 AM PDT by Magnatron
[ Post Reply | Private Reply | To 1 | View Replies]

To: FarCenter

“Qualcomm only collects personal information when permitted by applicable law.”

Cute non-answer.


5 posted on 04/27/2023 5:10:12 AM PDT by rightwingcrazy (;-,)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dila813

“The only thing you could do is put them in a fair day bag..”

What if it’s an unfair day?

L


6 posted on 04/27/2023 5:19:00 AM PDT by Lurker ( Peaceful coexistence with the Left is not possible. Stop pretending that it is.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: linMcHlp
I bought a stand alone GPS receiver just so I didn't have to turn on my phone's location service every time I wanted to use a map in the car. I'll turn it on for a minute or two if I really need my location, but I don't like Google knowing where I am every minute of the day.

And I hate apps which won't run without it. That's just lazy programming to not allow the user a way to manually ever a location. I bought a remote read Bluetooth thermometer which needed location to be turned on to work. I sent it back and gave it a one star review because of it

7 posted on 04/27/2023 5:23:29 AM PDT by KarlInOhio (Democrats' version of MAGA: Making America the Gulag Archipelago )
[ Post Reply | Private Reply | To 3 | View Replies]

To: KarlInOhio

May interest:

GrapheneOS: https://grapheneos.org/


8 posted on 04/27/2023 5:25:16 AM PDT by linMcHlp
[ Post Reply | Private Reply | To 7 | View Replies]

To: Lurker

Spelling corrections...tech hazard


9 posted on 04/27/2023 5:40:53 AM PDT by dila813
[ Post Reply | Private Reply | To 6 | View Replies]

To: FarCenter

So rest assured, as long as you’re not a threat to some unknown entity, you’re personal information and activity is probably relatively safe.


10 posted on 04/27/2023 5:52:43 AM PDT by robel
[ Post Reply | Private Reply | To 1 | View Replies]

To: linMcHlp

Not entirely accurate because many apps are communicating with their “mother ship”, and sending location data to feed the advertising beast that pays the way. Many free apps including games pay their way by getting the cellphone’s location and selling it to the behemoth that is electronic advertising.
The Faraday bag is a better option than trying to manipulate the phone into total RF silence.


11 posted on 04/27/2023 6:17:47 AM PDT by Montana_Sam (Truth lives.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: dila813

Just funnin’ with ya.

L


12 posted on 04/27/2023 6:33:59 AM PDT by Lurker ( Peaceful coexistence with the Left is not possible. Stop pretending that it is.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: FarCenter
"Qualcomm only collects personal information when permitted by applicable law."

"Qualcomm only collects personal information when ordered to by applicable government entities."

13 posted on 04/27/2023 7:16:53 AM PDT by Mr. Jeeves ([CTRL]-[GALT]-[DELETE])
[ Post Reply | Private Reply | To 1 | View Replies]

To: FarCenter
Using any G**gle product (without proper precautions) is as much as bending over, spreading your cheeks, and begging the Deep State to look up your bum with a spyglass.

If you're running Android, you can buy yourself a bit of relief by rooting your phone and installing Android Firewall (dev.ukanth.ufirewall), and denying Internet access to EVERYTHING made by G**gle (or any other app you don't trust explicitly).

A 3rd party ROM, like Graphene or LineageOS (with MicroG) is a more complete solution but not without its pitfalls. I can tell you from experience that functions like battery life, wireless reception, etc, can suffer with these non-G**gle ROMS, but that's mostly a consideration if you're installing the ROM yourself. Less a problem if you buy a phone with a de-G**gled ROM already installed and customer service is included in the price.

Android Firewall is a no-brainer mod that's simple to make, but presumes your phone is root-able.

14 posted on 04/27/2023 8:17:50 AM PDT by Paal Gulli
[ Post Reply | Private Reply | To 1 | View Replies]

To: Paal Gulli

I agree that everything google is spyware. Google free android is probably better privacy than apple but just carrying the device still gives the phone company a lot of info if it is on. Google free android is probably less privacy invading than iphone.

Over the years I have used all of the no-google variants — LineageOS, CalyxOS and GrapheneOS.

Of all of them, Graphene is hardened and the most secure and only lets apps run in a sandbox environment. Graphene has better battery life than the stock android that has google because it is not sending your information to the google mothership 3600 times a day. Graphene only runs on google pixel devices. I have never had any compatability problems or issues with graphene. On a pixel, graphene has a webinstaller that is super easy to install.

CalyxOS can be installed on google pixel phones and a few others. It is a good alternative, but it is less secure than graphene because it uses MicroG to spoof the google signatures and still interacts with google’s servers.

Lineage works on a lot more devices, but is the least secure, because you have to run it with the bootloader unlocked, which I won’t do and this won’t pass the secure setting needed to use my bank app.

I have grapheneOS on my phone.


15 posted on 04/27/2023 10:24:39 AM PDT by gracefullyparanoid
[ Post Reply | Private Reply | To 14 | View Replies]

To: dila813

The only thing you could do is put them in a fair day bag, ....


Do you mean Faraday Bag ??


16 posted on 04/27/2023 11:46:08 AM PDT by AirForceVet1988 ("As the pattern gets more intricate and subtle, being swept along is no longer enough.")
[ Post Reply | Private Reply | To 2 | View Replies]

To: FarCenter

bump


17 posted on 04/27/2023 11:52:36 AM PDT by Albion Wilde (“There is no good government at all & none possible.”--Mark Twain)
[ Post Reply | Private Reply | To 1 | View Replies]

To: AirForceVet1988

https://freerepublic.com/focus/news/4148771/posts?page=6#6


18 posted on 04/27/2023 2:22:14 PM PDT by dila813
[ Post Reply | Private Reply | To 16 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson