Some Wi-Fi hardware does allow access to signal before demodulation, for debugging purposes or channel monitoring (e.g. [1]). But this is usually limited in som

Some Wi-Fi hardware does allow access to signal before demodulation, for debugging purposes or channel monitoring (e.g. [1]). But this is usually limited in some way (e.g. you can only get a limited number of samples or FFT bins). The authors also talk about correlating such samples with GPS time with sub-microsecond precision. This is most likely impossible. GPS receiver is separate from the Wi-Fi interface and I doubt they share any kind of low-level synchronization in a smartphone. [1] https://wireless.wiki.kernel.org/en/users/drivers/ath9k/spectral_scan https://wireless.wiki.kernel.org/en/users/drivers/ath9k/spec...