Live data from Hacker News

Mobile carriers can get your GPS location

an.dywa.ng

331–340 of 622 posts

Re: Mobile carriers can get your GPS location

#331
post #132

Earlier quoted context omitted.

Is it open source?

Meshcore isn't, the firmwares are proprietary. Meshtastic is, but they whine about trademark stuff all the time and cry when anyone mentions Meshcore in their channels. LoRa radios themselves are all proprietary Semtech turf. I guess it's possible to run over 2.4ghz but the range predictably sucks compared to 900mhz.

Meshcore is open source. It’s « some » of the apps that are not.

https://github.com/meshcore-dev/MeshCore

Re: Mobile carriers can get your GPS location

#332

Earlier quoted context omitted.

This isn't great advice if it's supposed to be an alternative to text messaging with a carrier (especially if you're using encrypted RCS). For one, meshcore doesn't do a fantastic job of protecting metadata. Advertisements include your public key, and if I'm reading this[0] right, your GPS coordinates . Second, the default public channel uses effectively no encryption at all. Moreover, the network doesn't exhaustivel…

You aren’t reading this right. Gps sharing is off by default on meshcore.

Still falls flat when it comes to metadata privacy. Just having multiple nodes distributed geographically that listen for packets would give you the ability to narrow down the location of a specific identity dramatically, even if you're not in range of their device.

Re: Mobile carriers can get your GPS location

#333

This community should be talking about meshcore more imho. It's a peer to peer network based on Lora. It really only allows text messaging but with up to 20km hops between peers coverage is surprisingly huge. Incredibly useful if you go hiking with friends (if you get split up you can still stay in touch). See https://eastmesh.au/ and scroll down to the map for the Victoria and now more widely Australia network that'…

This isn't great advice if it's supposed to be an alternative to text messaging with a carrier (especially if you're using encrypted RCS). For one, meshcore doesn't do a fantastic job of protecting metadata. Advertisements include your public key, and if I'm reading this[0] right, your GPS coordinates . Second, the default public channel uses effectively no encryption at all. Moreover, the network doesn't exhaustivel…

All telemetry is off by default, you have to explicitly tune it on and then optionally permit specific contacts to poll it.

The PKI is basic because these networks are tiny and merging. And running on tiny computers ($5 boards with no display)

Public channel is public and it uses the default encryption key because it's a default channel, so by definition everyone is invited to participate. Not sure what your critique is.

And no, it's not trying to be signal. It's also currently less reliable.

But it's still safer than Sms, by a country mile.

Re: Mobile carriers can get your GPS location

#334

This community should be talking about meshcore more imho. It's a peer to peer network based on Lora. It really only allows text messaging but with up to 20km hops between peers coverage is surprisingly huge. Incredibly useful if you go hiking with friends (if you get split up you can still stay in touch). See https://eastmesh.au/ and scroll down to the map for the Victoria and now more widely Australia network that'…

If you go hiking with friends who aren't total nerds, the proprietary options offer a more consumer-grade experience. (ie, usable by them)

If you go hiking with a bunch of people into the backcountry, you don't want to rely on the cellular network.

Handheld radios, meshtatic (not meshcore), and in 5 minutes you're set up and good to depart. Or ideally inreach indeed.

Re: Mobile carriers can get your GPS location

#335

Earlier quoted context omitted.

In the United States, qualified immunity is a legal principle of federal law that grants government officials performing discretionary (optional) functions immunity from lawsuits for damages unless the plaintiff shows that the official violated "clearly established statutory or constitutional rights of which a reasonable person would have known". Under 42 USC § 1983, a plaintiff can sue for damages when state officia…

But for federal officials, individuals don’t have standing right?

It's more like when the federal government passed a law giving people a recourse for when state officials violate their rights they did not write the law to (or purposefully wrote it to not) include the federal government.

Re: Mobile carriers can get your GPS location

#336

This community should be talking about meshcore more imho. It's a peer to peer network based on Lora. It really only allows text messaging but with up to 20km hops between peers coverage is surprisingly huge. Incredibly useful if you go hiking with friends (if you get split up you can still stay in touch). See https://eastmesh.au/ and scroll down to the map for the Victoria and now more widely Australia network that'…

I really want to get into these Lora based mesh tools but the range in my experience is terrible. Maybe I'm doing something wrong, maybe it's a lack of nodes in my area. I just tested the other day. I'm in the midwest US so it's winter, no leaves. I managed to get about a quarter mile before my two portable nodes couldn't talk to each other. T-Echo with muziworks whip antenna. Without a bunch of solidly placed, high…

Height is might.

I couldn't get ANYTHING on my first/test ESP32 (Heltec v2).

Anything. I didn't see any packets. Then I finally heard one station later when I held it high on the upper floor.

The I hanged it at the top of my roof and I currently have almost 130 repeaters and room servers.

In your scenario a couple of 5W handhelds woukd work better.

But I agree the usabity is very limited. This is why I think of hanging a couple of guerilla solar repeaters in my neighborhood :)

Re: Mobile carriers can get your GPS location

#337

Earlier quoted context omitted.

Meshcore and -tastic have the huge problem that the encryption keys are bound to the device and not the app.

I agree, there's way too much going on in the firmware, just make a dumb Lora-bluetooth bridge. Hell, just integrate a Lora radio in a phone.

The base software is open, you could potentially do it!

:)

Re: Mobile carriers can get your GPS location

#338
post #319

Earlier quoted context omitted.

Im a little confused. Do you not believe there should be courts at all?

What I don’t believe is that courts should have the power to force anything to happen just by signing a piece of paper.

So how should it work?

Re: Mobile carriers can get your GPS location

#339
post #83

Earlier quoted context omitted.

$20? These networks do not try to hide your location and triangulating known frequencies is trivial.

How trivial is it, really? These are spread spectrum devices that could have very sparse duty cycles. If you sending only millisecond bursts a couple of times an hour, for telemetry and whatnot, it would seem pretty hard to get a good fix, especially when moving. I haven't analyzed lora traffic, so just talking out of my ass.

With a couple of GPS-synchronized receivers stationed in an area, child's play. LoRA airtime is extraordinarily long for common spreading factors.

Re: Mobile carriers can get your GPS location

#340

Earlier quoted context omitted.

This isn't great advice if it's supposed to be an alternative to text messaging with a carrier (especially if you're using encrypted RCS). For one, meshcore doesn't do a fantastic job of protecting metadata. Advertisements include your public key, and if I'm reading this[0] right, your GPS coordinates . Second, the default public channel uses effectively no encryption at all. Moreover, the network doesn't exhaustivel…

All telemetry is off by default, you have to explicitly tune it on and then optionally permit specific contacts to poll it. The PKI is basic because these networks are tiny and merging. And running on tiny computers ($5 boards with no display) Public channel is public and it uses the default encryption key because it's a default channel, so by definition everyone is invited to participate. Not sure what your critique…

It's bad advice because:

1. Telling someone to use one of these devices because their phone carrier might look up their location is silly in the first place, because meshcore doesn't even eliminate the possibility of being tracked geographically.

2. It protects your messages better than SMS but if you care about the privacy of your messages, it's infinitely worse advice than suggesting someone use Signal or another app that actually replaces SMS securely.

Post reply on HN