You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24 lines
1.1 KiB
24 lines
1.1 KiB
---
|
|
title: Wifi traffic analysis on a gugelfrei fon
|
|
date: 2022-04-20
|
|
---
|
|
|
|
Is the gugelfrei fon really successfully degoogled? Is any data sent to the known data sinks? Maybe the IMSI number to the SUPL host? For that I conducted wifi network dump of the android startup procedure. Here you can see in sequence network connectivity check, time sync and download of assistance data for gps (A-GPS).
|
|
|
|
For the test setup I opened up a wifi hotspot on my desktop with [hostapd](https://wiki.archlinux.org/title/Software_access_point).
|
|
```
|
|
create_ap <wifi_device> <lan_device> <SSID> <PASSWORD>
|
|
```
|
|
|
|
Then I just sniffed on `<wifi_device>` with [wireshark](https://www.wireshark.org/).
|
|
|
|
Tested device is a LG G3 d855 with [recent gugelfrei OS](https://cld.freedomhost.de/index.php/s/afgcJqXoDZQ8RCp).
|
|
|
|
Results for captivity portal and timeserver:
|
|
![wifi](/images/analysis/wifi_1.png)
|
|
|
|
SUPL Server are not used. A-GPS data is fetched via XTRA Server:
|
|
![wifi](/images/analysis/wifi_2.png)
|
|
|
|
No traces of privacy violations here. See [full bootup wifi dump](/images/analysis/bootup.pcapng) for wireshark.
|