Skip to content
This repository has been archived by the owner on Sep 6, 2019. It is now read-only.

Location spoofing broken? #477

Closed
treare opened this issue Aug 9, 2013 · 20 comments
Closed

Location spoofing broken? #477

treare opened this issue Aug 9, 2013 · 20 comments
Labels

Comments

@treare
Copy link

treare commented Aug 9, 2013

Hi,

Is it possible that location spoofing is broken since last version(s)? I use a simple app that is spoofed very easily but location is'nt working anymore. Other data seems to be spoofed

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

Although you gave little information, no application name, no logcat, I have found a bug in handling the method addNmeaListener. It is fixed in the just released version.

@M66B M66B closed this as completed Aug 9, 2013
@treare
Copy link
Author

treare commented Aug 9, 2013

Im sorry. Still not allowed to install logcat and i didnt mention the app on purpose because its something used local and it is a payed app. I guess little info is better than no info.

@treare
Copy link
Author

treare commented Aug 9, 2013

I justed tested the new version. It seens location is still not working. I will try to make a logcat tonight

Edit: this time i checked with marine traffic which also can be spoofed easily.

Edit 2: if i kill marine traffic and set a new location in xprivacy marine traffic will goto the spoofed location for a few seconds. After that it goes to the real location.

@28Black
Copy link
Contributor

28Black commented Aug 9, 2013

I do not understand why you do not want to say the name of the app. Is it a banned app (Black Market, etc.)? If so, I hardly think that you can expect any help here!
But this information would help;)

Anyway, try to restrict the location of the system app 10019 (google-play-services)! In most cases this should work.
If it fails to, your app maybe uses you ip / network address for the approximate location ;)

@treare
Copy link
Author

treare commented Aug 9, 2013

euh.... it's NOT an illegal app. It's just an app of a local company (non-english). It's not the app's problem, as you can see M66B found a bug. I gave the name of another app that has thesame problem. Marine traffic worked fine with it's own location spoofed. It's a bug in xprivacy, nothing more. No settings are changed for the app nor was the app updated.

Edit: an extra app name that cannot be spoofed anymore regarding location: facebook

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

"Edit 2: if i kill marine traffic and set a new location in xprivacy marine traffic will goto the spoofed location for a few seconds. After that it goes to the real location."

This is typically caused if the app either uses GSF or the Wi-Fi scan results to determine the location.
Both can be blocked:

  • GSF: connect
  • Wi-Fi: getScanResults

Look in the usage view what the app(s) are trying to access.

@28Black
Copy link
Contributor

28Black commented Aug 9, 2013

Ok. I can not confirm that Facebook does not work.
For me facebook is unable to get any location ;) You might be right that it doesnt show up your "fake" location :P
I think that is a bug which @M66B should take a look at... ;)

@treare
Copy link
Author

treare commented Aug 9, 2013

All steps under location are blocked, so also connect and get scan results. for facebook, for marine traffic and for "my" app.

Edit: not all were blocked. isproviderenabled wasn't blocked. if i block that one i get no location. so it's real location or no location.

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

Facebook reports me at Christmas Island, just with location restricted and without any of the dangerous methods restricted.

@28Black
Copy link
Contributor

28Black commented Aug 9, 2013

@M66B And your GSF, is it also restricted?
Now I also restricted everything without any of the dangerous methods - no success. Facebook says that it couldnt determine my location

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

No, I didn't restrict GSF.
If you cannot get a position that is probably because you have restricted the 'dangerous' methods below the location restriction.

@28Black
Copy link
Contributor

28Black commented Aug 9, 2013

Now they aren't restricted anymore, but I still doesn't get a location...

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

Are you sure one of the providers, network, GPS, etc, are giving locations?
XPrivacy only replaces real locations obtained.

@28Black
Copy link
Contributor

28Black commented Aug 9, 2013

;) It doesnt worked for me... but then I remembered what my dad told me: If your Computer is running for hours and starts to do strange things, simply reboot it.

:D After the reboot it works like a charm - thanks @M66B !

@Frost58
Copy link

Frost58 commented Aug 9, 2013

This may be closed, but I'm having a similar issue.
ROM: CM 10.1.2 (4.2.2), Rooted
DEV: Galaxy S2 Skyrocket
Xprivacy Version: 1.8.8, Framework 2.1.4, XposedBridge 2.1.4, app_process 34

Settings for apps:
ALL Location options are selected
ALL Network options are selected
GSF is NOT listed in Xprivacy (I assume this is the Google Services Framework)
There are NO Wi-Fi options in my installation
Play/Google Play is NOT an option in the app selection list

No effect: GPS Status, Maps (won't dump previous location, won't accept spoof), Voxer, and Google Earth
Initially works: Facebook, Plume (spoofed location works until internal GPS gets lock (even if GPS is "off" in settings), then real physical location is returned
Works (not as instructed to): WhatsApp (it won't lock on, it reports being somewhere in San Francisco (as opposed to random or Barrow, AK) - the only app with SOME success)

With access DENIED to all location and network query services/commands, why is true GPS data being returned to these apps? I'm a hardware guy, not a software/coder guy.

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

@Frost58 did you flash the Xposed fix?

GSF/Google Play is a system app, disable the filters in the settings and you can see it.

For restricting Google maps: see the wiki
http://wiki.faircode.eu/index.php?title=XPrivacy

@Frost58
Copy link

Frost58 commented Aug 9, 2013

@M66B Thanks for the help, but I don't have any filters (that I know of. I only know I can filter by permission type).
Play/Google Services do not show up under "All", and I tried using the settings described for Maps.
Not only are some of the commands/options not present, but it didn't work at all with the settings available.
I really need this to work since I discovered that LBE doesn't actually deny GPS access (at least with Facebook and Maps, Foursquare returned "Enable Location Services").

@M66B
Copy link
Owner

M66B commented Aug 9, 2013

Menu -> Settings -> Clear the two filter checkbox - > Ok

@Frost58
Copy link

Frost58 commented Aug 9, 2013

Got it.
I've had SOME success. Facebook will eventually find my real location, which I find annoying (and it's lagging like crazy), but Maps...
Maps is in some kind of loop. The location pointer isn't making it to where I told it I was in Settings, but it also won't settle anywhere NEAR where I'm at (Southwest Nevada vs. Southwest California). It's a narrow ellipse of semi-random places.
And I assume I shouldn't be alarmed/surprised that the apps are demanding I turn on location services, correct?

Update:
Google Maps is now taking the location I entered in settings while The Weather Channel just breaks (not worried about TWC though). I'm going to uninstall Plume as I don't use it, so this leaves Facebook...
...
What a bitch Facebook is. I get either no location (while the "Check In" tab shows my home location) or a temporary focus on my spoofed location. I'll try some more settings later, but this is ridiculous - and it's Facebook's fault for making this so difficult.
I think the app's getting my location from my SIM card, Wi-Fi network, Cellular (which is turned off - data limits), or it's STILL finding a way to sniff the networks for aGPS. It'd be hard for my Wi-Fi though as the System identifies it as X000000000 now.

@M66B
Copy link
Owner

M66B commented Aug 10, 2013

Wi-Fi: restrict getScanResults

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

4 participants