4 ms·

The article is about the hardware chip directly sending these information, not through drivers. It is not about iOS or Android or any other OS.

wiml 3y ago
According to the link nwcs posted, it's being done by a user level Java process, not by the modem firmware or anything like that.
luca020400 3y ago
The download is done from the Android side. It's a privileged app ( a service in Android lang ) that once fetched sends the data to the modem, where GPS is actively implemented, and augmented by such extra data.
the_third_wave 3y ago
Pray tell, how does the hardware chip send data to Qualcomm? That data goes over the 'net, right? How does that hardware chip interface with the 'net? The answer here is 'through the OS' since that is how network connections are made on these devices. Even if the hardware chip contained an IP stack it would still need a network connection to get the data back to Qualcomm. That network connection goes either over the wireless interface (3/4/5G), via WiFi, Bluetooth, NFC or any of the other interfaces the device has - all of which are controlled through the OS. Android, being built on top of Linux which contains Netfilter as I explained elsewhere [1] which allows you to block network access no matter whether the data originates from some hardware chip or somewhere else. The only way data could make its way off the device is if the radio firmware made a covert connection to Qualcomm which could be used to totally bypass the Linux kernel. That connection would not use the system IP stack and it could work even if the user does not have data active. It would need cooperation from network operators (all over the world) to get the data out of the carrier's network to Qualcomm. This is not what this article is about, it is quite possible that the likes of the NSA are up to this type of shenanigans since they may be able to force carriers to do their bidding [2] but Qualcomm is just another corporation looking to 'get to know their customers'. Read the article and you'll see that the data is exfiltrated through Android. A default block for outgoing data - like I use - blocks this just as well as it blocks other similar attempts. [1] https://news.ycombinator.com/item?id=35707645 https://news.ycombinator.com/item?id=35707645 [2] https://www.pbs.org/wgbh/frontline/article/how-att-helped-the-nsa-spy-on-millions/ https://www.pbs.org/wgbh/frontline/article/how-att-helped-th...

wiml 3y ago

According to the link nwcs posted, it's being done by a user level Java process, not by the modem firmware or anything like that.

luca020400 3y ago

The download is done from the Android side. It's a privileged app ( a service in Android lang ) that once fetched sends the data to the modem, where GPS is actively implemented, and augmented by such extra data.

the_third_wave 3y ago

Pray tell, how does the hardware chip send data to Qualcomm? That data goes over the 'net, right? How does that hardware chip interface with the 'net? The answer here is 'through the OS' since that is how network connections are made on these devices. Even if the hardware chip contained an IP stack it would still need a network connection to get the data back to Qualcomm. That network connection goes either over the wireless interface (3/4/5G), via WiFi, Bluetooth, NFC or any of the other interfaces the device has - all of which are controlled through the OS. Android, being built on top of Linux which contains Netfilter as I explained elsewhere [1] which allows you to block network access no matter whether the data originates from some hardware chip or somewhere else. The only way data could make its way off the device is if the radio firmware made a covert connection to Qualcomm which could be used to totally bypass the Linux kernel. That connection would not use the system IP stack and it could work even if the user does not have data active. It would need cooperation from network operators (all over the world) to get the data out of the carrier's network to Qualcomm. This is not what this article is about, it is quite possible that the likes of the NSA are up to this type of shenanigans since they may be able to force carriers to do their bidding [2] but Qualcomm is just another corporation looking to 'get to know their customers'. Read the article and you'll see that the data is exfiltrated through Android. A default block for outgoing data - like I use - blocks this just as well as it blocks other similar attempts. [1] https://news.ycombinator.com/item?id=35707645 https://news.ycombinator.com/item?id=35707645 [2] https://www.pbs.org/wgbh/frontline/article/how-att-helped-the-nsa-spy-on-millions/ https://www.pbs.org/wgbh/frontline/article/how-att-helped-th...