4 ms·
Verified location using GPS. Problem: Currently, users (or attackers) can easily manipulate the location provided to an app on a phone. Solution: Use raw meas
by Addono 6y ago
Verified location using GPS.
Problem: Currently, users (or attackers) can easily manipulate the location provided to an app on a phone.
Solution: Use raw measurements from positioning sattellites to check if the location reported by a user actually lines up with the measurements of their phone.
Why is it hard?
- Lack of documentation, standardization and support on collecting raw measurements on phones.
- Processing raw measurements is tricky
- Finding anomalies in this raw data is even harder
Some of it is working - yay! - and there's also a public API, such that others can use it too: https://claimr.tools https://claimr.tools
- riskycodes 6y agoThis looks very useful. Good luck with your pursuit!
- john4534243 6y ago> Currently, users (or attackers) can easily manipulate the location provided to an app This is respecting users privacy and its a feature.
- Addono 6y agoHmm, I see your concern. I'm pretty big on privacy myself, so I feel I should be able to answer this in a satisfying way. Most importantly, this always requires the user's concent. On Android you still need the same location permissions as for normal GPS location positioning. Hence, as a user you're always free to reject location permissions same as before. I have to admit, this tech can also be used for evil purposes. For now, not all phones support collecting raw measurements - either hardware or software support is lacking, but in the future if some entity could force you to have your location verified, then having you cannot lie about it anymore.
- john4534243 6y agoIf i want my device to lie about my location for whatever reason it should do that, the device should not control me.