You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

24 lines
1.1 KiB

---
title: Wifi traffic analysis on a gugelfrei fon
date: 2022-04-20
---
Is the gugelfrei fon really successfully degoogled? Is any data sent to the known data sinks? Maybe the IMSI number to the SUPL host? For that I conducted wifi network dump of the android startup procedure. Here you can see in sequence network connectivity check, time sync and download of assistance data for gps (A-GPS).
For the test setup I opened up a wifi hotspot on my desktop with [hostapd](https://wiki.archlinux.org/title/Software_access_point).
```
create_ap <wifi_device> <lan_device> <SSID> <PASSWORD>
```
Then I just sniffed on `<wifi_device>` with [wireshark](https://www.wireshark.org/).
Tested device is a LG G3 d855 with [recent gugelfrei OS](https://cld.freedomhost.de/index.php/s/afgcJqXoDZQ8RCp).
Results for captivity portal and timeserver:
![wifi](/images/analysis/wifi_1.png)
SUPL Server are not used. A-GPS data is fetched via XTRA Server:
![wifi](/images/analysis/wifi_2.png)
No traces of privacy violations here. See [full bootup wifi dump](/images/analysis/bootup.pcapng) for wireshark.